Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231382e302f32332d3233203d3e20323633343832.roa
File:                     3139312e3234322e3231382e302f32332d3233203d3e20323633343832.roa (raw, json)
Hash identifier:          JaJhayJ5a8Hnae9p3dlkJ1F/N8ExRa5IC4cl2mzdvjQ=
Subject key identifier:   A3:59:19:C2:22:8B:C3:45:19:22:3F:62:F4:4C:3B:3A:FA:02:45:B8
Certificate issuer:       /CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
Certificate serial:       67EFB18A981A1DAC796684443D8771437D07D4E1
Authority key identifier: FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231382e302f32332d3233203d3e20323633343832.roa
Signing time:             Thu 04 Apr 2024 09:31:45 +0000
ROA not before:           Thu 04 Apr 2024 09:26:45 +0000
ROA not after:            Thu 03 Apr 2025 09:31:45 +0000
asID:                     263482
IP address blocks:        191.242.218.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 17 May 2024 18:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ef:b1:8a:98:1a:1d:ac:79:66:84:44:3d:87:71:43:7d:07:d4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
        Validity
            Not Before: Apr  4 09:26:45 2024 GMT
            Not After : Apr  3 09:31:45 2025 GMT
        Subject: CN=A35919C2228BC34519223F62F44C3B3AFA0245B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:15:87:7b:38:0d:60:c5:a3:31:ab:22:68:d3:
                    6f:87:05:95:f4:dd:73:2c:8a:84:fd:26:87:a4:3f:
                    ba:2f:45:9c:d3:8f:77:72:e7:76:d4:87:25:90:29:
                    4e:c9:2f:9a:5b:98:e9:9f:dc:02:1e:d2:c3:4d:c1:
                    c6:20:f9:d2:8c:27:92:64:c1:d3:c6:ea:56:6e:bc:
                    6b:97:67:c3:1d:ee:bc:df:28:5a:ff:fa:c1:c3:e4:
                    40:97:1e:43:9f:79:90:fa:a5:3c:a6:2d:a8:56:fe:
                    16:46:c3:67:f3:0a:15:80:3b:6a:2c:bd:16:5f:00:
                    8d:e8:4a:9f:d2:c8:ff:e2:5c:29:7c:59:92:51:0c:
                    5b:3e:f0:36:02:63:5e:21:43:ac:71:c1:f6:38:ee:
                    8b:67:6e:97:68:91:d4:a8:f7:f1:1f:ac:de:4d:b6:
                    cc:0d:ae:94:fb:13:7c:b2:c8:6e:ef:d2:66:3a:c2:
                    94:f2:64:5d:8a:b7:22:db:c4:62:93:49:88:91:01:
                    c0:48:6d:d1:26:0e:b8:6f:0b:c5:db:db:88:80:f3:
                    97:3a:ff:92:d2:5d:66:64:00:64:d5:87:88:9a:1e:
                    33:91:20:86:a2:31:cc:6b:8f:7c:ab:2f:1b:8d:13:
                    8f:ec:7c:4d:16:c8:e1:42:d2:47:45:d3:0c:29:e7:
                    72:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:59:19:C2:22:8B:C3:45:19:22:3F:62:F4:4C:3B:3A:FA:02:45:B8
            X509v3 Authority Key Identifier:
                keyid:FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231382e302f32332d3233203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:5c:57:1b:03:dd:f5:9c:8a:62:cb:92:f6:41:3c:81:3c:11:
         76:89:a7:dc:52:00:49:be:d0:54:03:63:33:55:ab:3c:80:b4:
         d2:40:8d:52:18:8b:9d:6a:f2:e6:df:4a:d7:52:b6:89:a1:8e:
         ed:d8:39:72:02:24:9a:7e:9f:72:b9:92:3d:2d:06:a5:67:4a:
         88:52:c1:1b:cf:50:01:4b:c9:05:36:8f:00:74:36:f4:59:de:
         0b:21:9f:f1:40:f5:98:0f:4a:a7:8a:a2:84:2f:0a:bc:5a:eb:
         c7:a8:cd:7b:15:f4:a2:93:2c:ed:07:a5:06:74:04:bf:94:e5:
         a9:64:c1:f1:1f:42:f8:99:1b:79:93:20:27:4d:00:f9:f1:c6:
         1f:73:07:70:93:57:19:b9:42:48:0b:2c:e9:bb:74:25:fe:37:
         f3:f1:b0:66:99:d6:e8:f7:f1:72:43:57:ed:8c:e1:14:eb:74:
         e9:6a:ee:19:e4:e1:35:28:27:a7:4f:d5:27:99:d1:db:72:f1:
         dd:18:f2:5b:50:29:1c:0d:e2:84:89:f3:d0:71:a1:83:69:21:
         bb:eb:60:16:f2:20:26:6e:d1:af:d7:17:bf:62:78:26:fb:26:
         ed:be:94:5e:2f:b7:99:2e:d7:f1:75:d1:dd:83:b3:81:73:34:
         d9:e3:a5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org