Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3139312e3234332e3131322e302f32302d3234203d3e203533313335.roa
File:                     3139312e3234332e3131322e302f32302d3234203d3e203533313335.roa (raw, json)
Hash identifier:          5qWYT6l1Vrcs0wQdNC9dZreU5ZwfqnSWO2q/hOJGwfw=
Subject key identifier:   CD:3D:D3:BE:A1:F8:64:C9:02:5A:01:2F:00:FB:B2:9A:34:0C:86:36
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       7AFFF2687A9F038CB36359B1A8AF91B410E29E5F
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3139312e3234332e3131322e302f32302d3234203d3e203533313335.roa
Signing time:             Sat 03 Feb 2024 12:53:20 +0000
ROA not before:           Sat 03 Feb 2024 12:48:20 +0000
ROA not after:            Sat 01 Feb 2025 12:53:20 +0000
asID:                     53135
IP address blocks:        191.243.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ff:f2:68:7a:9f:03:8c:b3:63:59:b1:a8:af:91:b4:10:e2:9e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:20 2024 GMT
            Not After : Feb  1 12:53:20 2025 GMT
        Subject: CN=CD3DD3BEA1F864C9025A012F00FBB29A340C8636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:d6:18:93:b4:06:12:89:ef:7c:a0:09:3c:
                    d8:02:cc:5a:0f:cb:a2:62:86:f6:7d:55:76:ee:c4:
                    d9:a4:1e:3e:2c:8d:ee:f8:a5:20:dc:ee:ef:a6:3c:
                    23:94:33:c6:4c:f9:d5:88:e8:3c:af:35:b6:c9:68:
                    a8:d1:39:dd:e3:6b:c3:85:55:48:1e:4d:dc:ef:98:
                    3e:ab:7c:01:3b:11:7d:d7:7a:cd:1c:7b:8e:b0:d8:
                    b2:d7:f6:00:58:74:62:f7:0f:db:dd:03:09:15:57:
                    43:a4:79:44:54:27:d1:ad:73:2c:3a:38:d9:68:15:
                    e7:26:9b:43:8e:05:a8:f7:f0:f3:55:da:c2:e9:1e:
                    5e:ca:df:15:cb:7c:cf:6c:44:8c:3e:5e:19:f9:5c:
                    2f:d5:74:8f:50:5a:18:6b:07:73:64:91:c5:a0:fe:
                    f4:01:32:be:c7:70:06:96:e1:e8:0a:c1:24:dd:57:
                    a1:e4:1f:03:cc:01:40:7f:ed:bb:5c:2c:df:4f:4e:
                    8b:bf:e1:4c:0b:ca:26:16:82:a4:ce:02:9e:28:f6:
                    70:72:f2:67:8b:42:1f:19:f0:66:28:95:7a:12:12:
                    40:b0:29:62:5e:9f:69:8d:ea:30:6d:67:b6:48:12:
                    1f:1e:65:bd:5c:28:24:54:e9:75:43:fc:e1:be:38:
                    a8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3D:D3:BE:A1:F8:64:C9:02:5A:01:2F:00:FB:B2:9A:34:0C:86:36
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3139312e3234332e3131322e302f32302d3234203d3e203533313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:99:d2:a4:2c:0c:e9:1d:1a:ad:6d:bc:91:3d:09:9d:1b:eb:
         f9:78:aa:c5:a9:64:b4:9d:fe:99:6e:7c:5d:f5:42:d4:31:7b:
         d0:d2:41:ba:0f:5b:86:30:b4:7a:f4:15:2d:f9:4c:85:ba:2b:
         8d:29:06:27:80:0c:df:0b:0f:d6:23:86:f2:44:d6:96:2f:6a:
         9c:38:84:7d:f6:fd:6e:6c:5f:a5:a1:2e:fd:05:79:ca:49:03:
         9f:d0:de:3c:e1:58:6c:e6:2d:bd:63:1d:90:b5:c4:ee:b0:67:
         35:01:e7:f4:21:cb:5f:97:09:83:45:6e:a2:17:41:28:96:a2:
         a3:2b:eb:d1:6e:b7:1c:5e:9e:da:8c:40:ee:c8:10:5d:04:4e:
         81:4a:d4:b2:1f:bd:ed:4f:54:db:a2:6c:43:5b:e5:59:94:80:
         c4:63:0d:11:81:f8:cb:e4:16:20:fc:56:20:97:ac:b0:68:62:
         98:67:41:63:2f:be:67:2d:ce:a3:18:b0:e9:3c:fe:74:a6:2e:
         f8:c5:17:a9:54:d2:15:2a:50:1d:a3:24:8e:27:2b:12:7e:da:
         50:85:c6:f4:f2:cf:a5:c8:1e:e9:22:1e:d4:1b:0e:c0:7c:52:
         8f:b6:e5:23:b8:d1:e7:ad:61:71:d5:13:27:51:08:3c:57:b7:
         b3:17:94:33
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUev/yaHqfA4yzY1mxqK+RtBDinl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4RTQ4NTVFOEFGNDY4MENDMzgyN0M1RjU0OEQxMUFG
RUVDOTE3ODAeFw0yNDAyMDMxMjQ4MjBaFw0yNTAyMDExMjUzMjBaMDMxMTAvBgNV
BAMTKENEM0REM0JFQTFGODY0QzkwMjVBMDEyRjAwRkJCMjlBMzQwQzg2MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68tYYk7QGEonvfKAJPNgCzFoP
y6JihvZ9VXbuxNmkHj4sje74pSDc7u+mPCOUM8ZM+dWI6DyvNbbJaKjROd3ja8OF
VUgeTdzvmD6rfAE7EX3Xes0ce46w2LLX9gBYdGL3D9vdAwkVV0OkeURUJ9Gtcyw6
ONloFecmm0OOBaj38PNV2sLpHl7K3xXLfM9sRIw+Xhn5XC/VdI9QWhhrB3NkkcWg
/vQBMr7HcAaW4egKwSTdV6HkHwPMAUB/7btcLN9PTou/4UwLyiYWgqTOAp4o9nBy
8meLQh8Z8GYolXoSEkCwKWJen2mN6jBtZ7ZIEh8eZb1cKCRU6XVD/OG+OKjdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzT3TvqH4ZMkCWgEvAPuymjQMhjYwHwYDVR0j
BBgwFoAUxo5IVeivRoDMOCfF9UjRGv7skXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMC9DNjhFNDg1NUU4QUY0NjgwQ0MzODI3QzVGNTQ4RDExQUZFRUM5MTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2OEU0ODU1RThBRjQ2ODBD
QzM4MjdDNUY1NDhEMTFBRkVFQzkxNzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3M3FZUFNLMkRXV2pDQmFtV2hOQzdyZ3JxaENRUEFqZEdIU2RDWm45VjZvLzAv
MzEzOTMxMmUzMjM0MzMyZTMxMzEzMjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1
MzMzMTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS/83AwDQYJKoZIhvcNAQELBQADggEBAJ2Z0qQs
DOkdGq1tvJE9CZ0b6/l4qsWpZLSd/plufF31QtQxe9DSQboPW4YwtHr0FS35TIW6
K40pBieADN8LD9YjhvJE1pYvapw4hH32/W5sX6WhLv0FecpJA5/Q3jzhWGzmLb1j
HZC1xO6wZzUB5/Qhy1+XCYNFbqIXQSiWoqMr69FutxxentqMQO7IEF0EToFK1LIf
ve1PVNuibENb5VmUgMRjDRGB+MvkFiD8ViCXrLBoYphnQWMvvmctzqMYsOk8/nSm
LvjFF6lU0hUqUB2jJI4nKxJ+2lCFxvTyz6XIHukiHtQbDsB8Uo+25SO40eetYXHV
EydRCDxXt7MXlDM=
-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org