Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/3136382e39302e34302e302f32342d3234203d3e20323635323636.roa
File:                     3136382e39302e34302e302f32342d3234203d3e20323635323636.roa (raw, json)
Hash identifier:          5U3+mtu1ufrK+7rjm+yFtK526KsQr8qjt0lGAH9F7bw=
Subject key identifier:   A9:F3:3A:DF:1C:61:C1:10:79:07:0B:2B:7C:38:F6:24:B3:E6:D2:A6
Certificate issuer:       /CN=40B2EE8786079947D0F70A861B591AFA74854AA7
Certificate serial:       4F91FF3B5426106DEA89BDC8DF9DC904D55B8B25
Authority key identifier: 40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/3136382e39302e34302e302f32342d3234203d3e20323635323636.roa
Signing time:             Thu 18 Apr 2024 20:24:41 +0000
ROA not before:           Thu 18 Apr 2024 20:19:41 +0000
ROA not after:            Thu 17 Apr 2025 20:24:41 +0000
asID:                     265266
IP address blocks:        168.90.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:91:ff:3b:54:26:10:6d:ea:89:bd:c8:df:9d:c9:04:d5:5b:8b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B2EE8786079947D0F70A861B591AFA74854AA7
        Validity
            Not Before: Apr 18 20:19:41 2024 GMT
            Not After : Apr 17 20:24:41 2025 GMT
        Subject: CN=A9F33ADF1C61C11079070B2B7C38F624B3E6D2A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:ea:28:4c:d7:fc:3f:bb:9b:a7:aa:4f:0c:
                    dd:6a:68:12:60:0c:b2:0e:c8:5e:bd:25:81:74:f7:
                    9c:b2:e0:45:13:e6:0f:0a:32:d6:c4:3c:7e:f3:e1:
                    fe:eb:bc:d3:17:48:21:80:06:78:d7:8a:74:2a:85:
                    84:18:20:78:96:1f:9f:04:b6:a4:f2:9d:f2:a2:32:
                    4e:b7:e9:c1:d2:7b:2b:07:20:c4:ee:fa:06:c2:1d:
                    ca:56:60:7e:2a:b4:22:f2:d3:af:3a:f5:3f:04:82:
                    a9:40:42:8e:9d:96:cb:15:01:d0:12:4c:39:62:88:
                    6b:66:33:cf:4b:55:b6:06:8a:b4:7d:e8:95:73:9d:
                    45:b3:89:fe:55:5a:0e:70:bc:cc:96:bb:06:4a:02:
                    a5:26:39:89:0f:67:87:31:3c:ae:19:54:1d:93:d7:
                    c2:4d:9b:e9:c2:59:f4:f2:df:27:fd:fb:8d:2b:fd:
                    86:19:be:e4:18:58:cd:26:89:5f:fe:d6:1c:45:70:
                    7e:46:d9:1e:39:ea:3d:32:60:c9:bc:b5:1b:a4:51:
                    17:00:86:92:51:47:71:d3:fb:8d:f9:f2:47:30:2a:
                    e6:20:1f:b1:a9:bf:8a:2f:c8:b1:13:00:5f:39:44:
                    bc:88:4b:68:e2:ef:73:00:51:bd:31:43:de:d9:61:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F3:3A:DF:1C:61:C1:10:79:07:0B:2B:7C:38:F6:24:B3:E6:D2:A6
            X509v3 Authority Key Identifier:
                keyid:40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/3136382e39302e34302e302f32342d3234203d3e20323635323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d6:8e:3a:3c:ea:ed:bc:ae:e8:bb:53:32:3f:0e:b9:92:7b:
         bf:73:a1:42:b1:f9:f3:61:e4:a0:69:09:4d:ce:98:56:a7:64:
         f7:8d:d1:28:23:ae:b9:66:8a:d9:f3:92:dd:04:56:1f:6a:96:
         9e:7a:43:ad:e3:ac:25:21:7e:39:3a:67:fd:2a:53:f8:a5:96:
         ec:ef:0c:66:26:34:32:c6:26:9b:3a:eb:cf:52:19:63:80:25:
         46:e4:9e:55:19:6e:2f:c7:3e:5f:4c:9d:af:4a:d6:2a:3d:d8:
         b2:c0:bc:70:6d:b3:3a:62:89:84:b8:57:ad:6a:1d:6d:67:81:
         1c:18:99:52:00:28:23:8a:ba:69:ef:26:8b:26:7f:ce:f6:80:
         90:2c:30:81:4f:a3:af:26:ed:29:8e:d6:8e:f1:14:d8:66:25:
         1b:69:3f:68:87:a5:5a:9b:f4:85:29:76:94:cb:15:65:3e:a4:
         24:7a:3c:27:a5:89:8e:e7:21:56:b2:03:1d:35:d4:2e:c5:15:
         cf:e1:b1:49:0d:f6:b1:d1:c6:03:e3:31:a1:e9:1e:6a:b9:89:
         52:2f:51:82:b7:f4:c7:7f:a2:cc:59:9b:9d:31:d8:de:ff:4c:
         cb:20:6f:94:f4:82:eb:8e:14:e8:67:34:c0:5a:71:fa:6b:53:
         17:3f:ba:38
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUT5H/O1QmEG3qib3I353JBNVbiyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBCMkVFODc4NjA3OTk0N0QwRjcwQTg2MUI1OTFBRkE3
NDg1NEFBNzAeFw0yNDA0MTgyMDE5NDFaFw0yNTA0MTcyMDI0NDFaMDMxMTAvBgNV
BAMTKEE5RjMzQURGMUM2MUMxMTA3OTA3MEIyQjdDMzhGNjI0QjNFNkQyQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5+ooTNf8P7ubp6pPDN1qaBJg
DLIOyF69JYF095yy4EUT5g8KMtbEPH7z4f7rvNMXSCGABnjXinQqhYQYIHiWH58E
tqTynfKiMk636cHSeysHIMTu+gbCHcpWYH4qtCLy06869T8EgqlAQo6dlssVAdAS
TDliiGtmM89LVbYGirR96JVznUWzif5VWg5wvMyWuwZKAqUmOYkPZ4cxPK4ZVB2T
18JNm+nCWfTy3yf9+40r/YYZvuQYWM0miV/+1hxFcH5G2R456j0yYMm8tRukURcA
hpJRR3HT+4358kcwKuYgH7Gpv4ovyLETAF85RLyIS2ji73MAUb0xQ97ZYfPjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqfM63xxhwRB5BwsrfDj2JLPm0qYwHwYDVR0j
BBgwFoAUQLLuh4YHmUfQ9wqGG1ka+nSFSqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFl2VjZYTkpqdHR1bkxmaERTZkxvYXB0eFBkYmJFZE1obmZuUTZnV1VC
NTgvMC80MEIyRUU4Nzg2MDc5OTQ3RDBGNzBBODYxQjU5MUFGQTc0ODU0QUE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQjJFRTg3ODYwNzk5NDdE
MEY3MEE4NjFCNTkxQUZBNzQ4NTRBQTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRZdlY2WE5KanR0dW5MZmhEU2ZMb2FwdHhQZGJiRWRNaG5mblE2Z1dVQjU4LzAv
MzEzNjM4MmUzOTMwMmUzNDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzIzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqFooMA0GCSqGSIb3DQEBCwUAA4IBAQAx1o46POrt
vK7ou1MyPw65knu/c6FCsfnzYeSgaQlNzphWp2T3jdEoI665ZorZ85LdBFYfapae
ekOt46wlIX45Omf9KlP4pZbs7wxmJjQyxiabOuvPUhljgCVG5J5VGW4vxz5fTJ2v
StYqPdiywLxwbbM6YomEuFetah1tZ4EcGJlSACgjirpp7yaLJn/O9oCQLDCBT6Ov
Ju0pjtaO8RTYZiUbaT9oh6Vam/SFKXaUyxVlPqQkejwnpYmO5yFWsgMdNdQuxRXP
4bFJDfax0cYD4zGh6R5quYlSL1GCt/THf6LMWZudMdje/0zLIG+U9ILrjhToZzTA
WnH6a1MXP7o4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org