Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/3137392e3139302e36342e302f31392d3139203d3e20323632343431.roa
File:                     3137392e3139302e36342e302f31392d3139203d3e20323632343431.roa (raw, json)
Hash identifier:          wbeeeNtYRXPcmZEolwLWTsarTcJOYhfnuHN9b0+evWw=
Subject key identifier:   25:C3:A4:08:4E:87:00:89:CD:94:6B:24:CA:74:9A:B9:9C:76:B1:F8
Certificate issuer:       /CN=678F46772FCBBCB74F32E1F308389D268F55A45F
Certificate serial:       46A9EAB83F05A57B873FB131EE718C8E988A0C88
Authority key identifier: 67:8F:46:77:2F:CB:BC:B7:4F:32:E1:F3:08:38:9D:26:8F:55:A4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/678F46772FCBBCB74F32E1F308389D268F55A45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/3137392e3139302e36342e302f31392d3139203d3e20323632343431.roa
Signing time:             Wed 28 Feb 2024 13:17:33 +0000
ROA not before:           Wed 28 Feb 2024 13:12:33 +0000
ROA not after:            Wed 26 Feb 2025 13:17:33 +0000
asID:                     262441
IP address blocks:        179.190.64.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Mon 11 Mar 2024 19:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a9:ea:b8:3f:05:a5:7b:87:3f:b1:31:ee:71:8c:8e:98:8a:0c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678F46772FCBBCB74F32E1F308389D268F55A45F
        Validity
            Not Before: Feb 28 13:12:33 2024 GMT
            Not After : Feb 26 13:17:33 2025 GMT
        Subject: CN=25C3A4084E870089CD946B24CA749AB99C76B1F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:5b:3d:05:fa:c5:8b:1e:5c:7e:2d:3f:81:
                    24:34:36:a6:3f:36:8b:a5:28:b6:dd:cd:fc:87:dd:
                    da:90:85:8a:51:3e:a8:9f:79:cd:24:ac:44:be:1a:
                    dd:6c:b7:40:cc:de:bf:9b:29:44:4f:3d:b6:43:b9:
                    cf:86:0d:5c:f7:4e:0a:36:c6:84:9b:9c:f5:36:d3:
                    6c:00:1d:a1:6f:dc:14:d2:9f:d3:14:03:10:7f:f1:
                    08:48:d7:f4:5c:c9:ae:b3:04:a7:ae:f4:68:81:b4:
                    93:fc:cf:a1:6c:cb:9f:50:33:34:7d:da:0f:61:65:
                    00:aa:73:67:72:2e:e6:57:a4:f1:d9:30:0d:73:c1:
                    93:bc:5b:5f:71:6e:dd:96:4b:ab:4e:67:4b:f1:a9:
                    bd:2a:b4:ad:0a:8d:0e:12:ad:ff:92:be:b0:42:e4:
                    e3:fd:bf:a3:6f:b9:32:bd:ac:b5:e2:2e:fa:7b:1c:
                    e1:90:bc:ea:8d:11:5e:38:eb:43:6b:e1:af:ad:08:
                    36:53:fb:43:c4:55:99:9b:2b:8d:a5:9c:e5:c1:3c:
                    bf:e1:f9:a2:d0:2c:29:76:6c:30:ea:a3:68:f3:1c:
                    93:50:3b:38:a8:ca:92:c7:8f:0b:33:cb:96:35:7f:
                    ab:4c:e3:d9:3e:e8:7b:05:6c:5b:db:8f:7f:48:b3:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C3:A4:08:4E:87:00:89:CD:94:6B:24:CA:74:9A:B9:9C:76:B1:F8
            X509v3 Authority Key Identifier:
                keyid:67:8F:46:77:2F:CB:BC:B7:4F:32:E1:F3:08:38:9D:26:8F:55:A4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/678F46772FCBBCB74F32E1F308389D268F55A45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/678F46772FCBBCB74F32E1F308389D268F55A45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/3137392e3139302e36342e302f31392d3139203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.190.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:d4:99:f9:60:3a:7e:f9:3e:26:db:01:e1:57:3f:24:6e:85:
         60:4d:fd:18:5a:2f:87:74:81:bc:4b:01:1d:79:26:36:22:02:
         6e:5d:c0:7e:91:d9:16:70:3f:73:cc:e4:80:ac:ee:2c:3f:56:
         21:62:63:e9:28:4c:71:1b:1f:fe:49:b0:11:e6:b0:ab:2b:b6:
         f8:ee:c6:0e:b6:b8:76:75:af:a7:01:87:f4:66:ce:1d:83:7d:
         4a:a7:2d:39:eb:c3:af:be:0e:cf:7e:e2:2b:bc:ac:7a:ec:83:
         fd:b3:0a:7a:63:f8:93:75:7e:bf:b5:71:fa:32:a8:b7:53:f5:
         03:b1:1d:cd:16:b7:12:ef:0a:05:52:5d:c7:68:75:2a:74:a3:
         ba:5d:a0:90:e5:b0:7b:f2:94:0f:4f:c2:33:81:b4:b3:6f:53:
         e3:5c:39:32:28:5a:28:35:d4:f9:fb:d7:02:22:a4:2d:96:c9:
         2d:64:11:8a:b3:62:10:cf:c4:8b:91:1e:ff:b3:e2:e2:88:29:
         d1:86:8f:ad:63:a4:80:ab:ae:c1:77:17:5b:48:ef:ae:fe:ae:
         7d:64:fc:91:fe:e3:01:5b:61:cf:9b:5b:2e:a2:74:aa:81:b0:
         16:74:17:ae:db:80:36:0b:15:7a:d6:ff:77:60:46:ef:65:3c:
         8f:13:f3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 23:22:36 2024 by rpki-client on console-ams.rpki-client.org