Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36362e302f32342d3234203d3e20323633353238.roa
File:                     3139312e3235332e36362e302f32342d3234203d3e20323633353238.roa (raw, json)
Hash identifier:          rT+Gotp1NjHUE/cQF/w4aAzRpYG0YCX4WmgHoZjO1JY=
Subject key identifier:   FA:39:0D:24:22:87:59:6B:26:F4:DA:33:FD:AF:17:8F:BF:BF:D4:78
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       35280C985482731983BE6D43C07BB12B6353E449
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36362e302f32342d3234203d3e20323633353238.roa
Signing time:             Thu 18 Apr 2024 17:49:16 +0000
ROA not before:           Thu 18 Apr 2024 17:44:16 +0000
ROA not after:            Thu 17 Apr 2025 17:49:16 +0000
asID:                     263528
IP address blocks:        191.253.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:28:0c:98:54:82:73:19:83:be:6d:43:c0:7b:b1:2b:63:53:e4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Apr 18 17:44:16 2024 GMT
            Not After : Apr 17 17:49:16 2025 GMT
        Subject: CN=FA390D242287596B26F4DA33FDAF178FBFBFD478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:91:81:8c:ce:7a:7b:00:17:91:3d:d2:ad:9b:
                    b4:cf:3f:7b:b7:75:10:dd:d9:53:72:71:25:3a:d4:
                    a1:c8:dc:24:c0:89:03:58:1a:c8:86:b3:8c:27:24:
                    e5:b2:55:01:8e:c9:9f:c6:31:8c:33:d8:1d:86:05:
                    0a:04:52:4a:48:3a:82:42:ae:41:76:50:00:1a:2f:
                    6e:c2:07:aa:c7:83:03:e8:ae:c1:7b:e8:1e:f0:0d:
                    99:c9:8a:6d:bf:67:c1:50:84:0d:9a:ec:69:ee:38:
                    4d:00:ae:b6:eb:1f:90:18:5b:a5:1f:91:7e:30:d0:
                    63:b1:ac:f3:f8:5c:e6:ba:e3:88:77:b5:87:7f:d5:
                    07:7b:6e:91:9a:dd:61:dc:0e:fe:7e:01:9e:8e:78:
                    05:a6:93:4a:7f:db:46:2e:a3:d4:0d:60:cd:49:a2:
                    f1:91:6c:fe:66:71:be:fd:71:ac:71:26:c3:18:b4:
                    33:74:aa:dc:13:c6:44:c8:27:12:05:c9:30:e2:38:
                    6e:68:ee:59:3e:0d:1f:f3:f3:94:0a:ae:20:bf:c6:
                    8e:c7:35:4d:7c:25:92:cd:bd:da:21:b5:3b:4e:92:
                    8a:4d:b5:6a:5b:4d:c3:f8:cb:5a:ba:30:e3:4c:ba:
                    4b:50:c5:96:c7:76:40:99:b0:51:57:1c:41:d2:cd:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:39:0D:24:22:87:59:6B:26:F4:DA:33:FD:AF:17:8F:BF:BF:D4:78
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36362e302f32342d3234203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:f7:43:28:ca:50:c9:6f:7a:4b:0a:3e:70:3e:ee:73:e0:
         6a:fa:1a:f6:41:b2:43:06:6f:b0:5e:c3:ca:c6:a9:c8:c9:3d:
         3d:b9:37:77:1f:c1:82:67:3c:55:b4:73:8b:9b:21:ed:6b:7e:
         84:b2:39:87:33:e6:cb:30:20:2f:93:cf:9a:bd:fc:e5:05:c5:
         08:de:0a:b4:27:ec:3d:b5:80:1f:82:53:6c:1b:eb:2f:92:83:
         2a:25:6b:52:81:ef:b7:e4:4d:e1:73:9c:08:63:b1:34:88:73:
         a1:b1:df:b9:59:8d:0d:5d:dd:34:22:89:cb:79:6d:f3:14:50:
         6a:5d:55:21:73:b8:5e:d2:ae:3d:56:65:64:d8:98:95:8d:81:
         5b:c6:6d:c4:fa:07:d3:23:57:7b:e6:69:d6:02:d9:9b:8f:72:
         5c:35:c8:81:3b:22:f3:49:1b:fc:c8:50:77:53:08:c3:be:62:
         9f:45:bd:0f:a9:40:c0:3b:67:cf:d7:b4:88:63:6e:d0:75:ae:
         c5:49:74:22:40:95:41:ff:7c:41:a5:1f:1f:74:b0:39:3f:b1:
         58:d5:2e:11:d5:f9:a7:1c:e9:ae:38:5f:e1:2d:f9:54:64:df:
         92:52:4f:00:46:9f:aa:4c:98:b1:fb:bf:6d:2c:97:70:65:81:
         9d:e9:3b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org