Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/32342e3135322e3130362e302f32332d3233203d3e20323730353139.roa
File:                     32342e3135322e3130362e302f32332d3233203d3e20323730353139.roa (raw, json)
Hash identifier:          IQtOWx0hh2W3D6S39ksiYWHJqNtXdfbiVnuHCFvUV0Y=
Subject key identifier:   FB:AF:00:19:E9:E8:D5:BC:86:94:E3:8C:6D:5C:A9:6C:8F:95:03:7B
Certificate issuer:       /CN=E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7
Certificate serial:       31450BDFC85FB3AEFA8AB52D9BCA88453ED53646
Authority key identifier: E6:40:4F:7A:E3:91:6B:15:B9:04:3E:8D:7F:AE:57:A8:EB:DE:71:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/32342e3135322e3130362e302f32332d3233203d3e20323730353139.roa
Signing time:             Thu 04 Apr 2024 08:49:56 +0000
ROA not before:           Thu 04 Apr 2024 08:44:56 +0000
ROA not after:            Thu 03 Apr 2025 08:49:56 +0000
asID:                     270519
IP address blocks:        24.152.106.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 13:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:45:0b:df:c8:5f:b3:ae:fa:8a:b5:2d:9b:ca:88:45:3e:d5:36:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7
        Validity
            Not Before: Apr  4 08:44:56 2024 GMT
            Not After : Apr  3 08:49:56 2025 GMT
        Subject: CN=FBAF0019E9E8D5BC8694E38C6D5CA96C8F95037B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:66:17:49:ca:3c:7a:ee:59:1e:9d:8b:29:5c:
                    aa:1f:43:21:eb:2c:68:a3:19:10:e1:52:c8:1e:be:
                    ff:53:30:6a:b8:7e:8a:43:15:90:99:c5:5e:a6:9b:
                    9a:ff:1f:2d:d6:52:69:7d:99:04:40:6f:03:78:e1:
                    f2:33:51:43:72:a1:21:ef:00:a7:8c:de:95:6a:2d:
                    cd:c8:27:fd:31:2a:5d:a5:5c:e1:2f:29:fe:de:e0:
                    aa:76:6c:9e:01:ba:b0:bf:42:23:d4:1d:11:e2:05:
                    18:c9:d5:ab:d9:a7:e3:e6:9e:22:f0:9e:9e:15:de:
                    c8:cb:9a:0f:d2:69:96:8d:3f:b4:40:2a:82:32:f5:
                    af:03:1f:12:1d:88:80:65:03:c4:f0:b7:2b:f2:4d:
                    24:58:0b:aa:ba:54:d2:c6:ba:57:3f:ec:64:4c:ba:
                    92:e8:bd:96:19:05:a8:62:6d:86:f9:6c:89:b3:54:
                    ce:7a:03:95:cd:1a:3c:7b:25:c4:e8:c4:cb:83:a5:
                    0c:d3:fc:ae:24:df:48:d1:70:8c:6f:cd:50:09:c6:
                    a6:2e:30:70:b9:eb:50:17:81:88:7d:91:a7:e4:99:
                    9b:8e:80:4b:4e:bb:b9:42:28:17:c1:71:c7:c1:42:
                    28:2b:10:65:2e:db:c6:85:c1:d0:22:bd:a7:3d:d1:
                    07:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AF:00:19:E9:E8:D5:BC:86:94:E3:8C:6D:5C:A9:6C:8F:95:03:7B
            X509v3 Authority Key Identifier:
                keyid:E6:40:4F:7A:E3:91:6B:15:B9:04:3E:8D:7F:AE:57:A8:EB:DE:71:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/32342e3135322e3130362e302f32332d3233203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:66:cf:ad:2d:6d:07:bb:1b:1a:5a:35:03:63:89:df:64:25:
         74:34:3f:93:9c:c4:4b:d9:ca:39:90:f3:0a:5c:7e:99:29:9a:
         48:af:0c:90:4e:c7:6f:8c:0d:95:8e:2d:7f:4e:d5:88:c3:26:
         ed:49:d4:e1:7b:f0:2d:74:68:8e:33:4b:1d:6c:f3:18:23:26:
         b5:8e:d6:7e:c3:51:8b:70:20:d7:eb:21:a4:88:cb:2e:24:07:
         da:ec:4b:ab:62:55:2d:f6:b8:e7:a8:dc:46:6f:2d:06:47:c3:
         e1:03:bb:e0:7b:24:85:e1:4f:10:0a:c8:9d:41:e9:f3:1f:a1:
         27:2a:bc:08:4a:5b:29:c2:51:be:34:2c:25:63:0f:1e:8b:42:
         d9:f4:34:0a:95:c9:c2:e1:cd:31:bd:eb:c3:f3:cd:ae:ba:ff:
         74:80:40:36:12:87:15:a4:69:a4:de:6d:fe:24:e9:2a:f6:e8:
         2f:3e:b7:95:ad:a0:de:bd:1f:b2:07:38:b6:d2:11:61:ef:48:
         bb:79:46:c5:ac:5b:c3:a2:90:d2:d7:10:5c:66:76:22:32:bc:
         6d:a4:58:5e:a9:5b:f2:3a:19:67:d8:2c:1e:51:f1:26:e6:f9:
         0c:13:ec:bc:dd:1a:13:f4:3e:5f:c5:bd:7a:5c:23:42:c4:fc:
         14:85:45:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org