Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/3139302e3132332e332e302f32342d3234203d3e20323730393238.roa
File:                     3139302e3132332e332e302f32342d3234203d3e20323730393238.roa (raw, json)
Hash identifier:          M+n7NpHJq6qzMBS4g5qz7uh41i5bef1eXILJsVgzAdc=
Subject key identifier:   9C:F0:9B:D6:D7:5B:8F:41:F0:62:CA:9D:3A:A0:D6:FD:CD:69:77:BA
Certificate issuer:       /CN=1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F
Certificate serial:       3C6F9F648AFF2E36ECDD504B4912026871B0612F
Authority key identifier: 1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/3139302e3132332e332e302f32342d3234203d3e20323730393238.roa
Signing time:             Thu 04 Apr 2024 15:45:03 +0000
ROA not before:           Thu 04 Apr 2024 15:40:03 +0000
ROA not after:            Thu 03 Apr 2025 15:45:03 +0000
asID:                     270928
IP address blocks:        190.123.3.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Jun 2024 04:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6f:9f:64:8a:ff:2e:36:ec:dd:50:4b:49:12:02:68:71:b0:61:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F
        Validity
            Not Before: Apr  4 15:40:03 2024 GMT
            Not After : Apr  3 15:45:03 2025 GMT
        Subject: CN=9CF09BD6D75B8F41F062CA9D3AA0D6FDCD6977BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c4:16:58:8d:a4:64:cc:61:26:38:4d:80:3c:
                    72:55:6e:be:a7:9f:3b:bf:1c:ba:60:a0:e3:ee:fa:
                    c5:6c:3c:77:95:26:90:6f:0d:85:45:9d:e1:52:4d:
                    22:79:55:e1:2c:cb:70:91:a5:5c:82:77:24:eb:fe:
                    c1:40:01:9f:56:a7:40:de:da:14:d5:04:38:62:bd:
                    db:91:43:1b:47:99:eb:ed:7d:b1:94:8a:e7:cc:3d:
                    65:af:c9:6d:f0:fa:4c:72:d5:58:67:6d:4b:3c:b5:
                    2b:4e:9c:b1:72:af:ee:b4:63:c4:61:3d:38:3a:26:
                    01:cc:a8:0f:c3:e4:11:5a:b4:d5:ca:d7:0b:05:f6:
                    72:47:70:20:ef:2d:3d:d5:24:f8:1a:9b:c3:b3:a6:
                    32:07:c5:0f:9a:93:b5:67:b0:70:10:cb:91:73:33:
                    ba:10:8c:f7:47:44:79:f8:be:2b:21:6a:d9:36:4e:
                    12:a1:93:dc:0b:9c:61:57:95:11:d0:27:e6:bf:38:
                    8b:24:a1:cf:25:68:f8:22:ae:cd:f1:7e:3b:e7:0e:
                    5c:c1:43:67:ea:2f:49:ad:79:08:d5:04:a5:e8:d0:
                    37:fc:4e:2c:e8:51:b5:f7:ff:ed:ca:c2:af:82:e4:
                    ce:15:4b:b2:3f:ae:cd:7b:df:d3:eb:8e:88:c4:1d:
                    a0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F0:9B:D6:D7:5B:8F:41:F0:62:CA:9D:3A:A0:D6:FD:CD:69:77:BA
            X509v3 Authority Key Identifier:
                keyid:1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/3139302e3132332e332e302f32342d3234203d3e20323730393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:30:86:15:61:36:bb:47:cd:1f:5c:ba:fb:d2:ae:8d:ec:61:
         41:0d:5a:53:cf:fa:eb:f8:43:84:88:ff:b6:82:0f:2f:07:0e:
         57:ea:aa:1b:e5:94:41:d4:f7:db:46:31:ff:b3:4a:a2:91:0f:
         92:c3:1c:03:21:9e:5a:3c:cd:90:1d:3d:bc:16:6d:a9:0d:c7:
         d1:cd:fb:07:31:38:97:69:a1:00:cc:dd:eb:1b:3e:74:96:2e:
         13:62:8f:7d:13:0d:06:3f:13:af:75:7e:6b:b5:4d:05:3d:81:
         9a:06:ff:6e:a5:f5:b7:b3:2b:6c:55:62:15:fc:a8:1e:13:59:
         3d:c8:83:bb:44:8f:ad:13:ba:54:f4:ee:dd:6d:8c:7f:e0:85:
         db:87:3a:1c:24:63:2d:fa:46:6e:5d:67:17:be:3c:f8:ab:41:
         c4:25:b9:26:77:f7:29:5e:2f:b3:4f:15:5f:d6:a2:56:ff:eb:
         5c:99:a5:5e:77:e3:d4:b6:4f:74:68:9c:7a:f0:2b:25:f3:8c:
         27:0d:02:04:66:26:97:a3:bf:89:94:1b:1a:cb:6a:fa:0e:cc:
         88:2f:3d:d5:6d:fc:e7:f0:6b:bd:22:18:78:f0:bb:63:13:74:
         2d:c0:f5:76:a1:c3:01:ad:e1:25:48:9e:d0:9d:78:b4:af:8f:
         08:2a:bf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 07:06:58 2024 by rpki-client on console-ams.rpki-client.org