Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36352e302f32342d3234203d3e20323633353238.roa
File:                     3139312e3235332e36352e302f32342d3234203d3e20323633353238.roa (raw, json)
Hash identifier:          NRDnmj4j3RzhZnhdw0tmE2lKi1XfoJgW93kMA/U/0DI=
Subject key identifier:   8D:07:C7:84:87:2A:8E:A4:6E:C1:4C:16:7B:46:6E:5F:BC:AC:C0:ED
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       60C87018FD47E624F9CD664901877CFD3A89372B
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36352e302f32342d3234203d3e20323633353238.roa
Signing time:             Thu 18 Apr 2024 17:49:10 +0000
ROA not before:           Thu 18 Apr 2024 17:44:10 +0000
ROA not after:            Thu 17 Apr 2025 17:49:10 +0000
asID:                     263528
IP address blocks:        191.253.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c8:70:18:fd:47:e6:24:f9:cd:66:49:01:87:7c:fd:3a:89:37:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Apr 18 17:44:10 2024 GMT
            Not After : Apr 17 17:49:10 2025 GMT
        Subject: CN=8D07C784872A8EA46EC14C167B466E5FBCACC0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:d6:f0:01:9f:92:86:55:08:2a:f6:ef:38:
                    ba:30:13:6b:0a:c3:b2:60:db:15:cd:f4:7b:50:66:
                    f8:7b:25:b7:01:d4:b9:82:cc:d5:dc:30:3a:38:68:
                    25:52:e9:46:5e:28:4e:62:6e:fd:ef:29:f7:c1:96:
                    f8:5c:3f:8e:cd:56:75:bb:0a:87:b1:5e:aa:bb:4b:
                    8e:66:d6:2b:97:ab:5e:cf:30:39:0c:04:c9:e5:76:
                    ed:23:5c:58:51:25:62:c7:a3:cd:10:96:ab:da:77:
                    a4:0e:a4:67:c7:7d:d9:aa:62:d4:08:3f:93:2a:37:
                    ec:b7:b1:c3:87:22:37:5f:55:70:ec:7f:34:79:c9:
                    7e:0f:7b:94:a2:72:7f:67:54:de:1e:97:fc:13:64:
                    f5:15:13:f5:ea:6c:82:71:5f:48:8f:ed:5a:7c:bb:
                    7d:c3:b3:30:25:87:54:9b:0c:dd:2c:73:b9:63:56:
                    a2:86:16:21:6a:23:e9:e7:ba:06:a1:d4:07:11:b6:
                    e6:fe:2c:26:42:c4:8b:87:58:5a:ef:3a:14:70:92:
                    08:71:b9:0b:8a:13:bd:40:b2:7d:02:5b:47:88:e8:
                    8b:5f:bf:60:49:1d:76:1d:15:66:2f:eb:e1:64:f3:
                    2f:67:bd:a7:20:6c:02:8c:e5:0e:c6:a5:22:dc:c3:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:07:C7:84:87:2A:8E:A4:6E:C1:4C:16:7B:46:6E:5F:BC:AC:C0:ED
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36352e302f32342d3234203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:c5:43:dc:90:27:8d:d4:2f:fb:63:4f:c3:89:3c:35:6a:99:
         70:35:21:4e:57:fa:d6:0c:71:4a:2f:ae:6b:ed:8a:b1:20:0e:
         86:08:e4:65:06:de:03:be:df:b3:f1:53:69:8c:3d:ff:1c:c8:
         f0:08:20:b7:f9:28:02:f3:c5:6d:9a:b4:66:12:d9:1a:5b:f1:
         d1:bd:75:1a:94:8a:68:1f:b4:c1:db:a8:ba:66:a0:30:33:63:
         50:71:28:83:76:5c:04:75:96:da:44:e7:74:d4:2f:79:87:3c:
         6b:c4:ca:de:19:0c:88:a9:0f:f1:5b:f4:9c:d1:f3:db:ac:f7:
         26:a5:00:42:8d:b6:0c:5b:84:74:48:1e:99:65:a0:df:0b:6e:
         2d:a3:2a:1f:c2:be:d3:42:da:46:94:e4:d3:95:24:24:30:1c:
         c3:77:3b:40:75:a6:d0:0b:a0:af:d7:e1:7a:ad:1e:4b:9c:89:
         e2:99:ac:93:4b:7c:77:98:f2:23:0e:6a:a7:36:01:69:91:e4:
         f0:48:48:aa:d0:ab:a5:86:28:d4:25:c2:2c:d3:9f:45:c6:c2:
         64:83:37:fc:45:27:32:87:76:47:a3:42:b7:aa:3e:ff:c8:9a:
         33:ec:49:fc:c0:9e:6f:b3:f4:37:f4:23:d7:57:e9:44:83:3c:
         b3:0b:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org