Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32332d3233203d3e20323633343231.roa
File:                     3136382e3132312e3135362e302f32332d3233203d3e20323633343231.roa (raw, json)
Hash identifier:          uY8xTBNatClsMPKoJjwBvY87wiSqx6SD5PJKWZvFH7A=
Subject key identifier:   A3:6B:0D:8A:30:BF:2C:61:9A:00:48:7C:56:26:4A:8D:01:53:34:89
Certificate issuer:       /CN=A0FF9A83436226FF19D020B34271420BD55D7D05
Certificate serial:       2AB407F8E2857E6C778C58C406010C8B1D9A85EC
Authority key identifier: A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32332d3233203d3e20323633343231.roa
Signing time:             Thu 25 Jul 2024 01:01:29 +0000
ROA not before:           Thu 25 Jul 2024 00:56:29 +0000
ROA not after:            Thu 24 Jul 2025 01:01:29 +0000
asID:                     263421
IP address blocks:        168.121.156.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 14:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b4:07:f8:e2:85:7e:6c:77:8c:58:c4:06:01:0c:8b:1d:9a:85:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0FF9A83436226FF19D020B34271420BD55D7D05
        Validity
            Not Before: Jul 25 00:56:29 2024 GMT
            Not After : Jul 24 01:01:29 2025 GMT
        Subject: CN=A36B0D8A30BF2C619A00487C56264A8D01533489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:99:b1:01:dc:2c:fe:9b:bf:f3:c0:6b:04:c1:
                    bb:ed:d6:fb:6f:e6:57:cc:72:ee:d8:98:7f:e9:69:
                    9d:5c:65:d7:4b:d4:c7:0f:1f:2a:a3:23:4b:20:fc:
                    b8:32:55:ec:91:74:ec:77:88:e2:54:62:51:19:ee:
                    69:92:18:10:99:f9:e1:f6:b7:87:6b:87:07:2c:e0:
                    47:7c:8a:a1:ab:57:e0:88:5d:e8:9a:80:c5:91:68:
                    db:e5:fa:4b:81:e1:99:80:bd:8c:9b:58:15:0a:c5:
                    9f:ed:30:c3:fb:b4:a8:c0:b2:e1:56:53:e4:a2:5f:
                    48:72:54:a6:66:cf:66:eb:f7:a6:04:bf:9b:b8:8e:
                    c5:20:65:6a:79:86:72:e8:ca:ec:00:f9:bc:d4:40:
                    85:b8:a2:65:8d:55:17:2e:a2:e7:21:85:8c:4b:1b:
                    5d:4e:73:e1:b8:3d:61:da:de:fb:30:58:40:df:28:
                    d4:97:94:2c:b9:b1:16:75:46:a1:e7:fa:66:a1:23:
                    b0:52:89:f3:bc:a8:3d:e8:d0:fd:3f:9d:2c:8b:95:
                    02:50:28:76:0c:f5:11:78:00:01:a6:b3:d7:ab:59:
                    4e:dc:80:ac:c1:0c:71:62:fd:4d:0b:f0:2c:f2:0b:
                    33:9a:27:7f:5f:91:17:5c:c7:72:f8:09:bc:09:1c:
                    96:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6B:0D:8A:30:BF:2C:61:9A:00:48:7C:56:26:4A:8D:01:53:34:89
            X509v3 Authority Key Identifier:
                keyid:A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/A0FF9A83436226FF19D020B34271420BD55D7D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32332d3233203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:30:3b:ce:9b:03:3d:42:e4:af:82:cd:37:99:78:36:8c:61:
         49:ab:51:38:57:36:9e:ef:15:22:76:c0:74:9a:5d:8f:65:6b:
         5a:0b:07:0e:4b:d8:52:07:08:68:42:d9:6c:ff:40:34:0d:37:
         f5:1d:c6:7a:70:53:d0:8b:b8:81:5d:16:e5:e5:d9:b6:74:64:
         c3:3a:ac:2e:29:a4:93:33:5f:9c:a5:8c:14:f6:e2:ed:e0:b1:
         f8:4c:d5:78:87:da:3b:2d:d5:63:ac:06:43:68:cf:4b:71:37:
         39:02:a3:9a:0a:ab:46:1d:9d:01:37:ee:68:a2:aa:43:3b:22:
         93:a7:11:e0:4f:92:5f:fe:a0:32:b8:6e:a5:5f:9f:c3:3f:98:
         4c:b1:54:0c:41:98:8a:b1:0e:ce:7f:3c:7d:6a:55:5c:18:50:
         9d:08:52:e5:24:a2:4a:47:bf:18:1d:b6:8a:bd:43:e3:33:b6:
         54:be:4f:16:bd:fa:ca:19:2c:16:5f:2c:e3:ad:38:d4:1a:c0:
         62:b2:ed:da:65:27:63:cf:ee:eb:78:b9:db:0a:40:ab:33:d3:
         5e:f4:db:b0:11:66:7a:37:55:f0:c1:3c:35:19:dc:21:89:cc:
         ec:8a:79:5b:e6:b7:e9:4f:0f:e3:32:5d:b2:e2:d3:46:f2:ae:
         dc:90:b6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 16:22:55 2024 by rpki-client on console-fra.rpki-client.org