Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/3136382e39302e34322e302f32342d3234203d3e20323635323636.roa
File:                     3136382e39302e34322e302f32342d3234203d3e20323635323636.roa (raw, json)
Hash identifier:          rgBTIefbAxS+8Ej5vhO9lWsMSiIegXiIAGopF5kP6No=
Subject key identifier:   C0:0E:F5:4B:CB:28:A8:2A:C7:D4:86:19:4F:F7:81:51:1B:26:14:08
Certificate issuer:       /CN=40B2EE8786079947D0F70A861B591AFA74854AA7
Certificate serial:       6DA409BDFF5DD61C1464F11C9EE89CE25E6A4398
Authority key identifier: 40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/3136382e39302e34322e302f32342d3234203d3e20323635323636.roa
Signing time:             Thu 18 Apr 2024 20:24:56 +0000
ROA not before:           Thu 18 Apr 2024 20:19:56 +0000
ROA not after:            Thu 17 Apr 2025 20:24:56 +0000
asID:                     265266
IP address blocks:        168.90.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a4:09:bd:ff:5d:d6:1c:14:64:f1:1c:9e:e8:9c:e2:5e:6a:43:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B2EE8786079947D0F70A861B591AFA74854AA7
        Validity
            Not Before: Apr 18 20:19:56 2024 GMT
            Not After : Apr 17 20:24:56 2025 GMT
        Subject: CN=C00EF54BCB28A82AC7D486194FF781511B261408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2f:b7:f0:85:5f:28:ec:52:7f:e6:e5:06:30:
                    9e:aa:82:e6:0b:8c:59:b8:0e:fa:bc:07:bd:68:72:
                    e9:37:fb:69:74:0d:c7:29:b0:52:e2:03:a0:f1:08:
                    9c:5f:65:11:08:b4:ff:53:0d:8d:e4:bd:bc:a6:a7:
                    b1:b6:a0:0d:da:ef:1d:6d:8d:90:d5:ed:76:3f:16:
                    bf:b5:4f:e7:ff:e3:05:44:25:91:f8:12:dd:02:f9:
                    0c:57:fd:dd:a2:e3:fb:98:64:ad:01:67:5f:0d:19:
                    43:2c:5b:23:8a:ac:28:52:12:f3:21:75:d6:e2:d1:
                    35:8a:06:b5:9d:fc:7c:1f:96:84:ca:e0:cb:ae:ed:
                    17:c9:df:71:6c:4e:00:09:b9:87:63:a8:7b:81:6b:
                    7c:ec:0d:a4:64:d2:c5:3d:a8:4c:65:de:8a:10:dd:
                    ef:f1:9c:bc:8e:eb:31:1a:c8:0b:2d:8c:51:20:e9:
                    49:ac:68:cb:f7:65:63:99:da:7a:03:80:45:91:fa:
                    54:0f:e7:25:bf:d5:ee:20:80:6c:88:4b:4e:5f:f4:
                    3d:75:da:96:43:16:62:07:57:01:c8:bf:e8:42:e4:
                    bc:bd:1e:98:1b:3e:ee:3d:d7:7f:bd:33:f8:03:00:
                    40:c1:57:db:68:ae:f2:32:f4:74:42:38:73:0b:2e:
                    a6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0E:F5:4B:CB:28:A8:2A:C7:D4:86:19:4F:F7:81:51:1B:26:14:08
            X509v3 Authority Key Identifier:
                keyid:40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/3136382e39302e34322e302f32342d3234203d3e20323635323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:c1:26:b9:25:2d:44:62:c0:8e:db:65:40:bb:6a:a4:ee:ae:
         5e:50:07:23:7a:cc:a3:36:78:b1:09:ba:1d:f8:4b:5a:a4:7f:
         7d:47:b3:51:fb:8e:ac:b5:a1:90:25:87:43:e6:45:7a:18:c7:
         ff:06:63:d0:cd:5e:dd:d3:5e:64:19:18:cf:03:2e:5f:56:45:
         48:0a:fd:68:24:b7:5c:69:31:03:39:39:9e:4d:96:bb:72:0b:
         67:2a:46:1f:20:52:8e:cd:0d:c8:d0:3b:9e:d9:f7:26:d0:28:
         7e:0b:55:91:e3:e6:08:f6:07:90:9a:2b:d6:50:3f:65:d5:26:
         e4:1e:d6:d4:bf:d7:32:08:65:01:cf:ac:66:7f:92:36:19:e8:
         14:a9:3f:d4:93:8c:03:9d:18:ea:b7:8c:85:d3:5e:7f:a2:b8:
         dd:e6:2c:f0:8b:ab:d4:62:69:e9:e2:a0:65:d6:6a:c7:81:2b:
         83:ff:0c:0d:70:ed:31:3d:18:8b:48:8e:25:94:ce:fd:b1:57:
         76:c8:55:e4:1d:e3:24:33:a6:c7:92:96:57:c3:c1:56:1f:95:
         e2:5e:9e:c4:ca:94:7f:39:cb:bd:fc:d5:36:f6:45:d7:ca:91:
         48:22:7d:16:46:98:8a:b2:f6:66:f2:e8:19:5d:84:ff:45:c4:
         d7:a5:d8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org