Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3134332e302e35362e302f32332d3233203d3e203532363133.roa
File:                     3134332e302e35362e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          wby8h6wfrf12YlO0N9E6U07T+XffiCz2wy0Xq1KdD3M=
Subject key identifier:   0E:F5:05:35:C2:95:B6:06:C1:87:6C:76:5E:E4:BF:1A:C6:E7:99:65
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       58A05CEC9F12B7582DAD412186E4B19F93FD3F85
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3134332e302e35362e302f32332d3233203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:16 +0000
ROA not before:           Thu 04 Apr 2024 09:13:16 +0000
ROA not after:            Thu 03 Apr 2025 09:18:16 +0000
asID:                     52613
IP address blocks:        143.0.56.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 02 May 2024 12:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a0:5c:ec:9f:12:b7:58:2d:ad:41:21:86:e4:b1:9f:93:fd:3f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:16 2024 GMT
            Not After : Apr  3 09:18:16 2025 GMT
        Subject: CN=0EF50535C295B606C1876C765EE4BF1AC6E79965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:28:a1:ee:d1:53:45:12:26:cc:04:54:e5:f3:
                    3e:83:3f:b4:23:ac:1c:32:8a:4d:ba:cd:bc:33:86:
                    43:11:6a:c0:d6:75:a3:b8:62:dd:8d:9d:f3:17:d6:
                    29:c6:19:d9:17:2f:b8:4f:81:cb:b6:f0:7e:75:6a:
                    46:b6:be:d8:34:1c:b8:df:39:65:eb:64:e2:93:8b:
                    bf:df:17:53:db:a6:67:c6:da:2c:55:21:54:15:4e:
                    79:b0:76:47:f7:a9:0f:f1:d6:8e:72:50:a4:16:ff:
                    49:a0:1f:6b:4b:72:f5:52:1c:08:96:93:7a:cf:48:
                    14:4d:56:fe:a1:77:c1:18:f1:30:21:77:72:8b:f5:
                    bc:5f:80:9e:1f:b4:be:18:eb:4c:04:a9:69:ba:42:
                    09:8e:86:ee:f1:63:08:ba:47:10:c2:33:e3:a1:87:
                    86:ea:15:84:11:0f:07:ea:21:52:0d:96:69:90:0b:
                    ff:47:2a:61:8a:35:a6:fc:75:07:08:87:4d:d4:9d:
                    6e:dd:d0:b2:b6:db:ac:b4:64:26:a0:a7:b5:9b:2b:
                    1f:53:8b:a0:19:9f:27:ec:d7:85:7b:21:15:96:04:
                    e4:c7:9f:51:ff:9c:2f:05:47:30:5d:f2:29:b6:b7:
                    35:11:4c:2d:34:ff:f6:98:39:f6:da:42:ad:9d:13:
                    ce:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F5:05:35:C2:95:B6:06:C1:87:6C:76:5E:E4:BF:1A:C6:E7:99:65
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3134332e302e35362e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:d0:63:88:8b:d2:42:47:5d:82:9d:6c:57:d3:56:f1:26:75:
         71:b4:98:47:26:89:83:e6:76:84:cb:51:fa:b4:e4:a9:77:c5:
         23:5c:b1:18:f9:10:d1:0c:24:2e:ee:d8:aa:96:e0:f5:e7:c0:
         97:8c:ff:13:15:3f:c6:20:55:6d:5f:d5:b3:ea:20:0d:0b:b9:
         9f:9c:dc:9e:f6:85:bc:a1:e0:d8:c4:d9:89:ed:70:97:6c:1d:
         a4:e6:80:2d:e2:c1:91:f2:21:07:3d:42:be:24:c9:8b:07:d0:
         96:13:19:f9:40:e2:15:2d:70:70:14:56:19:1d:f3:2d:02:30:
         9d:27:08:2e:4e:6b:58:eb:3a:ff:d4:28:59:12:e7:3c:a7:a2:
         df:d1:92:8e:d4:dd:86:f2:13:5f:9e:e0:70:50:05:64:b6:2c:
         e4:ec:90:58:28:a1:72:9d:65:97:f1:34:d7:a4:89:a3:b7:e4:
         5b:4e:b0:da:db:fd:cd:a5:69:bb:5c:72:0b:f3:19:ff:87:8e:
         9e:05:70:e1:55:fd:12:cf:07:64:e2:4e:5f:21:33:32:1b:34:
         39:18:e5:ec:8a:e2:09:1e:ec:e9:be:db:ed:80:10:f1:7a:32:
         4b:a6:b1:59:fe:9f:00:61:51:61:ef:74:2e:c9:85:6e:18:57:
         15:38:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org