Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231362e302f32332d3233203d3e20323633343832.roa
File:                     3139312e3234322e3231362e302f32332d3233203d3e20323633343832.roa (raw, json)
Hash identifier:          74cKqOWAInVrODhAU72E16Zy1xKRgCsmwxzPqLpGDps=
Subject key identifier:   A5:FD:1C:03:8C:D3:E9:96:B5:E3:F3:BF:45:9D:3B:A1:66:89:EE:44
Certificate issuer:       /CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
Certificate serial:       4C234932909C36F390ACBAD8E72011BC22CD040A
Authority key identifier: FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231362e302f32332d3233203d3e20323633343832.roa
Signing time:             Thu 04 Apr 2024 09:31:44 +0000
ROA not before:           Thu 04 Apr 2024 09:26:44 +0000
ROA not after:            Thu 03 Apr 2025 09:31:44 +0000
asID:                     263482
IP address blocks:        191.242.216.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 17 May 2024 18:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:23:49:32:90:9c:36:f3:90:ac:ba:d8:e7:20:11:bc:22:cd:04:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
        Validity
            Not Before: Apr  4 09:26:44 2024 GMT
            Not After : Apr  3 09:31:44 2025 GMT
        Subject: CN=A5FD1C038CD3E996B5E3F3BF459D3BA16689EE44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:c1:cc:95:c7:af:92:36:d4:45:c3:98:e1:
                    21:96:ab:2a:d1:85:a9:0d:6b:7d:1e:c6:ac:79:05:
                    2d:4b:2d:04:a2:c1:ea:91:a4:33:4f:3e:7f:44:0d:
                    1c:91:c9:56:c0:8c:06:28:1f:cf:8b:1e:18:d6:07:
                    62:55:db:91:6f:aa:3d:95:ad:ab:4b:2e:b5:e2:37:
                    15:a5:1c:da:e0:92:6f:72:55:a2:ec:28:82:bc:21:
                    2b:db:dc:82:5a:80:a3:de:56:f1:b4:aa:99:ac:38:
                    31:dc:11:64:cd:01:47:9a:0c:51:fa:4a:3a:16:c0:
                    ba:3c:bf:cb:a7:e2:83:e1:e5:1f:96:61:b3:ce:97:
                    62:92:e4:ee:9a:4a:71:97:a0:7b:1e:c7:dc:14:ee:
                    3f:4b:62:78:44:b8:05:84:08:c9:ef:14:ac:9b:e4:
                    d7:68:3a:f9:7c:aa:52:62:75:d1:a8:78:5f:a9:ee:
                    83:b5:0d:af:1d:ee:c3:c7:f1:6c:ff:05:26:80:41:
                    7d:fb:ea:56:ca:86:2f:62:57:00:27:c5:2f:e5:e7:
                    05:5e:66:bf:54:27:17:ee:8d:35:5a:1a:b4:7e:f5:
                    15:40:b1:6f:55:58:b2:b8:14:65:ae:d3:4c:55:3f:
                    88:d0:84:7c:1a:af:b0:80:50:90:c2:9b:e0:bf:d5:
                    9a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FD:1C:03:8C:D3:E9:96:B5:E3:F3:BF:45:9D:3B:A1:66:89:EE:44
            X509v3 Authority Key Identifier:
                keyid:FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231362e302f32332d3233203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:bd:ff:2f:f6:35:91:76:de:72:0d:48:e7:8b:bd:50:c6:
         b5:60:5e:56:8d:46:37:26:ec:61:16:c5:c0:a6:97:18:5a:a5:
         f0:bb:41:6f:fe:6f:8c:19:f5:97:dd:8c:e4:06:0c:a2:6a:6a:
         91:39:54:71:81:8c:7b:70:f2:3a:24:b4:ec:75:5a:c3:96:0f:
         8c:04:af:ab:50:23:b0:68:b8:ba:61:4c:14:0a:54:f3:bf:69:
         b6:3b:fd:8e:53:40:dc:31:44:b7:ff:cc:21:7a:79:55:57:6f:
         16:c5:f4:3d:7e:14:1a:f5:80:19:f8:25:9a:b4:33:93:c9:e9:
         33:ec:7a:0d:27:58:53:12:62:28:e1:73:8b:1d:ce:79:69:b9:
         9a:69:3f:66:8f:80:8e:88:13:56:9f:f2:71:c2:49:ea:ae:63:
         8f:9a:09:14:79:7c:d6:b8:9e:a6:d4:6a:06:f9:d5:7c:f4:e3:
         e9:f3:f1:9a:73:39:ee:0e:93:a6:db:cc:0e:4c:26:0c:72:47:
         e6:bb:ca:eb:66:f0:38:3b:82:1b:6b:62:d0:7d:e3:8f:3b:e0:
         be:e4:93:2a:99:ce:87:56:7c:ca:4f:68:ad:af:eb:37:da:81:
         ae:a5:d1:48:ed:ca:c3:00:4e:1a:c7:94:79:14:49:79:e8:25:
         d5:e9:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:25 2024 by rpki-client on console-ams.rpki-client.org