Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233372e302f32342d3234203d3e203238333436.roa
File:                     3230312e3135372e3233372e302f32342d3234203d3e203238333436.roa (raw, json)
Hash identifier:          t+FiXJOIYfC0M6vb7JELmEPKUgj9wJgUoSq2a0TZD7Q=
Subject key identifier:   B3:85:66:7A:E2:4E:84:29:7D:A7:20:71:23:AC:22:7C:0E:4F:91:3C
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       090E557F7831A6D17D3EEE5D9A5D976DC198A442
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233372e302f32342d3234203d3e203238333436.roa
Signing time:             Wed 03 Apr 2024 23:12:21 +0000
ROA not before:           Wed 03 Apr 2024 23:07:21 +0000
ROA not after:            Wed 02 Apr 2025 23:12:21 +0000
asID:                     28346
IP address blocks:        201.157.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 15:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0e:55:7f:78:31:a6:d1:7d:3e:ee:5d:9a:5d:97:6d:c1:98:a4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:21 2024 GMT
            Not After : Apr  2 23:12:21 2025 GMT
        Subject: CN=B385667AE24E84297DA7207123AC227C0E4F913C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e8:2c:6b:21:ee:cf:f8:71:d2:a7:2c:3a:d6:
                    55:37:0e:83:26:15:90:64:37:b7:81:71:ab:41:75:
                    19:77:a4:03:b1:e3:52:2f:4b:ad:53:6c:7e:f9:6a:
                    f2:58:7a:f6:0d:6f:9f:d3:44:a8:6e:f7:ec:e7:3f:
                    69:9b:7b:fb:85:5e:0d:a9:5f:e3:b0:6d:f2:13:b0:
                    45:30:f4:1b:b6:d8:f6:cc:14:20:c2:c1:48:88:ad:
                    1e:28:c3:ec:92:4f:a7:a4:ef:27:93:4c:c3:af:28:
                    8c:aa:f9:5b:af:2e:f5:7e:8f:e1:9d:b4:bd:dc:51:
                    7f:b7:2e:4c:7d:e3:12:0a:14:b7:22:90:b4:a6:75:
                    bd:3d:c9:78:7f:fe:34:bc:ea:13:23:6b:d8:76:e7:
                    e2:50:b8:3e:57:73:eb:46:eb:1d:2e:ce:a7:c0:b0:
                    0c:cb:1f:fa:2c:f4:1b:83:77:23:19:15:ce:4a:00:
                    ad:b6:a1:b8:e1:50:55:46:a9:91:f2:f1:1c:37:99:
                    d8:e5:06:f8:12:a6:af:ac:da:d3:4b:b1:d1:84:0f:
                    e4:17:ab:3f:5f:f9:70:ae:17:69:71:fc:0a:40:95:
                    12:45:17:04:7e:43:ae:34:49:99:9c:80:de:03:d9:
                    26:3e:82:bd:b8:ed:39:d8:b9:27:c4:73:82:18:01:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:85:66:7A:E2:4E:84:29:7D:A7:20:71:23:AC:22:7C:0E:4F:91:3C
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233372e302f32342d3234203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a6:1a:b7:d2:1d:dc:40:79:7a:3a:4e:30:bd:35:8e:0a:65:
         0a:7c:e7:97:7a:b3:02:47:ad:95:b2:46:59:7d:24:09:a5:a2:
         a0:67:26:b9:5f:a3:d9:33:ca:07:75:ff:3d:1a:b0:cc:eb:f0:
         68:b0:28:b7:be:4f:25:6d:40:54:68:4f:13:e4:8d:7b:de:7f:
         52:22:d7:6d:bf:be:c1:6d:c7:bc:66:37:f9:c4:bb:00:5b:b0:
         e6:41:86:3a:4b:00:55:cc:65:6b:5b:a9:28:4f:d0:bd:b0:25:
         ed:1b:4b:e6:d6:5d:cc:11:04:ac:d5:ed:ec:4e:f0:2b:55:21:
         d4:cf:e8:b4:13:47:17:3f:0b:cd:73:ad:93:1e:8d:fd:3b:1f:
         81:a4:82:8c:7e:58:a5:98:f7:b9:2f:25:91:7a:8b:f9:c5:cc:
         03:9d:c8:60:7d:30:91:c2:06:e0:14:bd:07:ac:24:20:16:a5:
         f9:70:69:1e:22:04:f6:26:89:60:0a:44:52:27:32:42:a9:8b:
         19:f1:ae:42:99:4b:e9:90:18:73:5e:14:fb:6d:bf:32:77:6e:
         1b:d3:05:22:2b:13:af:28:7c:7d:f0:a2:da:11:8c:53:c2:0d:
         27:38:f8:bb:47:5e:92:9e:fd:df:ab:b4:c5:7b:4e:56:9c:7e:
         18:78:c2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 19:28:48 2024 by rpki-client on console-fra.rpki-client.org