Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32322d3232203d3e20323633353238.roa
File:                     3139312e3235332e36342e302f32322d3232203d3e20323633353238.roa (raw, json)
Hash identifier:          x2IilgkjVa84hRof78TF8VaajCwGHmR4vR1XtVQqbJ0=
Subject key identifier:   95:CC:8C:A8:DA:02:C3:B4:2B:7B:DB:05:8A:88:7E:96:A9:10:35:AC
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       32824EFD219DB4637D1BCA8826692A8D80E14D68
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32322d3232203d3e20323633353238.roa
Signing time:             Thu 18 Apr 2024 17:48:51 +0000
ROA not before:           Thu 18 Apr 2024 17:43:51 +0000
ROA not after:            Thu 17 Apr 2025 17:48:51 +0000
asID:                     263528
IP address blocks:        191.253.64.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:82:4e:fd:21:9d:b4:63:7d:1b:ca:88:26:69:2a:8d:80:e1:4d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Apr 18 17:43:51 2024 GMT
            Not After : Apr 17 17:48:51 2025 GMT
        Subject: CN=95CC8CA8DA02C3B42B7BDB058A887E96A91035AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:33:bd:89:01:f2:7c:ee:5a:49:04:cc:f7:5b:
                    88:31:63:e7:36:71:1a:28:a0:e0:f9:91:8a:80:42:
                    5a:ea:1b:78:f9:9e:5b:ce:96:01:7d:3d:6f:0d:81:
                    db:25:e4:7f:bf:91:e6:22:7b:f1:4e:6e:54:dd:4a:
                    97:ed:f2:c0:9d:7a:ff:9a:50:38:d1:ab:56:89:85:
                    f3:46:48:2b:3c:ea:b4:f8:44:f9:21:06:b3:31:ba:
                    78:fc:27:e4:7e:87:a9:3e:16:2e:b4:2e:a6:c2:35:
                    be:b1:91:a1:45:9e:50:1c:14:9e:c1:92:bd:53:c7:
                    5f:3e:73:de:c8:f1:04:52:c0:7e:36:ac:a3:eb:e6:
                    da:9f:b8:1b:98:56:5a:5a:31:f4:4e:be:fe:5c:d2:
                    e6:9d:9e:28:aa:b8:0e:21:76:0e:7a:bd:1e:c9:6c:
                    ad:d3:46:39:c8:2b:97:46:f2:3b:5d:6c:8a:85:6e:
                    d9:85:9c:11:67:18:04:78:6a:e3:f3:25:50:d7:41:
                    89:81:37:0c:18:90:e9:a5:66:59:b5:4d:29:b3:b5:
                    4c:e8:21:31:c2:2d:fb:58:08:95:46:de:5a:99:cd:
                    98:36:15:67:2e:4b:b7:ab:0a:ef:8a:c6:9b:59:6e:
                    36:94:db:97:52:bd:5c:28:28:e6:e9:de:ad:2f:31:
                    79:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CC:8C:A8:DA:02:C3:B4:2B:7B:DB:05:8A:88:7E:96:A9:10:35:AC
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32322d3232203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:72:df:2d:18:81:68:38:9e:e0:5a:ad:fe:3b:13:28:a8:dc:
         13:19:65:32:0f:19:70:9a:06:f4:dc:02:dc:2b:53:90:04:38:
         8e:ca:c8:96:f1:3f:f4:4b:9d:58:db:57:e2:47:99:00:78:64:
         d3:4a:d8:36:98:81:bb:35:6e:7e:28:72:42:07:50:63:9b:3b:
         e4:f5:df:52:c1:56:da:9f:c9:d3:6c:bf:6c:3c:99:41:da:5b:
         7b:69:54:eb:ce:99:a2:e9:04:9f:61:62:d3:ef:4b:9b:9f:18:
         2d:06:a4:98:b4:f5:2c:91:9f:50:89:30:51:f6:b9:b2:ee:f3:
         0f:9d:06:ab:46:af:88:7d:35:bc:78:db:4f:61:21:86:92:69:
         c7:90:cd:2d:cd:f4:f8:5d:7a:e9:a1:2f:6e:e9:67:15:c2:b9:
         9e:35:68:d2:03:e2:56:9c:02:a8:10:62:ae:5f:1a:7d:fa:03:
         4e:65:51:e0:ed:da:50:e7:6a:76:9d:30:16:0a:de:b1:a0:20:
         1f:47:54:00:b7:17:2d:8b:d1:26:a9:49:31:95:a6:ad:56:01:
         b1:20:38:ec:0c:2f:b6:2f:f7:a9:8e:1d:5e:bd:43:f0:52:da:
         d2:8d:44:c1:80:93:1e:24:a5:1b:2a:ae:1c:30:d9:6b:98:e5:
         97:04:67:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org