Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e362e302f32342d3234203d3e20323730383832.roa
File:                     3138362e3139342e362e302f32342d3234203d3e20323730383832.roa (raw, json)
Hash identifier:          q+6FjDKNSpekojh4BVCsKnlTBiEvp5v4AD6Uu7t3erc=
Subject key identifier:   B7:4E:30:91:44:58:26:62:45:6C:0A:F8:5F:0F:B1:42:E1:0B:EC:73
Certificate issuer:       /CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
Certificate serial:       237FDD2A86755C50DBADB699336CA3744708A8FC
Authority key identifier: 6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e362e302f32342d3234203d3e20323730383832.roa
Signing time:             Tue 23 Apr 2024 12:49:26 +0000
ROA not before:           Tue 23 Apr 2024 12:44:26 +0000
ROA not after:            Tue 22 Apr 2025 12:49:26 +0000
asID:                     270882
IP address blocks:        186.194.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7f:dd:2a:86:75:5c:50:db:ad:b6:99:33:6c:a3:74:47:08:a8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
        Validity
            Not Before: Apr 23 12:44:26 2024 GMT
            Not After : Apr 22 12:49:26 2025 GMT
        Subject: CN=B74E309144582662456C0AF85F0FB142E10BEC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:d0:71:57:c4:b9:81:1c:e0:2b:83:4e:b8:
                    29:bb:e0:66:7a:b7:85:ad:2e:ca:99:d7:65:0a:ae:
                    76:2c:3e:77:b8:1c:bb:ac:07:a8:15:2b:43:65:9d:
                    be:d1:5b:71:9d:a9:bb:b3:d0:3f:f0:57:38:ea:2b:
                    98:85:2e:24:5d:b3:b6:40:2f:35:04:8b:f0:f9:8f:
                    de:b3:ed:3b:fe:77:d8:21:d5:e0:ac:64:26:52:e0:
                    3f:21:60:7a:9a:70:08:ef:30:27:25:c4:45:45:80:
                    cd:9e:f6:b4:f0:ce:76:10:fc:42:eb:e5:76:94:73:
                    b9:c7:b3:79:04:46:ed:40:b4:b9:ba:1f:54:44:b5:
                    8c:81:e6:02:e3:c4:5f:df:6c:e2:a1:40:8a:c7:a0:
                    8d:e5:d5:bc:e4:80:c4:75:92:19:8c:ed:5b:0b:71:
                    52:c3:6e:1d:1d:b1:d9:8f:48:89:63:36:11:47:2a:
                    d4:a4:43:47:04:1e:af:2c:b3:de:17:44:8a:bd:9a:
                    8f:fd:fa:11:6e:42:7b:79:24:7d:59:00:4e:0e:59:
                    89:da:2d:39:64:3b:7e:bd:cd:4a:8f:dc:e6:8e:b9:
                    d3:ac:2a:ce:81:23:1d:79:28:4d:3f:c8:49:71:27:
                    9b:74:bf:4a:12:20:0b:ee:5a:70:3e:9d:80:26:1c:
                    00:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4E:30:91:44:58:26:62:45:6C:0A:F8:5F:0F:B1:42:E1:0B:EC:73
            X509v3 Authority Key Identifier:
                keyid:6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e362e302f32342d3234203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:7c:c1:5c:36:64:d4:63:1b:3d:d3:4c:1a:10:9c:6a:95:9c:
         8c:e5:eb:7e:b8:eb:0a:b7:2b:6c:8f:0c:0c:c6:fe:75:4f:e0:
         f1:6e:9b:e1:95:6f:ab:42:4c:f9:0b:f9:6f:01:05:6f:9c:2b:
         fc:e4:06:94:a3:aa:07:c2:06:47:90:ec:a9:55:c8:35:7d:b2:
         90:5b:ca:dd:60:36:5b:15:de:be:d9:ea:b2:24:47:6a:bd:33:
         ee:29:c7:f1:70:66:bf:ac:c1:bb:1c:21:aa:4a:2b:17:47:06:
         b4:94:53:ac:0a:78:41:d5:86:54:d6:91:7f:80:e4:21:56:35:
         55:3b:fb:d4:7d:90:f9:de:03:9b:eb:d5:45:5f:7b:06:66:76:
         82:35:90:bb:c9:66:74:25:0a:99:04:e3:5e:81:56:08:f2:a7:
         03:f4:73:bd:0b:b9:6e:44:26:18:26:21:db:71:d1:ef:d8:2f:
         cd:c2:64:59:6a:95:78:8f:c1:f9:f1:8e:40:d4:10:ae:e1:42:
         51:ec:23:1a:9e:bb:b0:c4:ac:58:4a:21:86:53:f3:9d:b9:ad:
         3e:5c:f6:9a:96:d2:67:5c:47:e8:27:5a:e5:f8:2d:05:1a:0f:
         1e:33:51:aa:1d:a0:c9:34:54:bf:d4:fa:f2:f9:c3:d2:75:f7:
         31:47:e3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org