Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/3136382e39302e34332e302f32342d3234203d3e20323635323636.roa
File:                     3136382e39302e34332e302f32342d3234203d3e20323635323636.roa (raw, json)
Hash identifier:          +l9mV2oruYse+II2X98hoq2yoHRbkXFC3FFSOUdI+sI=
Subject key identifier:   5E:3A:81:4B:B7:47:A0:08:AA:D5:54:F3:C3:F4:DD:13:49:EF:B2:A1
Certificate issuer:       /CN=40B2EE8786079947D0F70A861B591AFA74854AA7
Certificate serial:       0EC0422EAAF6773B85CB403C9CD6A51F93B284C5
Authority key identifier: 40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/3136382e39302e34332e302f32342d3234203d3e20323635323636.roa
Signing time:             Thu 18 Apr 2024 20:24:58 +0000
ROA not before:           Thu 18 Apr 2024 20:19:58 +0000
ROA not after:            Thu 17 Apr 2025 20:24:58 +0000
asID:                     265266
IP address blocks:        168.90.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c0:42:2e:aa:f6:77:3b:85:cb:40:3c:9c:d6:a5:1f:93:b2:84:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B2EE8786079947D0F70A861B591AFA74854AA7
        Validity
            Not Before: Apr 18 20:19:58 2024 GMT
            Not After : Apr 17 20:24:58 2025 GMT
        Subject: CN=5E3A814BB747A008AAD554F3C3F4DD1349EFB2A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:34:70:e0:21:27:e8:58:a4:18:31:dd:d4:82:
                    65:67:a1:21:1f:7f:37:4a:c4:58:67:b3:33:72:ca:
                    92:54:48:f1:9e:3b:37:ba:1b:9d:35:ec:fd:b0:ba:
                    94:12:31:5f:01:a3:10:ef:1f:89:7f:87:35:03:fa:
                    2f:a9:39:95:7a:8b:49:55:df:65:cb:a2:52:17:2f:
                    2c:22:8f:9d:e5:74:d9:d0:29:f7:87:33:f7:ed:a3:
                    42:dd:0f:50:a8:e6:d5:c9:45:8f:a0:9c:82:4e:e4:
                    bc:b3:54:59:c9:dd:ec:99:a1:ae:68:d5:7c:38:cc:
                    bd:0d:cc:f3:e8:4f:f1:71:d4:50:de:c7:60:09:39:
                    9e:f8:6b:4e:bd:0a:77:db:9b:1e:b2:be:1c:03:22:
                    47:ec:04:7e:b8:69:2e:d1:65:1d:a6:6f:88:a2:1c:
                    1f:54:ec:67:fc:1c:bc:f9:38:0d:4f:ee:86:91:46:
                    4f:5d:e4:1f:4f:1f:15:cd:bf:3a:80:01:b7:eb:a7:
                    20:d7:3c:af:29:37:ea:58:20:10:bb:a2:a5:56:59:
                    bb:a7:9e:cc:2e:ed:46:54:af:1a:a7:c3:f2:fa:4a:
                    4f:e8:58:fe:ec:a8:9e:da:1b:f1:90:b1:52:f3:b6:
                    f9:dc:25:84:e3:d9:af:a6:52:68:68:d4:96:7c:3e:
                    72:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3A:81:4B:B7:47:A0:08:AA:D5:54:F3:C3:F4:DD:13:49:EF:B2:A1
            X509v3 Authority Key Identifier:
                keyid:40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/3136382e39302e34332e302f32342d3234203d3e20323635323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:fc:38:1b:0e:14:c7:04:00:e6:a3:57:62:45:71:c3:53:
         36:82:a4:ff:33:ec:fc:69:31:ae:ef:bd:5f:e4:f2:2d:af:4d:
         fd:3f:86:e8:42:e5:4d:6e:f2:f7:35:15:24:7e:18:a1:fa:7b:
         c0:05:99:b9:f4:18:bb:1d:30:4e:57:cc:1d:a6:ad:fa:4f:24:
         9a:22:1a:5a:8a:e9:4b:96:ec:74:a5:ec:5e:32:28:f2:2f:40:
         75:0b:7c:0d:c8:1a:00:63:eb:99:60:94:5a:33:02:48:92:74:
         fd:fa:53:3e:f2:f2:23:da:f9:ff:eb:4f:69:60:c8:06:15:bf:
         34:73:49:b5:92:5c:27:fe:b8:1e:86:ea:e9:cd:93:4a:7f:fb:
         68:86:07:2b:60:62:47:51:69:b5:97:e8:44:7b:05:9f:dd:be:
         cc:11:d4:b5:63:52:3f:20:7a:6b:3d:fd:de:58:33:dd:be:35:
         0c:2a:93:92:84:37:90:34:44:14:d8:7b:f7:ed:fa:1e:aa:8b:
         1d:e8:b1:08:b8:7e:b7:e4:d5:f6:da:52:9d:53:ff:d5:d8:b1:
         e0:3c:46:c0:28:0d:38:d8:18:af:04:99:ba:af:b7:1f:87:0e:
         8e:0d:f8:dc:e7:01:bb:a0:d1:98:39:5e:6a:91:76:99:2a:10:
         b4:b7:0b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org