Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e302e302f32332d3233203d3e20323633333436.roa
File:                     3139312e33372e302e302f32332d3233203d3e20323633333436.roa (raw, json)
Hash identifier:          VkRaDhXKIsJA4ZTaQlW9lEgIqR6fE5woF3ERudd6U7c=
Subject key identifier:   30:55:25:35:84:52:F5:70:ED:98:D8:E6:C1:E1:8B:02:B2:64:75:AC
Certificate issuer:       /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial:       010F399C65EC465A8104ED4BD2A0F82E8DB851AF
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e302e302f32332d3233203d3e20323633333436.roa
Signing time:             Tue 23 Apr 2024 18:49:37 +0000
ROA not before:           Tue 23 Apr 2024 18:44:37 +0000
ROA not after:            Tue 22 Apr 2025 18:49:37 +0000
asID:                     263346
IP address blocks:        191.37.0.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0f:39:9c:65:ec:46:5a:81:04:ed:4b:d2:a0:f8:2e:8d:b8:51:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
        Validity
            Not Before: Apr 23 18:44:37 2024 GMT
            Not After : Apr 22 18:49:37 2025 GMT
        Subject: CN=305525358452F570ED98D8E6C1E18B02B26475AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fd:9c:c6:fd:75:20:77:c8:77:9e:8b:27:68:
                    c6:ef:3f:8d:0a:ad:a8:78:47:ef:ab:86:ed:bc:98:
                    62:3e:d6:30:78:ae:07:66:a2:ba:e4:0b:d9:06:a2:
                    39:6b:d8:1c:0d:40:f5:7f:3e:aa:05:5e:dc:30:c6:
                    b0:b7:63:45:60:1e:fe:f8:54:0c:a7:7e:bb:4c:93:
                    1a:ac:39:d9:d7:16:a9:32:a8:67:7b:51:6b:b8:1b:
                    ac:06:c1:db:3c:50:3a:f7:c6:02:40:55:e1:d6:90:
                    b4:68:de:12:dd:0e:3b:74:e1:4b:f2:68:88:b8:5b:
                    69:57:80:1a:0d:25:89:e7:c6:69:5d:37:f6:ea:ef:
                    78:23:59:d1:aa:66:21:36:9a:21:7c:e8:8d:30:12:
                    88:b4:8f:49:23:f8:e4:5f:5c:f8:6d:a5:5f:fc:d8:
                    dc:b4:c2:2b:fd:e7:0f:53:72:c6:ff:ec:85:e0:76:
                    e1:57:bd:6d:6a:e1:b0:0a:47:8b:4a:1a:dd:55:bc:
                    c4:d5:1a:63:14:74:11:26:c1:6c:e8:2c:20:16:70:
                    28:1b:6e:d1:80:3f:8f:d2:b4:fb:bc:45:89:4e:b4:
                    40:a7:44:2b:78:d3:e7:fb:bd:05:f2:09:ae:37:dd:
                    2e:24:e8:a8:9d:70:90:c5:2c:2e:62:54:84:a5:b0:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:55:25:35:84:52:F5:70:ED:98:D8:E6:C1:E1:8B:02:B2:64:75:AC
            X509v3 Authority Key Identifier:
                keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e302e302f32332d3233203d3e20323633333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:a5:61:13:19:f2:08:01:b0:84:d6:f0:c5:56:fb:35:f8:49:
         3b:b6:4d:32:df:e8:0a:59:7c:91:b9:c7:6b:14:bf:c7:bf:d7:
         b7:86:7a:b4:a9:d9:45:41:88:24:e8:08:f5:04:46:dc:a5:2a:
         5d:fa:b2:12:81:a7:9b:25:62:85:ef:b1:63:7c:c2:be:7a:01:
         7b:f5:25:a3:7c:f1:c2:9b:ee:61:3c:13:00:ec:d9:10:9b:48:
         95:cf:c4:72:d7:90:2b:a0:16:96:51:46:b0:25:05:f5:11:bb:
         e4:d3:db:af:50:87:0f:13:90:33:92:73:98:e1:cb:1b:0f:6b:
         5b:7f:92:06:cb:94:5f:06:57:af:d5:c2:1b:a1:6a:5f:e7:f8:
         b9:4a:35:fa:4c:8d:01:5f:dd:87:c4:05:03:fd:92:03:36:ad:
         19:00:f8:b4:5a:e0:7c:1d:06:0a:f7:65:d9:07:f3:7a:04:c9:
         2c:7c:15:50:66:d2:1c:62:ae:d3:d5:f8:49:f3:27:80:d7:ee:
         90:dd:bf:c0:b7:c6:1a:c8:48:13:76:cd:a3:29:e4:58:09:c8:
         84:41:77:c5:ce:96:60:be:0e:61:e0:4b:fb:84:62:40:ef:48:
         8f:16:43:a2:f3:7f:b4:ee:29:71:9f:a1:ef:c2:44:76:ec:ed:
         cc:aa:3a:91
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAQ85nGXsRlqBBO1L0qD4Lo24Ua8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2
QkJCRENDNjAeFw0yNDA0MjMxODQ0MzdaFw0yNTA0MjIxODQ5MzdaMDMxMTAvBgNV
BAMTKDMwNTUyNTM1ODQ1MkY1NzBFRDk4RDhFNkMxRTE4QjAyQjI2NDc1QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU/ZzG/XUgd8h3nosnaMbvP40K
rah4R++rhu28mGI+1jB4rgdmorrkC9kGojlr2BwNQPV/PqoFXtwwxrC3Y0VgHv74
VAynfrtMkxqsOdnXFqkyqGd7UWu4G6wGwds8UDr3xgJAVeHWkLRo3hLdDjt04Uvy
aIi4W2lXgBoNJYnnxmldN/bq73gjWdGqZiE2miF86I0wEoi0j0kj+ORfXPhtpV/8
2Ny0wiv95w9Tcsb/7IXgduFXvW1q4bAKR4tKGt1VvMTVGmMUdBEmwWzoLCAWcCgb
btGAP4/StPu8RYlOtECnRCt40+f7vQXyCa433S4k6KidcJDFLC5iVISlsCV1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUMFUlNYRS9XDtmNjmweGLArJkdawwHwYDVR0j
BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx
a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1
MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1b1ZVNHo5M1o3WmI1OUR6WGN4Y1h3ZFNhZ1JjS1ZWRlNOaUdIc1ppMWtKLzAv
MzEzOTMxMmUzMzM3MmUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMzMz
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAb8lADANBgkqhkiG9w0BAQsFAAOCAQEAdaVhExnyCAGw
hNbwxVb7NfhJO7ZNMt/oCll8kbnHaxS/x7/Xt4Z6tKnZRUGIJOgI9QRG3KUqXfqy
EoGnmyVihe+xY3zCvnoBe/Ulo3zxwpvuYTwTAOzZEJtIlc/EcteQK6AWllFGsCUF
9RG75NPbr1CHDxOQM5JzmOHLGw9rW3+SBsuUXwZXr9XCG6FqX+f4uUo1+kyNAV/d
h8QFA/2SAzatGQD4tFrgfB0GCvdl2QfzegTJLHwVUGbSHGKu09X4SfMngNfukN2/
wLfGGshIE3bNoynkWAnIhEF3xc6WYL4OYeBL+4RiQO9IjxZDovN/tO4pcZ+h78JE
duztzKo6kQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org