Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/3137392e36332e31322e302f32342d3234203d3e20323731353937.roa
File:                     3137392e36332e31322e302f32342d3234203d3e20323731353937.roa (raw, json)
Hash identifier:          OeRkMrLcSrKUF/nT0BLiRJOGWvg+9Nojycr9hL3kLVg=
Subject key identifier:   B3:40:FB:5A:C6:32:CE:86:BA:63:0F:0D:E4:B5:A9:18:47:2D:2F:BA
Certificate issuer:       /CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
Certificate serial:       2E260E85872363471124CEC945FEB1574202B913
Authority key identifier: B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/3137392e36332e31322e302f32342d3234203d3e20323731353937.roa
Signing time:             Thu 04 Apr 2024 18:47:57 +0000
ROA not before:           Thu 04 Apr 2024 18:42:57 +0000
ROA not after:            Thu 03 Apr 2025 18:47:57 +0000
asID:                     271597
IP address blocks:        179.63.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 02:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:26:0e:85:87:23:63:47:11:24:ce:c9:45:fe:b1:57:42:02:b9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
        Validity
            Not Before: Apr  4 18:42:57 2024 GMT
            Not After : Apr  3 18:47:57 2025 GMT
        Subject: CN=B340FB5AC632CE86BA630F0DE4B5A918472D2FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:33:4a:b2:bb:eb:57:42:93:e0:f4:a3:ff:23:
                    cf:22:b8:8e:2f:14:3a:c4:2f:8e:16:57:c0:f5:ec:
                    c9:4d:7c:3f:38:27:ca:e3:94:17:bd:2a:1a:c5:6f:
                    c2:05:6c:d9:0a:02:4e:5d:0d:63:32:8b:09:5e:32:
                    c0:ba:c3:8c:32:15:37:bc:f6:24:6a:04:3f:71:1c:
                    b3:ff:c3:5a:a0:53:b3:da:c6:f9:20:b0:eb:38:b6:
                    9e:84:22:69:a0:9b:3d:d0:51:7f:f7:f8:4d:89:4d:
                    a0:5c:0a:50:8f:02:f0:66:e4:e7:ba:c1:b1:fc:11:
                    81:0b:5e:57:c9:2c:6c:42:44:76:44:05:98:1d:d5:
                    13:86:3f:06:b8:5b:5c:82:a6:0d:0c:50:24:c8:85:
                    26:d5:b9:2d:80:e7:2e:75:15:11:02:5a:17:97:83:
                    b2:09:fd:c1:08:9c:70:c4:9a:b3:04:28:79:af:a5:
                    b7:fb:2e:6f:69:3f:80:71:a0:76:70:fd:d2:4c:31:
                    83:f7:a3:e1:52:5c:31:8f:1f:18:64:e9:e5:f7:9c:
                    ab:c6:28:b0:07:26:04:51:3f:d9:ec:3b:23:de:5d:
                    12:71:c8:b8:94:a2:7a:5a:50:70:25:c9:84:93:63:
                    9d:46:bd:69:ca:a8:07:d3:6c:f8:eb:b1:51:d6:d5:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:40:FB:5A:C6:32:CE:86:BA:63:0F:0D:E4:B5:A9:18:47:2D:2F:BA
            X509v3 Authority Key Identifier:
                keyid:B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/3137392e36332e31322e302f32342d3234203d3e20323731353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:35:f3:f1:26:9d:df:04:70:6b:16:01:a7:83:28:94:5f:ca:
         99:35:93:39:2a:53:25:44:9f:bf:e0:7b:a7:b4:b0:11:45:13:
         04:db:cb:a7:e7:b5:3e:14:49:ca:14:04:58:36:27:d8:bd:8b:
         8e:5e:dc:7c:90:92:a3:cc:7b:6d:34:55:86:c6:69:17:60:91:
         2c:39:eb:a2:ae:09:28:ab:5a:0f:29:62:13:5d:e5:b3:e3:eb:
         db:79:b9:fc:27:5e:0c:49:0b:1b:3c:cb:6f:6b:f5:ad:e3:a9:
         63:e8:03:f5:60:92:10:b4:11:a3:78:d6:a6:f6:6d:9e:3f:b7:
         21:b3:f5:49:25:15:18:6b:46:d8:a8:bf:04:e3:e1:39:d6:40:
         38:41:f6:cc:64:70:e6:e7:fc:54:d1:09:23:e9:62:c7:67:e5:
         86:3c:8c:ca:e2:97:0e:a9:55:9e:47:ee:7b:c9:7c:fe:cc:2d:
         7d:a7:34:af:52:9b:ed:b9:85:be:ad:16:02:44:32:bf:6f:bd:
         e9:5d:c5:6c:34:14:9a:09:0d:01:e9:09:06:f5:5d:5a:ab:43:
         ef:d4:6c:9f:17:b5:f6:00:74:17:3e:87:71:9f:8e:9a:6a:0a:
         f7:5b:c5:d8:2a:09:ef:78:f0:bb:9d:a3:e4:07:38:96:38:75:
         a8:62:14:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 07:00:50 2024 by rpki-client on console-fra.rpki-client.org