Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/3139312e3234332e37312e302f32342d3234203d3e20323633343937.roa
File:                     3139312e3234332e37312e302f32342d3234203d3e20323633343937.roa (raw, json)
Hash identifier:          FD7cFQzrlkWwEm/K0ZxqyGLYJJqpl902fqs+SSfAZ/Y=
Subject key identifier:   87:B7:46:12:4B:55:64:AA:F8:05:3A:13:53:7B:46:9B:93:AC:E2:CC
Certificate issuer:       /CN=DE055B350F88885896865725AEC9F031A7462E90
Certificate serial:       2A613A323288DCF826C706247CFACBB98B0C83BA
Authority key identifier: DE:05:5B:35:0F:88:88:58:96:86:57:25:AE:C9:F0:31:A7:46:2E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE055B350F88885896865725AEC9F031A7462E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/3139312e3234332e37312e302f32342d3234203d3e20323633343937.roa
Signing time:             Tue 23 Apr 2024 19:31:38 +0000
ROA not before:           Tue 23 Apr 2024 19:26:38 +0000
ROA not after:            Tue 22 Apr 2025 19:31:38 +0000
asID:                     263497
IP address blocks:        191.243.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:61:3a:32:32:88:dc:f8:26:c7:06:24:7c:fa:cb:b9:8b:0c:83:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE055B350F88885896865725AEC9F031A7462E90
        Validity
            Not Before: Apr 23 19:26:38 2024 GMT
            Not After : Apr 22 19:31:38 2025 GMT
        Subject: CN=87B746124B5564AAF8053A13537B469B93ACE2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3c:e3:df:ee:6e:fd:52:1f:4a:c4:5b:17:b1:
                    78:32:a8:74:c2:d0:e3:6b:aa:69:18:ce:2c:6e:f3:
                    ba:88:e1:74:6f:b5:10:de:0f:ee:f5:26:0b:6b:ca:
                    9f:d3:09:d9:4f:91:f5:22:0a:ca:87:44:4e:9d:27:
                    62:b8:7d:1d:1f:97:f1:8d:cc:f9:1a:b2:8c:1e:80:
                    22:58:a5:1e:1e:6c:8c:a4:45:1f:fc:70:9d:50:14:
                    1d:99:24:9d:80:01:40:82:7f:99:15:4b:ab:14:99:
                    e4:7f:e1:72:1d:2f:8c:00:81:d4:53:1c:43:fe:b9:
                    36:42:93:8a:f2:00:31:20:83:e3:e0:be:b4:08:51:
                    50:cf:fb:44:43:b5:c3:67:cd:5b:e6:f2:9b:ba:5d:
                    dd:68:d3:c4:42:a6:76:99:1f:90:0a:b0:f3:9c:65:
                    c1:3c:f6:d0:26:b7:07:a2:2a:cd:80:0e:ba:7c:21:
                    cd:27:db:9a:63:93:50:a4:87:91:28:52:6c:a9:71:
                    96:5c:ec:ab:6e:28:3b:41:93:b1:10:8e:cf:f2:b0:
                    c1:f5:59:84:5d:2a:2d:60:5f:ce:f1:c6:aa:47:b1:
                    3a:21:f9:a6:2a:f5:cf:36:14:e7:e8:47:9b:9b:a2:
                    52:ca:25:6e:79:4c:dd:b6:c0:22:62:c3:96:54:71:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B7:46:12:4B:55:64:AA:F8:05:3A:13:53:7B:46:9B:93:AC:E2:CC
            X509v3 Authority Key Identifier:
                keyid:DE:05:5B:35:0F:88:88:58:96:86:57:25:AE:C9:F0:31:A7:46:2E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/DE055B350F88885896865725AEC9F031A7462E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE055B350F88885896865725AEC9F031A7462E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/3139312e3234332e37312e302f32342d3234203d3e20323633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:51:10:17:2e:15:d2:84:ce:cf:86:84:30:93:35:a7:d7:2d:
         d5:07:b2:24:f0:b8:33:14:56:b5:8e:5b:c9:18:54:db:35:9d:
         8d:85:25:7d:d5:1b:b5:f5:4d:96:85:a8:fa:56:42:a0:da:8a:
         8a:ea:12:b1:08:e3:ef:86:cd:9f:6f:09:51:33:8a:96:b9:31:
         ee:3c:4c:88:8a:fc:1c:5a:7e:5a:af:bd:d7:dc:e0:32:61:e0:
         d4:d6:30:e8:e1:e6:e0:ee:eb:25:fc:b4:b1:50:87:df:b8:36:
         41:00:46:fd:38:39:42:d0:ce:0d:7a:30:18:d2:03:83:44:9e:
         ee:3e:f1:38:a5:eb:24:69:71:a6:e5:b2:d0:17:73:21:80:e7:
         49:c1:9d:4f:08:9b:82:68:b1:d6:a6:7d:6e:4b:ff:8e:71:d0:
         83:06:d3:af:db:34:43:c6:7e:a9:ec:3a:60:e5:b4:1e:7e:5f:
         15:ff:70:f6:fb:f2:da:19:12:5a:50:5d:4a:88:cb:a1:eb:e2:
         04:78:6e:26:ca:2c:8f:83:5d:81:27:39:38:7d:de:c4:a7:3c:
         63:89:c7:0d:30:2e:68:02:5b:6d:7b:7c:5a:75:a1:ae:8d:64:
         e5:58:c0:2e:12:4f:b3:eb:19:24:d8:d4:f0:33:42:e7:5c:dd:
         58:74:4c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org