Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137362e302f32322d3232203d3e20323731343636.roa
File:                     3230312e34392e3137362e302f32322d3232203d3e20323731343636.roa (raw, json)
Hash identifier:          ZO3N8pWJHzYydXdlr3R4tJnkdRepyFfZ6xuEuVT8oTU=
Subject key identifier:   28:B2:8D:13:1C:21:58:45:8D:A2:80:F3:0C:20:7A:41:95:C8:AF:0E
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       4BC77EA30EFC5370237156C5A38326139638D9BF
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137362e302f32322d3232203d3e20323731343636.roa
Signing time:             Thu 04 Apr 2024 14:22:12 +0000
ROA not before:           Thu 04 Apr 2024 14:17:12 +0000
ROA not after:            Thu 03 Apr 2025 14:22:12 +0000
asID:                     271466
IP address blocks:        201.49.176.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 05 Jul 2024 15:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c7:7e:a3:0e:fc:53:70:23:71:56:c5:a3:83:26:13:96:38:d9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Apr  4 14:17:12 2024 GMT
            Not After : Apr  3 14:22:12 2025 GMT
        Subject: CN=28B28D131C2158458DA280F30C207A4195C8AF0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:cc:78:4f:0e:91:f2:8e:4f:fc:84:8b:62:
                    b8:e1:e1:69:8d:87:e7:e4:3f:61:9d:d8:5f:e1:1d:
                    61:bb:28:ea:f2:c4:48:c5:6b:fb:ba:4b:9f:67:6b:
                    16:33:64:c2:ca:46:11:47:67:ac:f7:4e:a1:86:6e:
                    58:a4:73:6b:33:89:ed:e2:a3:13:e4:3d:28:f9:77:
                    4e:54:c1:df:5d:85:70:84:b3:d5:72:d1:35:af:77:
                    47:ad:79:c3:10:da:6d:f3:0f:d1:75:50:9f:d0:ed:
                    79:5e:f1:53:54:64:a8:80:d5:91:aa:ff:96:19:45:
                    31:a6:0d:3f:d6:87:63:63:60:d8:1d:db:51:d2:86:
                    87:90:d0:f8:ac:ff:89:ae:8b:8c:f3:5c:06:9e:bc:
                    11:bf:df:19:0d:44:7b:ad:41:6d:ef:4a:8e:9e:d5:
                    71:99:4f:01:93:86:75:f1:5f:29:27:3c:36:d3:e1:
                    d0:4d:4b:f6:e9:7c:30:b1:9d:77:54:65:71:fa:c2:
                    78:9d:89:95:05:86:97:b7:e8:50:81:ed:b7:e1:c4:
                    aa:19:86:9a:2d:24:19:20:2c:de:44:7c:8f:73:75:
                    3e:84:52:2f:05:1a:0b:f8:36:f9:af:35:39:6a:d8:
                    98:c1:4c:20:34:89:0c:04:e2:3e:bd:35:f8:dc:23:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B2:8D:13:1C:21:58:45:8D:A2:80:F3:0C:20:7A:41:95:C8:AF:0E
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137362e302f32322d3232203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:f9:05:ee:ac:0d:c6:1e:af:16:82:25:0d:57:82:34:a4:f3:
         c0:67:15:36:fe:97:02:a3:ef:40:a4:3a:00:52:1b:96:63:ee:
         11:ec:f1:7c:0a:9a:10:7b:07:77:89:34:bb:65:60:da:b8:cc:
         b7:87:2f:ba:54:4d:59:b5:9d:60:0f:5a:d3:e1:c2:5c:fc:17:
         30:62:36:dd:cb:ff:c6:77:74:fa:48:0e:14:8c:1f:a8:f0:da:
         5c:f1:f2:94:06:61:dc:37:3d:30:45:4e:e4:f7:10:ae:f0:4d:
         f0:e7:2f:d2:8f:3c:72:38:b4:52:27:e6:30:bd:a2:52:ff:c1:
         19:e9:c8:42:9a:25:11:89:ee:81:7c:c0:03:e2:be:6d:53:d4:
         21:84:b5:98:f4:65:58:ff:ac:29:50:13:5e:d0:2e:1e:80:97:
         b1:62:19:ce:17:c8:d2:b2:dc:65:8e:df:8a:05:55:18:67:b1:
         d2:b7:1c:25:ef:cc:98:69:a0:a9:50:48:01:e4:42:26:bd:d5:
         7c:f0:98:9f:2b:f2:44:5b:9e:cb:a4:1e:c2:38:66:b7:f8:f7:
         2f:d7:cd:98:18:d2:9b:f4:91:82:4c:2c:61:33:de:eb:dc:86:
         af:57:65:c1:71:87:e3:3f:33:42:84:ef:b4:e6:be:cc:c3:7f:
         37:e5:ef:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 17:25:50 2024 by rpki-client on console-fra.rpki-client.org