Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134342e302f32302d3234203d3e20323632373834.roa
File:                     3139312e3234312e3134342e302f32302d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          R9o+ExryJM3lWWPjQ5C0IKHz2qJc4cYaVj+88HlQPVk=
Subject key identifier:   99:9C:8A:BF:38:41:28:1C:D7:D9:87:99:FC:E2:FF:A0:D7:52:60:3B
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       08893C5336E8F671038DD442CB504717549BA78B
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134342e302f32302d3234203d3e20323632373834.roa
Signing time:             Thu 04 Apr 2024 07:31:18 +0000
ROA not before:           Thu 04 Apr 2024 07:26:18 +0000
ROA not after:            Thu 03 Apr 2025 07:31:18 +0000
asID:                     262784
IP address blocks:        191.241.144.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 01:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:89:3c:53:36:e8:f6:71:03:8d:d4:42:cb:50:47:17:54:9b:a7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr  4 07:26:18 2024 GMT
            Not After : Apr  3 07:31:18 2025 GMT
        Subject: CN=999C8ABF3841281CD7D98799FCE2FFA0D752603B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:68:83:17:95:c9:bc:34:2e:5f:ed:24:4a:1c:
                    9e:ec:11:71:64:92:65:45:dc:5d:35:03:3c:b3:0d:
                    05:98:e0:a1:3a:48:c5:9a:ae:38:59:06:fa:e5:58:
                    cd:96:a6:1f:00:c6:4c:a6:c2:07:3e:98:57:aa:6a:
                    fa:d8:ae:ff:97:4d:b9:f2:88:bf:bf:1b:b1:39:6f:
                    30:c1:ad:8b:13:38:83:cc:b4:2b:96:56:e6:00:65:
                    e7:41:be:69:e6:e2:84:11:bd:2e:48:af:79:91:2f:
                    88:44:89:11:1c:ec:3a:96:db:f5:24:36:60:24:3a:
                    4c:41:a6:b1:af:98:d9:84:fe:c8:16:0f:59:5f:df:
                    6d:52:85:cc:8f:65:60:2a:49:c8:d5:51:42:d1:ce:
                    b5:20:4a:e1:f1:3f:a4:e6:0e:c4:5d:5e:9d:eb:26:
                    7c:b3:a4:57:55:02:b5:7d:58:fa:62:6d:a7:69:23:
                    6c:7d:a0:ef:78:54:2a:5c:3a:6f:fe:54:8c:08:bd:
                    26:c5:f3:d4:f0:d2:d0:b5:66:54:ea:bc:53:df:e2:
                    ee:07:ac:b8:1b:6b:5f:b8:ff:0e:9c:99:55:f2:b8:
                    cb:e9:f8:c1:79:14:da:e5:1b:60:c0:bc:31:d2:6c:
                    c8:d3:fc:c6:4e:c5:21:91:d4:f8:1d:51:f6:45:7b:
                    bc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9C:8A:BF:38:41:28:1C:D7:D9:87:99:FC:E2:FF:A0:D7:52:60:3B
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134342e302f32302d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:ab:9f:1b:ec:2e:d2:5f:65:a6:5f:de:73:7e:83:20:d1:55:
         fc:73:bf:aa:47:53:a5:e4:bf:91:0b:8c:cc:29:df:24:3d:ae:
         54:24:74:dc:5b:7a:3c:4c:e3:64:c6:ba:b8:30:37:01:23:47:
         07:ec:3c:8b:0f:8b:d5:b3:5a:db:2f:15:68:6f:0c:2b:d5:36:
         cd:f1:26:04:40:4b:ba:2a:fa:1d:cc:0a:58:4a:3d:bf:9e:7a:
         80:03:46:20:97:08:69:13:2a:23:b2:b8:c5:00:ca:0a:ef:d4:
         bf:0a:c7:88:ac:76:7a:9f:3a:26:21:e0:7f:7a:20:e4:3e:a7:
         2a:a9:33:d6:47:88:64:07:7e:2d:d4:4b:9d:71:65:1b:98:c3:
         3d:47:9f:40:c3:a0:f9:bc:df:ad:49:0f:a9:44:45:23:c9:be:
         ca:6b:c4:e5:8d:f8:0c:aa:5c:97:0b:b8:5e:df:05:79:e9:8f:
         60:d8:ba:5d:ff:cb:b8:1b:e6:da:73:02:d3:28:2e:4d:77:96:
         96:ac:e5:07:33:1a:7b:10:32:27:12:24:ea:a4:b4:7c:e2:fa:
         0a:72:c7:e4:73:fe:e4:09:f1:b5:74:22:75:f8:01:1e:1f:19:
         60:cf:22:de:3e:05:93:26:11:08:86:5a:7e:3e:3e:73:79:04:
         37:86:1c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org