Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32342d3234203d3e20323633353238.roa
File:                     3139312e3235332e36342e302f32342d3234203d3e20323633353238.roa (raw, json)
Hash identifier:          aiM3ngVECfOqqAVet21ftFz8sKeD22JQNLKDaySTEuM=
Subject key identifier:   4E:08:B5:E5:C4:7C:AC:99:41:FD:D2:FF:3C:B6:6F:E7:75:A9:A3:21
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       678FF3F792205132AE69698C8AADECF0CB7E9031
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32342d3234203d3e20323633353238.roa
Signing time:             Thu 18 Apr 2024 17:49:06 +0000
ROA not before:           Thu 18 Apr 2024 17:44:06 +0000
ROA not after:            Thu 17 Apr 2025 17:49:06 +0000
asID:                     263528
IP address blocks:        191.253.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8f:f3:f7:92:20:51:32:ae:69:69:8c:8a:ad:ec:f0:cb:7e:90:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Apr 18 17:44:06 2024 GMT
            Not After : Apr 17 17:49:06 2025 GMT
        Subject: CN=4E08B5E5C47CAC9941FDD2FF3CB66FE775A9A321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ff:0c:30:a3:fc:d9:fd:a2:ce:7c:bc:99:96:
                    fd:27:44:0a:3d:60:ae:46:b7:08:05:73:15:82:f8:
                    43:e3:01:ef:55:72:10:e1:55:69:23:08:71:2f:00:
                    a7:32:d0:9e:df:27:0c:a4:24:2b:3f:b6:06:12:ef:
                    8e:d0:9d:59:e1:03:fe:f8:16:36:49:fa:1d:e1:53:
                    f7:c0:4a:42:f1:fb:16:7a:5c:db:98:ad:81:1d:a2:
                    74:6c:5d:52:b5:a9:f2:f9:b0:51:59:a5:a8:2d:a7:
                    fd:20:6d:9b:24:d2:b7:cd:68:74:99:51:d8:5c:c0:
                    ef:3b:2b:3a:e5:5c:f6:86:45:06:60:68:32:a2:3f:
                    7f:26:b1:b5:c9:76:2a:23:97:4e:78:4f:e6:4d:76:
                    87:c6:67:14:0f:62:b0:aa:fc:6b:73:82:17:13:7f:
                    a7:11:e8:43:f7:a4:00:9a:92:d0:db:63:af:d8:dd:
                    2c:60:17:d0:b4:13:6b:0c:58:4a:26:3c:23:55:02:
                    2a:e1:4a:55:1d:f4:56:31:af:07:f7:ba:8d:66:19:
                    6a:a1:b1:dd:82:47:b3:65:7b:c0:24:fd:ea:71:74:
                    ae:87:2e:e3:77:9c:65:b6:5d:cf:f4:16:fc:ba:78:
                    cf:ed:d2:83:67:3b:95:9e:4c:2f:41:6d:3e:4f:eb:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:08:B5:E5:C4:7C:AC:99:41:FD:D2:FF:3C:B6:6F:E7:75:A9:A3:21
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32342d3234203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:97:94:16:1c:32:02:91:70:72:97:0a:40:90:b5:f1:fd:77:
         5d:48:e7:95:a6:f8:fd:6d:1e:5f:b5:63:cd:65:b2:7b:d0:89:
         c0:81:b2:b8:b1:63:95:5a:33:b0:99:d6:67:6d:01:79:54:1d:
         a8:cc:28:26:fb:77:a1:5e:03:f4:a0:eb:7c:bb:d3:27:46:ad:
         6b:99:ee:74:ea:2c:6b:5b:dd:b4:26:4d:ab:ad:59:bf:42:e7:
         71:7c:f5:ed:b5:2f:65:f2:21:e0:e9:8b:25:f3:ac:ea:29:f6:
         33:7f:32:ff:38:8d:09:95:ed:84:93:00:c8:89:18:57:fd:16:
         a5:53:e0:c0:79:18:06:d5:12:c8:ad:f3:d7:27:e7:c8:a7:f8:
         23:7d:9b:99:cd:43:b5:4e:d0:ea:9d:77:d9:4c:93:61:32:8b:
         03:55:cc:84:3c:f8:67:cd:2f:d1:d0:44:48:2f:68:c6:f3:69:
         eb:9b:32:9c:4c:0d:d8:22:cb:e2:0d:70:ae:6c:b8:35:d9:12:
         37:a7:44:50:3f:f1:ba:ac:23:6a:eb:27:b5:61:bf:ea:37:a0:
         a0:cf:49:78:38:d7:bb:44:e6:ce:f9:26:e4:1b:2e:50:be:08:
         ab:a1:51:62:07:a6:cd:fe:f6:7e:17:f4:d7:05:ee:49:31:5d:
         72:c6:f9:9e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ4/z95IgUTKuaWmMiq3s8Mt+kDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNEOTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZF
REJFNzc4MDAeFw0yNDA0MTgxNzQ0MDZaFw0yNTA0MTcxNzQ5MDZaMDMxMTAvBgNV
BAMTKDRFMDhCNUU1QzQ3Q0FDOTk0MUZERDJGRjNDQjY2RkU3NzVBOUEzMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/wwwo/zZ/aLOfLyZlv0nRAo9
YK5GtwgFcxWC+EPjAe9VchDhVWkjCHEvAKcy0J7fJwykJCs/tgYS747QnVnhA/74
FjZJ+h3hU/fASkLx+xZ6XNuYrYEdonRsXVK1qfL5sFFZpagtp/0gbZsk0rfNaHSZ
UdhcwO87KzrlXPaGRQZgaDKiP38msbXJdiojl054T+ZNdofGZxQPYrCq/GtzghcT
f6cR6EP3pACaktDbY6/Y3SxgF9C0E2sMWEomPCNVAirhSlUd9FYxrwf3uo1mGWqh
sd2CR7Nle8Ak/epxdK6HLuN3nGW2Xc/0Fvy6eM/t0oNnO5WeTC9BbT5P6yxZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTgi15cR8rJlB/dL/PLZv53WpoyEwHwYDVR0j
BBgwFoAUM9mbjq4auL7kGYuHAxz+j+2+d4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5
RnkvMC8zM0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5QjhFQUUxQUI4QkVF
NDE5OEI4NzAzMUNGRThGRURCRTc3ODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtaVpuUTVHdUZCVmh2b2JCaGNmWTdhUjlHbjEyc2FIc1NqZ1R1UzVieUZ5LzAv
MzEzOTMxMmUzMjM1MzMyZTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNTMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC//UAwDQYJKoZIhvcNAQELBQADggEBAMaXlBYc
MgKRcHKXCkCQtfH9d11I55Wm+P1tHl+1Y81lsnvQicCBsrixY5VaM7CZ1mdtAXlU
HajMKCb7d6FeA/Sg63y70ydGrWuZ7nTqLGtb3bQmTautWb9C53F89e21L2XyIeDp
iyXzrOop9jN/Mv84jQmV7YSTAMiJGFf9FqVT4MB5GAbVEsit89cn58in+CN9m5nN
Q7VO0Oqdd9lMk2EyiwNVzIQ8+GfNL9HQREgvaMbzaeubMpxMDdgiy+INcK5suDXZ
EjenRFA/8bqsI2rrJ7Vhv+o3oKDPSXg417tE5s75JuQbLlC+CKuhUWIHps3+9n4X
9NcF7kkxXXLG+Z4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org