Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3134332e302e35362e302f32322d3232203d3e203532363133.roa
File:                     3134332e302e35362e302f32322d3232203d3e203532363133.roa (raw, json)
Hash identifier:          K35xSL9ugynMI4QfhyPvN6hQmLQGTyIPqox314+21KA=
Subject key identifier:   10:9B:09:15:7C:40:FA:7B:BD:1B:6C:50:42:5B:BB:0B:3A:5F:47:88
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       11299BAC48CC61BE235E86595808B7DE319DFE8D
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3134332e302e35362e302f32322d3232203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:13 +0000
ROA not before:           Thu 04 Apr 2024 09:13:13 +0000
ROA not after:            Thu 03 Apr 2025 09:18:13 +0000
asID:                     52613
IP address blocks:        143.0.56.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 02 May 2024 12:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:29:9b:ac:48:cc:61:be:23:5e:86:59:58:08:b7:de:31:9d:fe:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:13 2024 GMT
            Not After : Apr  3 09:18:13 2025 GMT
        Subject: CN=109B09157C40FA7BBD1B6C50425BBB0B3A5F4788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:b7:fd:90:53:db:b2:4d:e5:41:2f:4d:ff:
                    24:de:ec:77:15:77:02:f1:17:73:97:eb:aa:7a:ea:
                    07:b8:b6:d6:fd:0c:6e:e0:35:4b:68:5c:f8:b8:4e:
                    93:4f:7a:7f:5b:c4:90:03:d6:59:6c:18:cf:f3:20:
                    90:47:7c:8b:f3:00:c9:ef:ed:10:9b:59:fc:22:e5:
                    10:0f:25:e8:7e:73:5d:08:65:80:c7:7e:9f:a0:80:
                    11:c2:cc:b1:0b:56:5b:78:d1:3a:ee:e0:41:a0:2d:
                    49:48:6f:56:5b:30:9b:79:d4:7d:1d:0d:1c:ae:4c:
                    66:d4:23:f1:0e:ae:05:31:21:2b:c4:5f:ce:0e:d6:
                    ee:9f:bd:44:c5:2a:46:2d:fd:45:9d:a8:ba:47:a7:
                    57:84:5c:97:1c:42:5f:6e:72:43:7e:06:c7:70:f5:
                    b1:ee:0f:c3:bd:58:c0:c3:b3:41:d2:83:c2:1f:15:
                    10:96:1c:f4:6a:85:38:e9:ce:8c:fc:14:b1:19:40:
                    2a:d3:49:67:6a:cb:38:88:6e:4a:a5:49:86:92:c8:
                    6e:7d:60:a5:b3:46:86:95:26:08:7a:9f:e4:51:f8:
                    72:74:dd:2b:10:f2:41:40:52:04:f6:a3:2c:53:eb:
                    0d:ff:f9:26:ac:aa:de:0e:0e:43:c9:67:a9:e5:ca:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9B:09:15:7C:40:FA:7B:BD:1B:6C:50:42:5B:BB:0B:3A:5F:47:88
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3134332e302e35362e302f32322d3232203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:4b:67:2e:b5:02:0e:db:e7:c0:4f:82:0e:6e:cd:5d:0d:d2:
         15:c2:35:17:79:2d:8f:1f:09:6d:b1:4a:f8:f1:e8:45:6c:34:
         f5:1a:10:db:13:7e:6e:78:0f:97:50:ae:bf:81:50:48:02:14:
         c7:ad:b5:43:37:fb:c4:0e:06:f4:21:93:de:c6:78:0b:85:cb:
         7b:21:48:48:2e:a4:64:60:93:67:a9:1a:b5:e0:6a:66:82:a9:
         7c:01:d7:68:9b:36:28:31:7f:cf:e6:b1:be:24:f7:1d:23:9c:
         f7:a4:20:e0:58:a3:8a:e6:f5:f2:d0:b6:53:ab:5e:01:74:3c:
         cb:08:81:a2:08:6a:40:4c:2c:6d:5c:d1:4a:97:d1:34:8f:1b:
         57:fc:36:8c:cd:60:0f:a0:52:60:64:b0:db:bf:c1:f3:40:8b:
         37:ac:2f:c4:4b:c7:8e:61:50:c8:6e:06:ed:32:05:11:ed:2e:
         18:35:a7:dd:b4:30:57:47:e6:f0:77:05:5c:2c:e2:2c:91:53:
         d9:e8:7a:9c:fc:4d:16:28:67:ca:3e:c1:54:fd:b5:59:c2:98:
         25:06:9c:76:65:c7:99:04:e7:1e:de:34:87:46:27:aa:a8:be:
         9c:bf:61:da:39:3a:b4:76:8a:25:ac:35:4f:2a:9a:18:14:bf:
         68:e9:e7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org