Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/3139312e3234332e36382e302f32342d3234203d3e20323633343937.roa
File:                     3139312e3234332e36382e302f32342d3234203d3e20323633343937.roa (raw, json)
Hash identifier:          UCiZ9c4PIMqoSVhi0+GapbQnols5vk5kBkj4vzCCxf8=
Subject key identifier:   FC:29:54:FA:47:96:6E:C7:DC:77:47:BD:D6:3D:80:82:3B:48:24:E3
Certificate issuer:       /CN=DE055B350F88885896865725AEC9F031A7462E90
Certificate serial:       0FCCB9733CFD7E4036CAD177D01B68697D6ABF15
Authority key identifier: DE:05:5B:35:0F:88:88:58:96:86:57:25:AE:C9:F0:31:A7:46:2E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE055B350F88885896865725AEC9F031A7462E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/3139312e3234332e36382e302f32342d3234203d3e20323633343937.roa
Signing time:             Tue 23 Apr 2024 19:31:33 +0000
ROA not before:           Tue 23 Apr 2024 19:26:33 +0000
ROA not after:            Tue 22 Apr 2025 19:31:33 +0000
asID:                     263497
IP address blocks:        191.243.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cc:b9:73:3c:fd:7e:40:36:ca:d1:77:d0:1b:68:69:7d:6a:bf:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE055B350F88885896865725AEC9F031A7462E90
        Validity
            Not Before: Apr 23 19:26:33 2024 GMT
            Not After : Apr 22 19:31:33 2025 GMT
        Subject: CN=FC2954FA47966EC7DC7747BDD63D80823B4824E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:f3:9a:a8:4c:25:54:4c:d7:4a:ad:2a:ce:
                    ee:dc:a1:b6:b6:5b:8b:11:df:f7:fb:7b:b1:b8:77:
                    40:20:76:1c:1d:fa:dd:c4:1b:d0:0f:97:0c:47:62:
                    76:40:64:73:1a:c3:5e:ad:7c:33:41:91:40:59:45:
                    7c:53:2d:23:6f:7a:07:02:42:53:d8:50:57:3d:48:
                    5e:21:8c:93:a7:b2:d4:0b:95:8e:d2:72:95:6f:3d:
                    8a:21:49:f5:73:bb:2b:2c:ea:69:9f:b3:fd:14:19:
                    fc:17:08:4a:b2:35:66:1a:14:5d:f5:3a:9d:2b:69:
                    98:8d:ba:e8:05:33:f9:8f:f3:a1:1c:e3:4c:c2:0d:
                    27:f6:a2:7b:b4:cf:72:18:d4:fa:3f:51:a4:f2:b9:
                    67:bf:45:ca:e2:6d:1e:90:c1:4a:67:67:e0:d3:b5:
                    65:f3:0f:4f:cf:35:9a:84:f5:89:88:8c:f4:93:3b:
                    90:7d:69:44:e5:f2:a1:4b:02:d2:fe:94:59:58:a9:
                    71:76:91:93:29:2c:89:d1:e9:b6:c5:9e:ee:7a:ca:
                    5e:58:58:ab:4d:8f:a6:b4:40:d7:5b:60:80:b1:6f:
                    0e:7f:e6:32:c8:41:cd:6a:7b:f5:65:4b:91:81:91:
                    49:8e:b0:f4:80:c7:96:2a:b2:91:e2:24:3f:93:dc:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:29:54:FA:47:96:6E:C7:DC:77:47:BD:D6:3D:80:82:3B:48:24:E3
            X509v3 Authority Key Identifier:
                keyid:DE:05:5B:35:0F:88:88:58:96:86:57:25:AE:C9:F0:31:A7:46:2E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/DE055B350F88885896865725AEC9F031A7462E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE055B350F88885896865725AEC9F031A7462E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/3139312e3234332e36382e302f32342d3234203d3e20323633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:b1:54:eb:15:0c:47:84:22:97:f1:4d:42:22:e0:50:dc:81:
         c4:72:e1:f5:b2:2a:15:54:be:a7:33:a6:d6:40:4e:c3:d4:06:
         58:55:de:7f:90:02:72:5b:26:1d:80:ef:93:02:e8:79:76:dc:
         10:24:25:ca:fe:43:6e:32:e1:24:a0:45:36:13:bd:58:5e:60:
         0a:44:2e:91:99:06:ad:31:3d:a9:64:7b:c6:0b:ff:bd:c6:1c:
         e5:71:a0:03:45:6b:2f:da:18:2b:5a:dc:54:f9:c4:90:0f:de:
         77:0b:87:5d:43:d4:0e:ce:3f:17:82:18:8a:29:01:ff:32:13:
         ab:d1:1e:20:58:30:ff:d3:03:b9:fd:37:db:58:a1:13:09:17:
         97:a8:bc:08:7f:3d:18:d9:bd:b8:5a:8c:e5:98:57:54:9a:b9:
         c3:f3:6e:2e:42:21:f5:a6:e8:b7:ff:74:db:17:34:e9:3c:51:
         5a:18:b3:85:30:97:57:0c:6d:8f:a7:1d:7d:9e:41:80:4a:68:
         03:ef:fa:c8:3d:91:ae:5f:38:f8:53:66:10:70:7f:4d:67:9d:
         70:56:4a:63:a8:5a:11:a9:d5:6d:62:07:ae:ff:66:91:4a:ad:
         21:ff:6c:f1:d9:a3:ff:2f:b6:ce:7a:5d:95:70:d7:6b:66:16:
         05:a0:50:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org