Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36372e302f32342d3234203d3e20323633353238.roa
File:                     3139312e3235332e36372e302f32342d3234203d3e20323633353238.roa (raw, json)
Hash identifier:          agqSyA9BLdfrnzi3BjXcrLJCyO2Cent2kbR90HBCB0U=
Subject key identifier:   32:1A:0F:F1:41:6D:2C:FF:DA:28:87:DE:8B:3F:D8:C3:30:22:9E:61
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       29AF9CF7608901ACC26BC50C276212AF51F52225
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36372e302f32342d3234203d3e20323633353238.roa
Signing time:             Thu 18 Apr 2024 17:49:20 +0000
ROA not before:           Thu 18 Apr 2024 17:44:20 +0000
ROA not after:            Thu 17 Apr 2025 17:49:20 +0000
asID:                     263528
IP address blocks:        191.253.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:af:9c:f7:60:89:01:ac:c2:6b:c5:0c:27:62:12:af:51:f5:22:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Apr 18 17:44:20 2024 GMT
            Not After : Apr 17 17:49:20 2025 GMT
        Subject: CN=321A0FF1416D2CFFDA2887DE8B3FD8C330229E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:d7:6e:50:09:77:89:9b:e7:5a:97:c1:fd:
                    1f:a8:d7:f8:66:02:7b:e4:63:f2:66:a7:e5:e3:95:
                    bb:59:43:8e:9f:fc:0c:4f:7c:38:a1:e6:40:eb:84:
                    59:00:45:96:c9:c8:a2:b9:aa:a6:f9:01:75:1d:32:
                    24:49:73:ab:37:15:9d:f2:c4:71:8e:63:af:be:44:
                    9a:58:54:74:c0:0d:25:c5:fc:cd:69:55:5f:88:16:
                    17:e0:27:62:3a:18:c3:7b:c2:42:1c:12:3d:37:e7:
                    f8:e8:31:de:5e:59:21:f4:51:61:03:a2:60:d9:3b:
                    e5:87:24:07:ee:8e:5e:55:16:27:2e:3f:e1:87:bc:
                    d2:a4:8a:0d:a8:9e:a2:a1:5f:51:5b:2f:2f:f2:9a:
                    ba:2b:20:df:8d:fa:ff:4b:69:46:56:4d:8d:e9:45:
                    4c:ce:61:e9:2b:76:dc:21:60:b6:2d:c7:f7:c2:1d:
                    80:f2:f7:41:0f:14:55:35:03:83:36:67:e9:57:e2:
                    ab:8b:06:9e:76:bf:57:30:bc:8f:23:54:a6:e3:2d:
                    9e:39:ed:45:f9:60:31:79:8d:2b:f8:1a:fe:cf:44:
                    11:33:35:cf:63:73:a9:74:ad:12:f7:dc:b0:be:8f:
                    08:8f:e1:b1:92:5b:8d:42:cc:c4:5d:cb:e1:2a:c4:
                    48:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1A:0F:F1:41:6D:2C:FF:DA:28:87:DE:8B:3F:D8:C3:30:22:9E:61
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36372e302f32342d3234203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ae:2e:18:36:87:66:92:1b:77:c6:66:1c:08:17:94:5b:74:
         5e:8d:9c:28:28:4c:1c:56:bd:1a:d1:08:91:9d:1b:f1:39:a6:
         e0:78:6a:14:8e:50:81:e9:00:f3:f0:5b:5d:69:98:c8:76:b8:
         9e:09:44:9f:76:24:99:07:13:24:de:92:74:f4:70:5e:83:23:
         52:70:90:4a:b1:59:7b:01:ce:14:3b:3f:2a:a4:66:ef:c8:60:
         22:dc:12:92:cd:8b:b1:63:56:c1:3d:86:85:3e:df:f6:ab:eb:
         e1:a3:14:44:c8:fa:9f:c4:de:83:75:01:77:63:46:4c:7a:59:
         7c:4f:89:21:9d:cf:9b:df:07:2b:48:4e:6b:c0:21:c1:78:e5:
         c8:f9:2f:db:b8:0d:89:b6:1d:f5:11:c8:6a:55:09:3b:c3:22:
         3b:d9:ea:a2:b6:f5:08:f5:90:1d:7c:78:7d:a5:30:df:e5:46:
         51:ad:04:d5:57:ed:20:1a:c9:7c:45:62:eb:fb:ec:bc:5d:65:
         fd:50:4c:2b:b9:70:b7:74:a5:a0:3f:79:bc:10:48:43:48:da:
         44:49:90:6c:8f:cf:2b:38:23:98:52:41:06:7c:e5:5a:64:ef:
         59:49:55:79:75:3e:79:1f:e1:ce:68:93:65:ef:8c:36:70:e2:
         c4:b6:09:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org