Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32332d3234203d3e20323633333437.roa
File:                     3139312e33372e33362e302f32332d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          3O7jFn9SIoKQGLrdtC1MqF3RrJx8FTAcZrk+5u2VyG4=
Subject key identifier:   49:B7:B1:01:83:C5:50:CA:3E:A6:E8:D8:85:FC:72:04:2C:14:57:4D
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       1FB5589C0246634937D9919CE7B735DB5F140D77
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32332d3234203d3e20323633333437.roa
Signing time:             Wed 11 Sep 2024 16:02:45 +0000
ROA not before:           Wed 11 Sep 2024 15:57:45 +0000
ROA not after:            Wed 10 Sep 2025 16:02:45 +0000
asID:                     263347
IP address blocks:        191.37.36.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 11:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b5:58:9c:02:46:63:49:37:d9:91:9c:e7:b7:35:db:5f:14:0d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Sep 11 15:57:45 2024 GMT
            Not After : Sep 10 16:02:45 2025 GMT
        Subject: CN=49B7B10183C550CA3EA6E8D885FC72042C14574D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:87:d3:8e:a0:10:eb:3f:c8:c1:52:31:a7:
                    1a:f5:9c:ab:4c:c5:b0:bd:d0:b8:af:2a:c7:97:23:
                    de:c1:5b:47:43:b4:01:e0:03:fc:82:30:67:6a:2a:
                    83:ee:b8:7d:e5:ef:38:cb:6a:08:c2:db:cb:ae:41:
                    3f:60:42:53:dc:66:10:88:03:9d:70:b1:c0:5f:38:
                    b9:40:fc:5e:1a:ed:b2:90:a7:1c:1b:d2:21:2d:52:
                    1b:c5:de:38:4b:b1:1d:f8:37:ff:6b:29:b3:70:11:
                    98:44:98:8e:2f:3a:9f:70:5c:07:44:90:70:70:1a:
                    be:91:11:62:73:43:ed:68:db:02:17:f8:43:f2:22:
                    3f:84:04:06:03:23:37:94:a1:fd:c0:fa:16:0c:1a:
                    04:35:ae:1f:b9:d2:31:b4:09:0d:e1:b0:e2:27:3e:
                    13:7b:ee:4e:e5:39:aa:e7:ff:a9:8f:3c:73:33:8b:
                    ca:dc:54:3f:d8:91:e9:ce:fa:48:be:29:8a:5e:d2:
                    3d:71:2a:c9:de:c8:4c:96:b6:92:61:14:bd:86:43:
                    bc:17:37:d0:99:76:4d:55:fb:8c:9e:ad:a9:af:63:
                    57:cb:98:6b:96:bd:8a:e4:45:41:bd:c7:6f:e0:a7:
                    68:d3:bb:95:f9:69:fd:fa:6b:3b:82:fa:2c:e9:5b:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B7:B1:01:83:C5:50:CA:3E:A6:E8:D8:85:FC:72:04:2C:14:57:4D
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32332d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:70:d3:73:28:16:42:7b:0c:9c:46:ef:20:c5:fc:0e:ab:3e:
         50:ca:d0:1f:18:20:d9:23:30:d5:eb:93:2f:6e:88:2f:c5:eb:
         72:7a:9f:1a:01:fc:cf:85:d2:b9:d6:1b:12:90:55:01:a0:81:
         5b:58:19:07:5a:d2:9e:bc:66:35:c2:67:92:be:d2:da:d1:8b:
         80:fa:95:f3:6c:de:14:dc:12:be:53:34:b6:c5:87:fa:d7:c5:
         9c:e5:0b:87:15:37:0f:ff:67:85:a5:f2:b9:38:47:8f:92:13:
         08:2b:09:c6:24:ba:a7:e9:84:dc:d4:e3:74:d9:49:95:14:31:
         9c:8f:10:30:39:68:75:0a:94:3e:51:37:34:38:cb:b8:3f:af:
         2f:e8:cf:de:89:46:1b:79:6c:89:cc:dd:f5:09:c6:e3:1f:58:
         20:6b:a7:99:7c:0c:d9:3e:a9:f7:9d:1c:ed:c9:93:a7:69:64:
         86:35:f6:d2:ae:0d:a7:40:a8:c8:cb:66:36:3b:a1:80:35:3f:
         41:5a:f7:da:cd:57:5d:f9:b2:11:47:b4:88:39:19:5f:d6:d5:
         7c:97:48:ca:af:cc:e4:71:c2:f5:e6:89:5e:09:74:ea:aa:5d:
         c4:ce:f8:7a:9c:66:8c:b6:21:a8:4d:27:68:b6:dc:1b:a0:b7:
         ca:37:09:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 14:21:49 2024 by rpki-client on console-ams.rpki-client.org