Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e342e302f32332d3233203d3e20323633333436.roa
File:                     3139312e33372e342e302f32332d3233203d3e20323633333436.roa (raw, json)
Hash identifier:          pngbB8Yl7lq1Gr0kfacvAj5T/j8HeAmlg/RNjRFR8Jo=
Subject key identifier:   31:63:D6:0D:7D:C7:79:F1:2C:B5:63:C3:FC:E5:B0:C0:4A:2A:34:35
Certificate issuer:       /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial:       7FE64F8029FDBC0F477FF14CBAE3DE88ADD712FF
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e342e302f32332d3233203d3e20323633333436.roa
Signing time:             Tue 23 Apr 2024 18:49:42 +0000
ROA not before:           Tue 23 Apr 2024 18:44:42 +0000
ROA not after:            Tue 22 Apr 2025 18:49:42 +0000
asID:                     263346
IP address blocks:        191.37.4.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e6:4f:80:29:fd:bc:0f:47:7f:f1:4c:ba:e3:de:88:ad:d7:12:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
        Validity
            Not Before: Apr 23 18:44:42 2024 GMT
            Not After : Apr 22 18:49:42 2025 GMT
        Subject: CN=3163D60D7DC779F12CB563C3FCE5B0C04A2A3435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:3a:fe:5f:af:f1:3b:7c:07:af:eb:67:91:
                    67:63:20:47:de:9b:46:a4:9d:e0:1c:f4:61:fa:ae:
                    1d:99:a3:e3:9f:d3:95:05:84:f7:0c:0a:6d:c5:65:
                    a2:fe:95:60:f5:a4:2f:ac:bc:50:39:52:fd:e7:47:
                    b9:a3:1c:2c:10:df:9a:e5:df:a5:40:d2:91:b6:ca:
                    f3:ad:12:08:f1:85:19:03:0a:05:0f:da:13:99:d1:
                    fc:4d:99:6c:27:11:a1:d4:64:d2:86:24:b3:c5:50:
                    ac:d4:67:4d:b1:16:40:3e:20:be:5e:27:76:9d:36:
                    ce:c8:59:f3:38:b7:40:be:49:a3:b5:b3:fe:33:04:
                    7d:96:b3:3a:e2:c5:e0:e7:a7:70:7c:f5:9d:3b:15:
                    4a:01:0c:9a:fb:58:42:3d:35:99:19:b1:f9:aa:a4:
                    eb:0b:c6:85:8d:58:f0:24:52:27:3b:84:03:c5:a0:
                    7d:1f:40:bd:ef:43:41:e6:fc:b1:7a:54:a9:05:e0:
                    45:3d:97:6d:ae:1d:1b:24:95:94:94:4a:13:4d:67:
                    ab:d3:98:ec:a5:a8:9c:8f:21:8a:d3:c1:ba:a0:10:
                    fd:cb:c6:42:e9:55:1b:68:a4:30:1e:72:f0:e4:3c:
                    93:87:80:a2:62:e0:58:4c:a5:48:f6:db:29:3d:2e:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:63:D6:0D:7D:C7:79:F1:2C:B5:63:C3:FC:E5:B0:C0:4A:2A:34:35
            X509v3 Authority Key Identifier:
                keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e342e302f32332d3233203d3e20323633333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:df:04:d4:b8:f7:e3:aa:f9:d8:f3:58:d6:eb:6c:98:91:cc:
         fc:20:91:99:49:8d:18:bc:30:0e:ca:c8:7f:cb:e4:8f:13:d8:
         5e:26:56:b4:8f:c1:0d:c9:32:dd:2e:74:1c:3e:40:90:be:cc:
         0c:6e:31:c8:c7:43:82:08:0c:b7:60:24:bd:67:2f:35:0b:8f:
         d3:6c:b5:5d:34:45:ed:d0:25:c8:4c:4b:0a:bd:dc:6f:70:f3:
         c0:71:04:dc:02:94:96:f2:aa:8b:4e:9d:ff:c9:55:7c:53:48:
         8c:e5:29:c0:42:c5:38:c0:7a:71:5f:03:25:9a:ca:2e:0d:59:
         d6:70:86:2b:29:ab:0f:6e:18:5d:08:25:84:90:5f:8a:c9:aa:
         60:05:fb:f1:e5:ef:9f:f3:13:06:6a:27:b0:d9:64:a8:a0:aa:
         a1:b3:0f:01:55:c2:69:6e:23:aa:60:80:23:11:91:f8:dc:ef:
         28:b2:3c:ac:91:cb:24:1f:33:7b:b6:c9:43:cd:b1:8b:37:5c:
         b9:9f:5a:d7:c0:88:37:1f:bc:f2:d9:22:c0:1c:cf:6b:30:3d:
         f5:93:4f:3a:d2:c3:25:dd:7b:99:e8:1d:f3:04:61:01:34:4c:
         b5:fe:55:80:92:7d:1b:09:42:ab:07:cd:8b:e6:78:55:53:bf:
         cb:47:d7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:33 2025 by rpki-client