Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32332d3233203d3e20323633353238.roa
File:                     3139312e3235332e36342e302f32332d3233203d3e20323633353238.roa (raw, json)
Hash identifier:          2Q1upymLZXHtWFIre8dClX1NLZ6GYk3w3TBJ4Nct6vs=
Subject key identifier:   6B:BB:EA:35:15:FE:2F:B7:7D:A3:67:74:58:6D:A7:1B:15:A6:19:B0
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       793BC63FC3EBDC947079EB5DB31AB30B4D93A55A
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32332d3233203d3e20323633353238.roa
Signing time:             Thu 18 Apr 2024 17:49:02 +0000
ROA not before:           Thu 18 Apr 2024 17:44:02 +0000
ROA not after:            Thu 17 Apr 2025 17:49:02 +0000
asID:                     263528
IP address blocks:        191.253.64.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3b:c6:3f:c3:eb:dc:94:70:79:eb:5d:b3:1a:b3:0b:4d:93:a5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Apr 18 17:44:02 2024 GMT
            Not After : Apr 17 17:49:02 2025 GMT
        Subject: CN=6BBBEA3515FE2FB77DA36774586DA71B15A619B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:54:3e:d3:e6:07:fa:89:4c:2c:ae:bb:d4:fc:
                    b7:c7:95:ad:25:49:7f:9c:a9:38:7c:78:04:50:74:
                    f1:bf:b7:61:dd:1b:a8:8f:f1:55:1a:e0:10:49:34:
                    6e:3c:ac:86:50:81:7a:87:b6:45:e2:d4:52:10:41:
                    f2:6a:3c:d7:6a:05:a2:bd:77:d3:83:64:0d:95:6f:
                    19:46:55:a4:e2:3a:2e:7e:ab:16:e6:9a:d5:76:b7:
                    12:d9:4d:ab:3f:ac:9a:b9:3e:e5:73:a2:cd:a9:ea:
                    ff:d1:42:eb:5f:4d:c7:81:ee:e5:2e:b8:f7:3b:e5:
                    c5:a5:51:f3:9a:96:06:f9:68:0c:39:48:74:37:d6:
                    74:f3:4c:17:33:45:2e:a3:c3:7d:6c:85:dd:24:4b:
                    49:14:93:f0:82:72:62:98:d8:ef:a4:2d:63:20:ef:
                    66:76:29:0d:10:90:e4:a9:3b:a3:5c:04:74:40:8d:
                    bb:fd:5e:4a:63:7d:cc:15:2c:2e:b7:d3:f3:ba:4d:
                    d5:c8:97:fe:7a:0a:ca:ab:97:4b:ef:e8:34:f3:14:
                    80:53:ea:be:e4:f4:27:bb:3b:c8:e4:a6:25:54:86:
                    b3:9e:3f:f8:24:11:3a:c7:d1:e6:23:61:58:9e:9e:
                    66:4d:24:47:cc:5c:ef:40:c1:8c:ff:33:b1:33:f7:
                    d9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BB:EA:35:15:FE:2F:B7:7D:A3:67:74:58:6D:A7:1B:15:A6:19:B0
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32332d3233203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         db:f1:ff:1d:20:c5:08:a2:b2:84:e1:1a:31:02:3c:8f:e1:1f:
         af:c4:00:fb:f7:aa:e3:b6:51:98:b8:3f:9f:49:8b:51:e2:ae:
         b9:dd:8f:ab:68:b4:4a:6c:93:52:37:30:ec:6d:2f:26:53:ca:
         c4:60:16:fc:96:32:1c:ae:47:13:70:ea:10:01:c0:2e:11:a9:
         ad:83:5c:4b:01:ae:1d:cc:40:12:02:a9:82:13:62:d2:7e:f7:
         6a:24:9a:de:3f:ea:57:ea:13:c7:04:bc:a1:1e:d9:bc:b8:b5:
         87:cb:e3:2f:a9:a4:8b:9b:39:46:52:55:4d:c6:12:30:5d:32:
         a6:94:9a:83:3f:79:e3:8a:7f:ec:4e:9f:9f:e8:3d:44:96:47:
         64:9b:1e:ae:9d:b7:cd:2e:6a:fd:d1:bf:7b:5d:e4:6b:80:a5:
         d9:e1:f9:6e:13:5a:20:0f:fb:58:8f:6e:2e:67:a5:c1:db:6e:
         9b:b1:ae:52:ec:c2:c1:6b:aa:e8:2e:76:e0:79:7f:32:65:54:
         8f:f7:68:cf:90:ad:5f:19:21:27:c5:71:d1:0f:5e:b6:c9:18:
         65:b8:3d:34:e2:e9:c2:9b:b4:ff:81:d0:43:61:72:fe:1c:e9:
         59:8f:6f:12:18:fd:57:b6:e4:9f:57:4e:54:09:2c:05:75:4c:
         a9:cc:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org