Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/3139302e3132332e322e302f32342d3234203d3e20323730393238.roa
File:                     3139302e3132332e322e302f32342d3234203d3e20323730393238.roa (raw, json)
Hash identifier:          2A/St4DkbgKoUtt/r/7Ofm8NVDEjhzAgkpdvBixJcWI=
Subject key identifier:   2E:06:21:DF:02:FE:B1:65:08:DD:65:81:6A:D3:78:31:AE:29:FC:B1
Certificate issuer:       /CN=1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F
Certificate serial:       6F704CC04567E6BC055A68224DD5507F503CB515
Authority key identifier: 1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/3139302e3132332e322e302f32342d3234203d3e20323730393238.roa
Signing time:             Thu 04 Apr 2024 15:45:04 +0000
ROA not before:           Thu 04 Apr 2024 15:40:04 +0000
ROA not after:            Thu 03 Apr 2025 15:45:04 +0000
asID:                     270928
IP address blocks:        190.123.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Jun 2024 04:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:70:4c:c0:45:67:e6:bc:05:5a:68:22:4d:d5:50:7f:50:3c:b5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F
        Validity
            Not Before: Apr  4 15:40:04 2024 GMT
            Not After : Apr  3 15:45:04 2025 GMT
        Subject: CN=2E0621DF02FEB16508DD65816AD37831AE29FCB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:99:d8:bd:5d:ec:e4:24:da:49:ef:20:c8:9b:
                    53:8d:d5:2a:42:86:59:a3:e6:3c:73:be:4d:06:65:
                    33:1b:db:7a:8e:44:e1:e4:d2:63:f2:1a:1d:66:c6:
                    92:9b:21:d2:57:5d:ff:63:75:34:dd:57:67:5e:79:
                    1a:cf:4f:f6:7c:66:32:40:f0:7e:32:e9:ae:d9:f6:
                    f4:6b:09:ee:b0:b3:aa:35:38:62:ca:01:4f:b3:95:
                    41:73:bf:bf:a2:98:03:24:ad:97:53:55:76:2e:da:
                    7a:00:48:e8:fb:d7:c1:bf:7c:aa:9f:82:b3:7f:a1:
                    e5:10:34:14:1b:38:c8:74:7f:b3:56:bc:05:71:50:
                    47:ea:76:f3:40:d6:33:a1:e9:77:ca:b0:84:52:fe:
                    0d:a4:08:d9:be:1a:48:2c:dd:bc:d8:82:ff:8f:24:
                    f8:a8:6f:75:46:95:73:c6:4c:ee:45:ae:3e:46:74:
                    ca:c1:b3:dd:6d:0e:85:76:fc:20:fd:e4:9b:b1:8d:
                    c1:de:e4:38:d3:9b:61:11:30:d5:58:e6:3e:9f:fa:
                    c8:21:6a:06:24:dd:fe:14:21:3b:02:a6:ea:fd:47:
                    c8:58:5a:33:9f:58:88:7f:65:cd:fe:ed:a0:21:c6:
                    46:32:cf:78:c3:27:c8:26:5e:c0:d4:ba:27:ed:2c:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:06:21:DF:02:FE:B1:65:08:DD:65:81:6A:D3:78:31:AE:29:FC:B1
            X509v3 Authority Key Identifier:
                keyid:1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/3139302e3132332e322e302f32342d3234203d3e20323730393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:2e:7f:19:34:26:cb:ab:90:92:c6:a0:9e:ba:81:00:13:
         a6:c9:82:2b:43:18:cc:45:55:4d:eb:20:dc:ef:f2:aa:5f:b1:
         1f:ee:61:91:65:2d:80:69:8a:5b:a9:cd:d0:85:23:4d:e6:31:
         7d:0d:32:aa:57:94:a7:14:48:b7:a6:f5:a7:2b:9d:f9:46:48:
         9f:4b:ea:3f:2f:40:a7:ba:b6:ad:8a:6c:c7:ba:39:e7:d4:63:
         af:42:f5:63:12:f9:e9:11:5b:bf:e8:01:66:ca:75:d4:ab:cf:
         16:cb:08:ce:4c:76:7e:16:06:f9:44:e2:8f:d4:f1:4a:4d:94:
         41:0a:9a:af:32:ca:91:90:f4:7f:e7:7e:a5:26:10:b8:41:fc:
         e1:07:ee:3e:7d:05:d5:7b:0b:e1:84:70:33:37:80:a7:cd:2b:
         e4:ad:f6:98:9e:b8:c1:d3:41:6e:36:bc:88:06:1f:7b:76:6b:
         07:c7:70:d5:4a:d1:4c:d3:dc:7c:58:66:4b:c6:0a:b0:19:7e:
         a9:ff:6d:0b:bc:8c:ee:8d:ba:f9:dc:d5:40:ce:8c:61:28:12:
         65:cc:a4:74:3e:12:f2:64:7e:d1:2c:cd:db:15:e4:45:a9:3f:
         03:5d:64:4f:3b:77:1d:ef:a1:9d:1a:de:cc:37:e0:cb:1d:de:
         a8:1e:00:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 07:06:58 2024 by rpki-client on console-ams.rpki-client.org