Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36362e302f32332d3233203d3e20323633353238.roa
File:                     3139312e3235332e36362e302f32332d3233203d3e20323633353238.roa (raw, json)
Hash identifier:          bbQn8gO6KKlykNY6qTwkU+s3WE3+6+CASAwjh5dXlps=
Subject key identifier:   C6:0F:39:E4:37:43:7F:98:3A:86:49:29:0B:5C:DC:5F:F2:F0:D3:BD
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       25BAC26951BCFB253903D61AFACFF1DF40AC91F1
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36362e302f32332d3233203d3e20323633353238.roa
Signing time:             Thu 18 Apr 2024 17:49:13 +0000
ROA not before:           Thu 18 Apr 2024 17:44:13 +0000
ROA not after:            Thu 17 Apr 2025 17:49:13 +0000
asID:                     263528
IP address blocks:        191.253.66.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ba:c2:69:51:bc:fb:25:39:03:d6:1a:fa:cf:f1:df:40:ac:91:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Apr 18 17:44:13 2024 GMT
            Not After : Apr 17 17:49:13 2025 GMT
        Subject: CN=C60F39E437437F983A8649290B5CDC5FF2F0D3BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:32:92:93:0e:77:9a:4f:af:8c:07:30:90:
                    02:0c:b7:33:b7:2e:89:d0:d7:3f:87:44:d2:5e:cf:
                    02:4f:09:64:3e:37:53:1f:77:8a:fc:63:6e:11:f7:
                    09:51:ad:e3:51:7d:b0:ab:34:ea:2b:94:1c:e8:48:
                    e3:24:6e:74:8a:ab:fc:47:1f:50:69:b5:bb:f1:13:
                    a6:ba:c5:4b:11:85:10:c5:30:d0:25:61:0c:48:23:
                    33:2d:59:d2:87:2b:0b:0c:dd:b9:67:75:62:11:12:
                    a1:4f:eb:f9:2c:7a:4c:81:29:fe:f1:9d:8d:e0:8c:
                    01:0d:ec:8a:39:f0:bd:38:4a:f5:cf:8f:ca:20:d5:
                    56:aa:c8:05:c9:1f:14:f9:a5:4b:09:c6:4a:d4:f2:
                    9e:2d:1d:39:3d:db:e2:5d:14:0a:31:0c:4c:50:1c:
                    10:df:5e:20:2c:94:23:7d:5f:4d:15:16:6b:53:7a:
                    a7:3e:7a:f6:af:51:7e:68:d7:a0:56:4a:e3:ed:ff:
                    7d:3b:e4:8c:49:86:2c:52:cb:3f:03:85:9d:07:19:
                    74:9c:43:aa:7b:61:80:29:86:43:81:59:cb:05:6b:
                    77:cb:b9:41:d0:ae:b0:da:36:d2:82:e8:57:00:42:
                    69:ce:35:e1:6f:c3:bd:1b:39:d1:28:37:8d:f6:c9:
                    9d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0F:39:E4:37:43:7F:98:3A:86:49:29:0B:5C:DC:5F:F2:F0:D3:BD
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36362e302f32332d3233203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:fb:aa:53:f1:ad:92:ac:0f:03:a1:c3:47:37:f8:30:d8:24:
         3a:34:0c:10:34:ac:89:7a:00:ab:3c:97:bb:0d:0f:f3:ed:0f:
         d8:6e:24:0e:3e:55:eb:3b:17:8b:e6:b9:a6:02:47:75:ac:e7:
         15:b5:be:6d:fc:41:b5:37:06:2f:77:63:cb:77:99:af:03:8c:
         cf:39:2b:08:30:68:4b:18:07:a8:27:7d:56:4b:e2:cd:0e:2c:
         cd:dd:c0:50:b7:7b:88:5c:13:18:5e:49:d5:3e:ba:9c:bf:19:
         1c:99:c0:88:a1:f2:3a:e2:6c:57:26:36:b9:dd:b3:04:42:4e:
         50:18:63:d8:83:30:03:87:3f:f5:65:33:71:a3:8b:19:68:0c:
         80:44:5b:05:e1:5b:63:48:28:ea:9b:fb:29:d2:d5:1b:78:03:
         02:d6:97:2f:e8:b8:69:79:17:97:54:29:ad:dc:8f:f0:c6:a6:
         9f:e0:a8:31:40:0d:42:fa:21:5a:2a:11:43:7b:c4:ac:e2:48:
         64:6d:63:c3:a5:56:7d:d7:6f:fe:bf:6c:93:70:5a:76:37:de:
         83:95:cc:21:30:13:d7:4f:cc:ee:18:2f:34:a1:14:4a:37:43:
         5b:b9:4f:2a:d6:2e:b8:2d:c4:7a:06:64:90:78:1e:11:81:91:
         2b:19:b4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org