Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/3134332e302e34302e302f32322d3232203d3e20323632353530.roa
File:                     3134332e302e34302e302f32322d3232203d3e20323632353530.roa (raw, json)
Hash identifier:          xNgfjn4oX774wvhEHLXH+/irRCzMcEYj3p7SQDtoEO8=
Subject key identifier:   1C:C5:B0:92:8F:F0:0F:9B:C2:74:CA:A0:45:AF:A5:D2:7F:A4:EE:1E
Certificate issuer:       /CN=CA6EB79104876EFECBF1CFEF07ECFB3A048D0598
Certificate serial:       1D53A9709D3546371C2647B58D6CAA4798CF46A9
Authority key identifier: CA:6E:B7:91:04:87:6E:FE:CB:F1:CF:EF:07:EC:FB:3A:04:8D:05:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/3134332e302e34302e302f32322d3232203d3e20323632353530.roa
Signing time:             Tue 11 Jun 2024 13:13:27 +0000
ROA not before:           Tue 11 Jun 2024 13:08:27 +0000
ROA not after:            Tue 10 Jun 2025 13:13:27 +0000
asID:                     262550
IP address blocks:        143.0.40.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 20:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:53:a9:70:9d:35:46:37:1c:26:47:b5:8d:6c:aa:47:98:cf:46:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6EB79104876EFECBF1CFEF07ECFB3A048D0598
        Validity
            Not Before: Jun 11 13:08:27 2024 GMT
            Not After : Jun 10 13:13:27 2025 GMT
        Subject: CN=1CC5B0928FF00F9BC274CAA045AFA5D27FA4EE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:09:5a:b5:6a:d5:f1:f4:2c:b6:ab:82:75:80:
                    50:b3:29:a5:c1:a1:88:ef:e0:53:75:b6:38:ab:58:
                    0c:7b:af:39:c6:67:bc:57:c9:56:4e:af:4a:0d:ff:
                    6c:f7:88:4c:56:8e:f3:17:c3:68:3a:06:30:2b:99:
                    57:0e:c0:12:61:c3:7a:ac:1f:8d:ea:13:df:97:57:
                    55:68:be:be:e2:77:8c:0d:ce:81:a2:a0:6c:37:ef:
                    41:0d:27:2b:7c:b5:d3:b0:3d:03:d5:bb:60:00:9e:
                    88:ae:99:66:88:4b:48:12:21:8b:a4:e3:65:a2:32:
                    85:de:10:15:d0:4c:7c:7a:06:b8:88:ec:0d:9e:b4:
                    b4:3c:b2:a8:88:8a:02:cf:69:9e:f9:0f:85:3b:2f:
                    35:41:c0:92:dc:2a:6c:c8:13:ec:83:4a:a6:89:36:
                    90:c7:c7:16:02:d6:fc:80:67:3b:c5:a7:91:8f:3f:
                    7d:17:69:1d:52:48:aa:18:96:7f:4f:64:83:e5:bd:
                    70:78:57:1b:61:a3:c8:5c:d8:3c:a8:7d:32:2b:61:
                    d1:a7:13:40:05:bc:92:30:2f:f2:56:4f:4d:92:26:
                    f8:dd:c4:ab:f0:a8:8c:57:1c:53:ba:9c:58:68:db:
                    87:da:fc:ca:e7:06:a7:df:65:e8:ba:ba:77:42:93:
                    e2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C5:B0:92:8F:F0:0F:9B:C2:74:CA:A0:45:AF:A5:D2:7F:A4:EE:1E
            X509v3 Authority Key Identifier:
                keyid:CA:6E:B7:91:04:87:6E:FE:CB:F1:CF:EF:07:EC:FB:3A:04:8D:05:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/3134332e302e34302e302f32322d3232203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:f6:dc:57:5f:57:36:5e:03:3b:d8:41:c2:f4:2b:d5:c9:99:
         89:5c:ee:90:f7:00:f2:50:32:9b:d2:e3:64:5f:96:4a:ef:08:
         ec:7c:e5:75:b0:46:ab:7a:1f:e9:1a:a6:2e:ea:1d:4f:08:53:
         91:a7:6d:3a:bf:9b:49:ff:f2:fa:8f:50:77:64:34:c5:07:24:
         91:d7:47:38:66:20:b2:98:31:b9:d8:d1:de:1e:04:e1:a0:99:
         0c:31:fd:80:42:66:25:99:83:ce:36:b1:ad:fa:5b:72:11:7b:
         a2:e8:38:e4:e2:cc:51:c1:cb:e9:75:cd:77:35:5e:05:cf:33:
         95:d0:a0:a3:d4:4e:21:ae:14:ba:eb:90:90:d5:67:2b:f0:8c:
         b2:50:a4:dd:3a:24:09:43:fb:95:26:b6:7b:25:2d:77:79:cf:
         61:0f:e1:9e:80:70:b0:59:91:20:7a:31:c9:c1:62:4b:11:aa:
         62:68:83:2b:b5:74:3e:c2:3c:ec:5e:ac:b7:d5:83:2e:42:f1:
         2e:1c:08:31:4d:65:12:b0:8a:5a:e4:50:6f:e3:18:c8:24:65:
         b0:36:73:9a:e5:25:07:3d:43:35:38:4a:ef:71:2c:7a:5b:37:
         03:d1:98:e8:6a:09:af:7e:c4:24:01:45:79:15:97:d8:8a:3e:
         1b:32:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 00:03:41 2024 by rpki-client on console-ams.rpki-client.org