Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa
File:                     3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa (raw, json)
Hash identifier:          x1Gyr1IAza6qO8XOJOKW2Yr0VOUp9lpcQnKS7ROFVWI=
Subject key identifier:   5A:0C:B6:42:72:91:44:AB:A2:F8:E8:45:CA:A1:82:1D:D4:07:F3:C1
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       1F3BE9E67487E691A084C038C11C8EF8DD768FD6
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa
Signing time:             Tue 14 May 2024 17:09:27 +0000
ROA not before:           Tue 14 May 2024 17:04:27 +0000
ROA not after:            Tue 13 May 2025 17:09:27 +0000
asID:                     265187
IP address blocks:        168.90.112.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Jun 2024 17:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3b:e9:e6:74:87:e6:91:a0:84:c0:38:c1:1c:8e:f8:dd:76:8f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: May 14 17:04:27 2024 GMT
            Not After : May 13 17:09:27 2025 GMT
        Subject: CN=5A0CB642729144ABA2F8E845CAA1821DD407F3C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:cf:47:52:04:cd:3c:15:1a:ca:57:ac:ba:
                    7b:7c:67:d8:bd:0c:64:f8:64:ac:f9:e2:10:10:48:
                    dd:a9:59:b9:ff:0e:8c:8d:23:1f:61:4b:ea:8c:35:
                    51:40:4a:b5:70:6f:5a:07:d9:bb:5f:ab:c1:df:c5:
                    1e:15:00:62:65:6c:88:e8:24:2f:c5:a6:c6:e2:a0:
                    f2:89:76:74:dc:74:3b:0a:3a:06:99:66:56:03:42:
                    0e:f5:86:23:09:ca:f2:7f:a0:4f:8e:5f:93:37:76:
                    0a:be:7d:72:8f:3f:36:16:60:0b:eb:50:54:bb:15:
                    da:b6:b7:f3:35:c3:ae:81:65:82:3f:8e:3e:1c:e8:
                    b5:72:2a:66:63:4f:b1:55:3a:ce:ef:78:68:a7:16:
                    a0:2e:4c:d4:c4:db:f4:e4:fe:88:c9:b3:a8:fb:cd:
                    e0:fb:c5:6d:3c:0b:ce:ce:ad:10:3e:5f:3e:ff:6a:
                    3e:10:fc:d6:4d:e5:db:b4:70:87:58:f7:84:ff:39:
                    43:04:34:7f:a1:cb:2d:43:9f:00:d7:c0:df:6b:88:
                    8c:3b:04:9a:03:dc:b0:b1:17:4f:e4:ed:a3:db:2a:
                    eb:ca:2f:e9:3a:e1:c2:9d:15:a0:d8:1e:42:3b:de:
                    a5:33:cb:08:f2:3e:d8:a5:ca:80:a8:5e:69:eb:72:
                    6e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0C:B6:42:72:91:44:AB:A2:F8:E8:45:CA:A1:82:1D:D4:07:F3:C1
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:ea:55:34:82:2c:73:9f:57:bb:ec:d6:c4:eb:68:8e:78:d8:
         90:b7:70:b5:59:b2:14:26:4b:34:48:25:09:78:90:f7:ef:00:
         ac:c6:d7:4a:9e:83:11:c3:ba:34:90:22:fe:5a:48:c1:22:89:
         90:45:7f:38:6a:5d:56:6f:9b:11:37:f7:28:54:12:73:03:8f:
         bd:e0:f2:8f:60:17:b9:4a:af:16:4a:7e:d3:cf:fc:83:dd:4a:
         a2:0f:aa:19:be:30:4a:7d:ab:bb:e4:16:56:cd:ff:ca:ad:b4:
         93:10:79:f4:d1:b4:66:85:f9:de:c4:f5:e9:85:c6:e2:80:16:
         d4:6b:61:d3:0b:92:b1:c4:5c:03:f1:a6:6c:a6:68:69:17:21:
         54:eb:fd:e8:31:5b:6a:a1:f1:3b:df:3e:c0:77:95:56:2f:9e:
         94:8a:0d:b1:07:aa:e0:26:9e:5e:d9:59:df:04:d9:e8:5f:41:
         9b:fc:be:64:03:4b:bb:e3:87:40:98:a5:63:97:f5:44:d0:44:
         d3:63:ca:dc:68:09:71:a1:ef:d0:dd:82:ea:d9:ca:09:53:11:
         cc:ca:61:21:5c:9b:c1:2c:a0:45:94:e1:6d:8b:bf:5e:6a:da:
         d4:24:4d:af:e5:ac:9d:c6:2d:96:99:5c:d0:77:57:39:c9:b4:
         f8:63:d1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 19:51:13 2024 by rpki-client on console-fra.rpki-client.org