Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3136382e3230352e36302e302f32322d3234203d3e20323633363431.roa
File:                     3136382e3230352e36302e302f32322d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          0upyVGUxH/2LT2lNajYoTnH7Z4ZqBOyca50Y+mWTAW8=
Subject key identifier:   E4:4A:F2:82:03:5C:CF:98:8B:BE:FF:EF:FD:72:04:B4:41:43:59:A8
Certificate issuer:       /CN=79124DD01AF5FB142695944778636C75D227628B
Certificate serial:       58BF32AA78756C4B9C2ECB2F5916935C94AAACD0
Authority key identifier: 79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3136382e3230352e36302e302f32322d3234203d3e20323633363431.roa
Signing time:             Thu 04 Apr 2024 10:06:36 +0000
ROA not before:           Thu 04 Apr 2024 10:01:36 +0000
ROA not after:            Thu 03 Apr 2025 10:06:36 +0000
asID:                     263641
IP address blocks:        168.205.60.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 00:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bf:32:aa:78:75:6c:4b:9c:2e:cb:2f:59:16:93:5c:94:aa:ac:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79124DD01AF5FB142695944778636C75D227628B
        Validity
            Not Before: Apr  4 10:01:36 2024 GMT
            Not After : Apr  3 10:06:36 2025 GMT
        Subject: CN=E44AF282035CCF988BBEFFEFFD7204B4414359A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:06:6d:4d:95:69:62:b0:a8:ac:0e:e0:1a:ac:
                    8a:24:be:6f:02:f0:eb:9e:cc:cd:71:ed:17:55:4e:
                    ca:6a:52:be:74:9a:b9:fb:57:19:56:d8:a6:e5:35:
                    24:a0:ee:16:87:f3:41:bb:5c:e5:72:77:84:a5:e3:
                    34:0e:23:78:ee:fa:be:a1:e2:26:2f:f0:78:03:ab:
                    e0:4c:bd:b5:69:62:7a:0b:15:4f:e2:61:5a:88:88:
                    bb:54:f2:3e:81:38:7d:e4:da:d1:13:06:f0:a4:6a:
                    96:1e:25:43:e9:a4:c2:88:15:6c:0f:e8:a3:88:d5:
                    14:3d:35:85:a6:5f:84:fe:28:8f:3c:99:bb:df:b3:
                    35:e3:95:b5:b0:96:f4:51:9e:fa:d8:1f:ea:64:34:
                    eb:6f:bf:ab:a4:95:6b:bb:d0:6c:e8:db:1d:61:fe:
                    55:ab:d6:bb:47:b4:cf:98:c8:0e:ff:e1:2a:9e:ab:
                    c1:db:87:19:2a:e8:86:04:bd:7d:3a:65:e1:59:bc:
                    a2:30:d7:83:af:a6:cd:86:a6:f0:42:bc:db:66:61:
                    fc:76:ee:15:3d:f4:f3:64:76:c7:47:51:dd:8f:68:
                    42:28:d8:74:1b:02:d1:ac:87:95:7c:b1:0a:52:6d:
                    0c:e6:b8:fb:7c:29:37:f3:6f:79:7a:99:a0:59:10:
                    9f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4A:F2:82:03:5C:CF:98:8B:BE:FF:EF:FD:72:04:B4:41:43:59:A8
            X509v3 Authority Key Identifier:
                keyid:79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3136382e3230352e36302e302f32322d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:cb:b8:3a:86:6b:61:11:4d:0b:c9:d1:e1:af:c4:c7:80:39:
         ba:75:5b:9a:ee:ef:be:57:6e:5f:bf:59:00:d9:40:54:5c:83:
         2e:de:8b:f4:76:ec:0d:66:ce:3c:ea:f8:e6:f4:82:68:e7:7e:
         19:d8:4f:b8:98:f2:c8:f5:53:8c:c5:ae:d4:85:71:e4:48:d6:
         07:53:5b:2b:06:a1:a1:70:31:2f:a7:88:e0:36:0a:08:e1:64:
         ea:40:5a:4b:4a:dc:dd:21:3a:81:06:28:70:73:51:d6:f2:a0:
         b1:f4:12:d0:1f:eb:4f:c9:58:95:cf:22:d0:e8:82:18:75:0e:
         da:c9:f6:c2:76:7d:27:84:a3:7a:0e:6c:64:ac:b0:46:63:59:
         44:ee:89:05:d7:43:e0:4f:08:d8:6b:7a:32:48:fd:11:d7:80:
         e9:c6:78:be:3e:44:bf:92:17:f7:34:53:d8:2e:3e:92:fd:1e:
         d3:c2:b3:46:5c:76:1b:c5:d6:f1:90:b9:98:5c:ac:de:e0:7b:
         97:bb:09:83:67:ae:d4:0d:de:bb:da:87:b9:af:33:db:cf:7c:
         34:94:7a:af:a4:1e:d6:31:cd:8d:c1:02:c2:9a:26:21:dc:e7:
         86:d7:97:e6:99:3b:25:da:f6:cb:75:a2:49:bd:16:64:5e:83:
         8d:99:9a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 03:13:55 2024 by rpki-client on console-fra.rpki-client.org