Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3139312e3235332e3139322e302f32302d3234203d3e20323632393037.roa
File:                     3139312e3235332e3139322e302f32302d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          f0XweNevxB5Sb1mJlbB0uXlsm0b1VAfojLhQYuzhDOY=
Subject key identifier:   75:FF:23:86:BC:6E:C7:EB:41:0E:CA:D2:9A:3E:19:79:BD:05:6A:C5
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       0591CD1264409F6B0F6A8E25F1B3AFB7C266E7C4
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3139312e3235332e3139322e302f32302d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:20 +0000
ROA not before:           Sat 03 Feb 2024 12:48:20 +0000
ROA not after:            Sat 01 Feb 2025 12:53:20 +0000
asID:                     262907
IP address blocks:        191.253.192.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:91:cd:12:64:40:9f:6b:0f:6a:8e:25:f1:b3:af:b7:c2:66:e7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:20 2024 GMT
            Not After : Feb  1 12:53:20 2025 GMT
        Subject: CN=75FF2386BC6EC7EB410ECAD29A3E1979BD056AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:8f:2c:e0:46:8c:00:90:3f:6a:85:5b:ac:
                    fa:ef:39:df:01:89:c4:93:6f:2c:23:7f:5c:05:da:
                    73:27:d3:4a:8f:a4:54:28:32:c1:df:9e:1b:7a:13:
                    17:4c:02:7a:33:df:5f:b4:f9:8d:59:df:e0:1e:a2:
                    6d:d7:5d:8c:9d:48:9d:cf:82:ec:01:ea:90:ce:13:
                    ab:c6:0e:ea:b9:9b:31:64:78:04:7e:5e:f8:d5:24:
                    29:b3:de:b4:79:02:2f:04:47:39:4d:6f:f4:b0:f0:
                    31:94:78:f2:ef:4c:f7:43:6c:30:c0:8d:4b:af:ec:
                    4f:6b:de:76:0d:48:e4:9c:cc:6b:4b:0d:ac:7c:1e:
                    7f:e0:3c:27:0c:df:ac:7d:e6:61:62:3e:13:a9:60:
                    d6:78:94:7c:af:b6:5c:da:c8:d4:9e:9a:88:ab:24:
                    29:a7:f1:6d:57:d4:de:48:61:f5:e3:44:17:d5:04:
                    d4:c6:4a:f5:14:79:70:db:d3:b6:74:f3:1a:13:6f:
                    47:40:b5:e9:11:7f:99:31:63:c2:f4:02:ad:bf:36:
                    f5:f1:7b:f5:20:b1:bc:99:fe:06:4a:22:96:bf:95:
                    97:29:1c:a5:f0:b4:c2:d4:2a:60:2e:e5:b2:09:cb:
                    94:28:87:a1:5a:7e:3f:32:24:41:4d:7c:51:cb:d4:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FF:23:86:BC:6E:C7:EB:41:0E:CA:D2:9A:3E:19:79:BD:05:6A:C5
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3139312e3235332e3139322e302f32302d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:8b:c8:04:71:9f:1f:1c:cd:31:31:c4:06:85:b3:87:16:83:
         2b:11:af:ef:bf:04:27:56:99:f0:0e:78:bc:7d:ee:ef:e7:51:
         8a:ad:80:63:ab:7c:6f:cf:b2:dd:6f:20:ce:f0:cd:7e:2a:70:
         74:e6:52:3a:6f:0c:bb:cc:b4:74:78:04:8d:4b:fb:06:7e:97:
         5f:cf:d0:b7:ef:5b:69:c8:e5:4d:ee:dc:20:81:de:c2:3a:5f:
         32:ae:e9:7e:64:2d:77:58:88:5a:27:04:4f:1c:e9:ea:4e:ad:
         44:08:a8:f4:7c:84:6c:6f:63:da:44:64:16:79:2b:d2:6e:48:
         a7:e5:e3:f5:88:a1:e0:15:87:65:3e:e0:1c:b0:bd:bf:e2:ed:
         d2:a9:41:68:a8:34:85:26:a3:a2:13:5a:fb:2a:9a:2a:4d:f7:
         10:e6:32:9e:63:9c:42:5c:56:1c:32:39:e7:05:a3:00:ff:e0:
         87:19:f9:70:8f:e8:85:e0:06:33:a9:aa:cf:b9:3f:6f:1b:42:
         08:de:39:da:6f:48:f2:4c:c8:25:e6:ba:6f:ec:02:21:aa:05:
         6e:02:ce:21:6f:6d:89:a5:31:2c:7a:6f:2f:c9:fc:27:e2:02:
         61:83:79:2a:bf:13:1a:c4:d3:ba:17:b7:1b:12:f4:68:c0:91:
         7b:58:27:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org