Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3138392e38342e34342e302f32332d3233203d3e20323633343832.roa
File:                     3138392e38342e34342e302f32332d3233203d3e20323633343832.roa (raw, json)
Hash identifier:          YOGOjyTI7qljVbKOPmv3fOtDxkJtLD4fqSMq+DWtNMM=
Subject key identifier:   C8:BF:DC:D6:70:EE:1F:A6:C2:46:01:4E:7E:65:D6:90:B8:6F:C3:6F
Certificate issuer:       /CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
Certificate serial:       439C901538703AF617DD98CF2A3431B97666137A
Authority key identifier: FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3138392e38342e34342e302f32332d3233203d3e20323633343832.roa
Signing time:             Thu 04 Apr 2024 09:31:45 +0000
ROA not before:           Thu 04 Apr 2024 09:26:45 +0000
ROA not after:            Thu 03 Apr 2025 09:31:45 +0000
asID:                     263482
IP address blocks:        189.84.44.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 17 May 2024 23:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9c:90:15:38:70:3a:f6:17:dd:98:cf:2a:34:31:b9:76:66:13:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
        Validity
            Not Before: Apr  4 09:26:45 2024 GMT
            Not After : Apr  3 09:31:45 2025 GMT
        Subject: CN=C8BFDCD670EE1FA6C246014E7E65D690B86FC36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:0b:61:93:a6:0c:50:9e:d5:5b:69:56:ca:
                    03:b3:b0:d0:f5:a5:26:82:0a:bf:6b:75:f4:06:6a:
                    78:67:76:27:cb:1a:28:bc:31:bf:d5:48:f9:7b:26:
                    0f:d0:8d:e6:13:29:78:19:3e:9f:52:87:4a:c3:f1:
                    7f:ad:23:12:ff:76:93:c2:b7:38:87:97:6a:3b:cb:
                    21:c0:cf:0e:02:7d:ce:38:9d:ab:80:ca:f7:82:d4:
                    7a:94:0b:23:be:b2:0b:f5:ad:50:4a:0b:fa:29:e2:
                    f5:1d:ab:17:25:bf:f8:b7:3d:95:47:fb:5f:78:ce:
                    8e:10:d6:83:51:80:1e:cb:44:14:b1:59:e3:79:a8:
                    22:d0:91:ab:c4:6e:ad:96:85:ab:f6:11:7b:5e:2d:
                    a1:ab:e1:99:5a:6f:f0:1a:90:86:3f:b2:31:2a:30:
                    5d:66:de:08:ae:e8:f2:3c:05:93:95:0b:a4:4f:00:
                    30:62:de:41:27:b7:c3:39:c7:0b:b5:61:2b:25:5b:
                    b6:be:f6:f8:a9:47:83:66:ba:1f:78:c6:b6:be:6e:
                    03:58:fb:b6:b2:8a:43:f8:87:ff:32:31:85:f6:7b:
                    4e:89:bc:b2:08:2c:fc:0e:c5:e5:97:e3:31:be:cc:
                    37:b0:5d:d3:13:c9:ab:3f:e1:06:c4:6c:b7:f5:4f:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BF:DC:D6:70:EE:1F:A6:C2:46:01:4E:7E:65:D6:90:B8:6F:C3:6F
            X509v3 Authority Key Identifier:
                keyid:FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3138392e38342e34342e302f32332d3233203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:10:09:74:23:f8:37:55:28:21:9d:2e:49:60:07:7d:d0:80:
         3d:fb:00:e3:83:3c:c9:c1:be:61:fe:a1:8a:6e:c8:9c:62:7d:
         81:1a:0c:df:b9:d1:e3:ad:01:d4:06:bb:ec:d0:c8:0e:aa:aa:
         ee:96:38:d8:1e:a6:4f:41:fe:88:45:9a:29:9b:47:86:a8:2c:
         00:2a:88:17:b7:0d:4d:08:e5:66:cb:9a:f4:25:83:72:d3:7c:
         0d:d2:cf:cc:7f:1a:6c:24:57:9f:3d:99:7c:9d:34:f1:88:0d:
         6b:c8:b1:1f:c0:3c:07:35:aa:03:36:bb:be:4d:a3:73:05:a4:
         9b:c8:e9:b2:99:e4:3b:60:72:ad:0f:24:db:d6:53:27:30:26:
         dd:7d:dc:65:5c:6c:96:4d:2d:b2:3b:ce:a4:59:f0:34:5d:74:
         c1:cc:df:25:20:5b:11:60:d2:16:a5:43:7f:89:59:c2:a0:e7:
         3d:46:ec:8a:55:d9:96:6d:69:78:bb:8d:81:d7:fb:23:45:30:
         84:0b:8f:b8:4e:47:54:85:35:d7:e0:b0:a3:57:0c:bd:d2:16:
         f0:93:a0:49:17:19:3a:b1:b0:52:b2:9c:21:4f:83:f3:60:93:
         71:2e:cc:bb:42:79:ee:64:44:45:ea:5b:01:2d:d0:63:d6:4f:
         b6:ee:f6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org