Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e302e302f32342d3234203d3e20323635323430.roa
File:                     3136382e302e302e302f32342d3234203d3e20323635323430.roa (raw, json)
Hash identifier:          n2pZXvujvACQLRles4mTLmRUr/TMJpCsn1YdA8d6Eqw=
Subject key identifier:   5C:A2:23:11:BD:B3:16:E1:09:B4:F9:AA:FC:64:3E:2C:11:AA:66:F6
Certificate issuer:       /CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
Certificate serial:       21A7B50CD2F8C41A518574AAC44AC19286C766F3
Authority key identifier: 9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e302e302f32342d3234203d3e20323635323430.roa
Signing time:             Thu 04 Apr 2024 04:19:39 +0000
ROA not before:           Thu 04 Apr 2024 04:14:39 +0000
ROA not after:            Thu 03 Apr 2025 04:19:39 +0000
asID:                     265240
IP address blocks:        168.0.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 16 Sep 2024 20:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a7:b5:0c:d2:f8:c4:1a:51:85:74:aa:c4:4a:c1:92:86:c7:66:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
        Validity
            Not Before: Apr  4 04:14:39 2024 GMT
            Not After : Apr  3 04:19:39 2025 GMT
        Subject: CN=5CA22311BDB316E109B4F9AAFC643E2C11AA66F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:d6:b8:0d:df:0e:a2:78:81:e5:8b:89:4e:
                    d9:8e:f8:d0:83:e6:39:d5:de:9b:cc:7a:7f:11:a3:
                    5b:64:ee:7c:08:14:d0:02:41:94:09:7f:4a:92:1d:
                    63:45:fe:1a:4c:58:3d:c3:0e:65:04:e9:f3:70:8e:
                    12:b0:5d:04:fc:b2:86:84:41:a1:83:42:9e:00:1c:
                    df:e9:ac:4a:32:df:11:04:cc:70:d7:3e:38:ff:e3:
                    c0:7d:78:1a:7f:1b:fc:57:a4:41:bf:95:f5:8a:ad:
                    48:5e:41:cd:d9:61:0d:14:dd:62:d9:f1:48:78:64:
                    f5:73:36:8e:75:32:92:38:71:5d:81:78:ec:fb:a5:
                    f7:a1:78:4e:e5:5b:fe:21:d6:3f:60:46:8a:8f:b0:
                    22:4e:e1:bc:48:66:76:b2:f6:90:a3:e0:06:bc:cd:
                    7d:5c:56:9f:50:6b:b2:1c:79:04:36:d5:17:fe:d5:
                    00:57:2f:4d:8f:6d:11:34:25:3e:1e:10:34:f3:99:
                    95:ed:ac:50:04:35:44:1e:a9:00:38:90:06:9d:f8:
                    1a:e1:f1:00:2d:bc:08:b6:aa:a2:e7:d3:4c:44:ae:
                    79:00:29:e2:84:46:0d:63:22:03:06:6f:39:1d:68:
                    67:d8:2a:64:bf:b1:75:c1:66:b5:93:4b:3a:1b:9a:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A2:23:11:BD:B3:16:E1:09:B4:F9:AA:FC:64:3E:2C:11:AA:66:F6
            X509v3 Authority Key Identifier:
                keyid:9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e302e302f32342d3234203d3e20323635323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:93:ab:5e:dc:c9:ba:60:ba:7e:95:2d:3a:ef:4f:51:f5:ff:
         36:e8:ee:c1:9c:6e:f9:c5:10:10:6f:0c:66:f5:d5:46:4a:ed:
         91:07:a0:45:2a:7b:14:09:f3:80:79:57:23:bc:75:0d:fa:5b:
         89:10:fd:a9:95:8f:a3:cf:93:32:a6:9d:f2:53:3b:32:c4:a1:
         fa:1c:3e:c6:3a:19:d6:67:23:dd:9d:b1:5f:17:0f:ed:2d:11:
         35:98:8c:bb:ec:55:b4:18:68:8e:36:e4:16:33:2c:38:a6:09:
         18:a6:33:c8:f4:00:fe:95:a6:61:57:49:a3:21:84:d3:68:d9:
         a4:b9:df:15:b0:1a:b7:8c:30:a1:16:b8:08:9a:da:9b:6a:16:
         79:d1:46:25:97:48:7f:29:c0:92:bc:3a:4e:e6:50:59:0a:b0:
         99:32:f0:de:71:b8:ca:99:e3:68:8f:29:2c:4d:6e:24:07:fb:
         54:90:a7:fa:c1:c4:c4:3e:09:58:5a:2e:b8:41:93:69:dc:fc:
         ed:f4:07:5e:9b:34:51:d9:e7:80:0f:9c:45:9a:d6:aa:71:79:
         0e:c5:d8:d4:9b:a1:fe:cb:f3:e3:da:de:af:39:ab:f5:b2:42:
         58:c9:10:28:92:a5:81:70:6b:22:7e:04:e7:87:81:a9:d8:43:
         a1:25:bb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 00:24:21 2024 by rpki-client on console-fra.rpki-client.org