Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/32342e3135322e3130342e302f32332d3233203d3e20323730353139.roa
File:                     32342e3135322e3130342e302f32332d3233203d3e20323730353139.roa (raw, json)
Hash identifier:          H/xjUlQpvlVyYj91TQz4RIAI+ElQLelEJypspIHWczE=
Subject key identifier:   A8:57:DF:54:99:A6:07:E2:15:19:AD:89:23:86:E9:81:E4:90:95:8F
Certificate issuer:       /CN=E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7
Certificate serial:       75ED25EC8F06F1DC6EE80022564F0F625E480FE8
Authority key identifier: E6:40:4F:7A:E3:91:6B:15:B9:04:3E:8D:7F:AE:57:A8:EB:DE:71:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/32342e3135322e3130342e302f32332d3233203d3e20323730353139.roa
Signing time:             Thu 04 Apr 2024 08:49:56 +0000
ROA not before:           Thu 04 Apr 2024 08:44:56 +0000
ROA not after:            Thu 03 Apr 2025 08:49:56 +0000
asID:                     270519
IP address blocks:        24.152.104.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 13:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ed:25:ec:8f:06:f1:dc:6e:e8:00:22:56:4f:0f:62:5e:48:0f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7
        Validity
            Not Before: Apr  4 08:44:56 2024 GMT
            Not After : Apr  3 08:49:56 2025 GMT
        Subject: CN=A857DF5499A607E21519AD892386E981E490958F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c8:1c:04:f4:18:14:bb:c5:05:2a:09:fe:56:
                    48:04:f5:40:e9:17:18:45:c4:c3:83:72:00:8f:a1:
                    51:ea:55:3f:38:a6:39:32:82:20:c0:86:8e:1b:32:
                    3d:95:fc:89:56:77:64:13:cc:d6:99:1e:ff:b9:83:
                    eb:a0:a3:5f:c4:7a:b4:3c:9d:a2:1d:56:35:7e:08:
                    89:ce:ed:f7:9b:75:54:ff:00:a7:73:ec:fd:4c:ca:
                    62:d4:a6:80:db:c5:a5:1f:c5:76:24:6c:18:7b:93:
                    0f:1f:35:89:74:fd:b6:22:aa:25:0a:54:3e:53:9e:
                    d1:04:c2:fb:5b:18:63:ed:50:06:5e:95:98:d0:29:
                    ff:f4:d7:46:1f:cd:2c:f2:70:3e:e9:61:c5:9e:ed:
                    d8:14:8a:f2:62:0d:61:0f:c7:4a:8d:de:3f:8a:0f:
                    8f:89:ec:b5:01:11:30:35:35:c3:40:06:40:db:46:
                    2f:d7:b9:5b:6a:0e:52:ed:70:00:a5:70:a9:c1:c9:
                    a8:c2:0e:86:58:37:fe:56:d4:05:4a:28:0b:7b:04:
                    5b:17:1b:2d:a8:f9:b3:46:94:a5:8c:17:e3:6d:73:
                    1c:6f:cb:19:84:0a:ce:fb:c0:14:fb:2b:09:95:b1:
                    a0:49:85:da:55:15:3e:29:98:18:a3:55:78:fe:2b:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:57:DF:54:99:A6:07:E2:15:19:AD:89:23:86:E9:81:E4:90:95:8F
            X509v3 Authority Key Identifier:
                keyid:E6:40:4F:7A:E3:91:6B:15:B9:04:3E:8D:7F:AE:57:A8:EB:DE:71:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/32342e3135322e3130342e302f32332d3233203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:7e:b5:88:6f:da:63:e7:20:53:c7:7f:2e:ae:a3:ac:79:72:
         47:cd:35:49:ba:88:c5:2f:85:bb:ab:7c:f1:94:2d:80:77:b0:
         66:bb:e8:8f:8b:6b:8e:64:fa:b0:69:6e:4c:ca:89:8c:4e:e1:
         3d:66:bf:70:84:47:91:5a:8d:73:4a:bd:e0:e1:4a:40:fc:2d:
         22:90:c5:79:64:74:71:17:df:c6:3f:29:da:86:33:da:34:b8:
         8d:d2:f4:3c:3a:fc:c1:9f:4d:6d:5e:b8:ef:ce:cf:46:d8:80:
         a3:4a:cf:db:d5:d0:d2:98:9f:86:52:16:46:d0:49:22:0d:94:
         0e:08:73:e5:f4:f1:b4:8c:ca:37:ed:7e:ce:44:fb:97:6d:26:
         b1:cc:8f:d1:f8:75:c8:55:66:7e:59:05:17:31:36:85:e8:33:
         08:c5:c0:9d:9f:e4:6e:46:55:4b:32:31:02:b2:d4:05:1a:90:
         6f:71:d8:fa:14:49:14:69:11:de:24:b5:4e:18:19:21:3e:b3:
         56:d8:91:6e:d5:97:11:f7:91:08:3f:35:e9:4d:5b:a2:b0:48:
         b2:9f:50:51:b6:56:29:e1:c9:04:11:57:18:cf:62:78:06:ed:
         ba:10:85:92:5b:c6:51:40:1a:1c:90:7d:bc:5c:b4:fc:4f:5d:
         a4:a5:0d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org