Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137392e3139312e34342e302f32322d3233203d3e20323635303933.roa
File:                     3137392e3139312e34342e302f32322d3233203d3e20323635303933.roa (raw, json)
Hash identifier:          zvT4txfSLPEA6IchMolDbwK8Nw23t5fPD0rtV/WljPs=
Subject key identifier:   20:4D:BB:F2:2D:A9:43:6B:19:0A:33:EA:EA:AC:2D:11:C4:6C:1E:CD
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       13BB9E63DC12861C1A2AB0171A081A919808719C
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137392e3139312e34342e302f32322d3233203d3e20323635303933.roa
Signing time:             Fri 19 Jul 2024 15:35:20 +0000
ROA not before:           Fri 19 Jul 2024 15:30:20 +0000
ROA not after:            Fri 18 Jul 2025 15:35:20 +0000
asID:                     265093
IP address blocks:        179.191.44.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 21:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:bb:9e:63:dc:12:86:1c:1a:2a:b0:17:1a:08:1a:91:98:08:71:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Jul 19 15:30:20 2024 GMT
            Not After : Jul 18 15:35:20 2025 GMT
        Subject: CN=204DBBF22DA9436B190A33EAEAAC2D11C46C1ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:4f:eb:a5:5c:a7:ff:09:cb:ea:54:53:66:
                    5f:d2:e8:4f:da:bc:4a:7c:e3:56:01:78:82:c6:79:
                    18:96:c5:60:79:e5:e8:e1:8d:9c:4c:76:5f:c1:21:
                    b5:dd:99:ea:06:d3:e0:66:f0:1b:40:97:bc:d3:e9:
                    a8:23:1b:fa:e1:2e:9f:62:fe:86:78:6e:a4:b8:eb:
                    57:20:ad:a5:af:76:ad:de:56:bc:c4:4e:45:ed:d7:
                    6c:e9:11:64:d0:01:6b:60:56:c5:0d:a1:b0:6f:0b:
                    a9:69:d9:2f:8a:95:82:ab:70:3c:da:fd:00:28:20:
                    ff:16:fe:8c:5c:02:3e:84:68:4e:91:7c:e2:41:ba:
                    62:bc:15:2b:71:8c:8d:f0:51:2e:f9:92:8e:ef:bb:
                    10:a4:f5:42:8c:a9:b8:30:ab:31:c1:af:22:b3:17:
                    7a:31:03:23:a4:6e:d8:17:f4:73:66:a6:c3:c2:9c:
                    37:59:29:5e:6f:38:21:64:d5:10:43:3b:90:48:c2:
                    5f:71:fa:50:a6:a7:6f:17:5a:2c:62:3b:e2:99:1d:
                    a4:33:9a:2d:38:51:b0:e1:78:85:4d:8f:5b:b2:52:
                    dd:1d:fb:e1:d9:63:b9:53:0b:8b:aa:30:14:90:d0:
                    4c:ae:dd:9c:bc:ab:07:53:a8:e5:d4:5b:b7:3e:f7:
                    35:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4D:BB:F2:2D:A9:43:6B:19:0A:33:EA:EA:AC:2D:11:C4:6C:1E:CD
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137392e3139312e34342e302f32322d3233203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:4c:0c:a0:07:41:49:ed:3f:ce:ec:68:2e:ad:c5:56:e9:06:
         59:0a:9b:f9:80:34:c7:44:79:1c:c3:cb:c4:73:91:6d:b9:98:
         52:85:1f:5c:c8:9a:d2:f7:56:df:d4:fd:ba:ce:59:8c:6f:8f:
         1a:35:eb:9a:3e:98:7c:92:c5:59:4e:42:85:11:96:b8:d1:1b:
         d6:49:a0:7f:24:37:32:3e:f8:da:48:b1:19:0e:ca:80:0d:ba:
         98:47:86:8a:82:50:3b:9c:e9:b5:b9:4d:8e:e9:dc:0b:3b:67:
         60:cb:06:e6:8d:ea:99:ea:b6:b2:75:0d:2c:0b:73:dd:2c:ae:
         df:b8:b6:ff:ff:02:f5:e3:22:48:70:e2:e3:dd:76:79:71:15:
         1d:1d:a0:b7:01:81:21:05:6f:5d:3c:8b:52:a8:cd:03:71:23:
         96:b1:20:2b:4b:34:22:22:30:6e:9d:8b:5e:62:76:df:c6:ed:
         18:ae:21:df:d5:5c:e8:f9:de:f8:56:e3:dc:17:e9:65:fe:12:
         3d:d0:c3:62:eb:5a:76:d2:6f:02:ff:11:79:1a:83:f4:6d:b4:
         0a:9f:11:fe:a4:c4:19:7d:b5:1e:63:f3:50:c8:f8:8f:fd:2e:
         49:d4:af:53:25:b6:85:5d:7e:da:36:b3:29:33:f0:9f:6f:79:
         b6:8a:4d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 00:37:52 2024 by rpki-client on console-ams.rpki-client.org