Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/3230312e3133312e3137332e302f32342d3234203d3e203631383432.roa
File:                     3230312e3133312e3137332e302f32342d3234203d3e203631383432.roa (raw, json)
Hash identifier:          F1fLIZj6hu5nSsyHLGMxZhyi6PAyYnMyx6c1aok3RMA=
Subject key identifier:   1C:0A:B2:3F:FB:B4:ED:95:B6:E4:3C:04:8F:49:30:F7:1E:AF:BE:5A
Certificate issuer:       /CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
Certificate serial:       143D01C2BD9221B7B0EC36F4534D374081BD06A0
Authority key identifier: 18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/3230312e3133312e3137332e302f32342d3234203d3e203631383432.roa
Signing time:             Wed 03 Apr 2024 18:32:23 +0000
ROA not before:           Wed 03 Apr 2024 18:27:23 +0000
ROA not after:            Wed 02 Apr 2025 18:32:23 +0000
asID:                     61842
IP address blocks:        201.131.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3d:01:c2:bd:92:21:b7:b0:ec:36:f4:53:4d:37:40:81:bd:06:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
        Validity
            Not Before: Apr  3 18:27:23 2024 GMT
            Not After : Apr  2 18:32:23 2025 GMT
        Subject: CN=1C0AB23FFBB4ED95B6E43C048F4930F71EAFBE5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ea:9f:fc:5d:64:5e:15:d2:05:ed:d9:39:b8:
                    92:f8:af:cc:a7:08:df:95:cc:25:4b:8f:09:49:8a:
                    5b:d2:19:be:1a:eb:6f:dc:b2:25:f7:71:6f:1b:cd:
                    41:b7:72:5b:46:39:63:f8:13:92:ef:0f:c8:63:7e:
                    f4:3e:96:0e:77:a2:6b:a4:a1:b3:1d:b3:ed:05:ff:
                    72:5e:1a:e5:17:79:76:9a:97:57:34:4f:ae:e7:db:
                    6b:b6:fd:2b:88:4e:aa:76:a5:99:ef:ff:91:84:59:
                    7d:1b:87:50:18:03:02:67:b4:b5:05:80:51:3e:ef:
                    80:d3:48:c6:f2:67:95:2b:cf:1c:60:d7:c1:b0:19:
                    c6:c3:ed:00:37:a3:cd:d0:66:25:55:28:b5:29:fd:
                    1a:fa:0c:38:0b:be:1c:fb:bb:c7:6e:67:9a:63:24:
                    22:65:fa:24:9c:d3:ef:0a:e1:6b:ec:50:34:1b:ee:
                    79:f3:66:49:fa:37:bb:f1:72:91:8d:37:f1:da:30:
                    6e:94:61:fd:64:c3:f6:08:e1:fc:65:30:ca:80:9b:
                    91:d5:84:59:6f:71:9d:4a:0b:51:91:de:60:bb:31:
                    68:3f:cc:ea:38:40:62:aa:58:e9:57:2b:8f:d9:a3:
                    4c:44:66:17:bd:84:f9:f8:2d:a5:29:9a:3a:c7:f8:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0A:B2:3F:FB:B4:ED:95:B6:E4:3C:04:8F:49:30:F7:1E:AF:BE:5A
            X509v3 Authority Key Identifier:
                keyid:18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/3230312e3133312e3137332e302f32342d3234203d3e203631383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:fd:c0:c8:96:74:92:45:e6:06:f0:52:92:66:b5:12:72:49:
         1e:3a:81:fa:ed:7d:a0:92:4a:1c:5f:24:ff:89:84:eb:26:7a:
         30:d2:d5:b6:95:c1:36:cb:25:3d:ff:8b:18:89:5a:0f:39:43:
         0e:6e:32:06:80:52:7b:50:89:88:dd:7b:40:42:1c:a7:42:2e:
         8b:7f:b0:8e:cd:38:ed:2f:c6:8c:15:2f:42:92:30:da:be:ac:
         0f:66:55:ac:30:a6:59:1b:ff:68:3b:1c:bf:ee:84:24:95:35:
         8f:b5:3a:5e:4e:bc:ee:a6:71:bd:9e:2b:80:0e:c4:2c:b8:69:
         d5:b8:1b:54:50:43:6c:fe:59:3e:64:fa:a1:c8:1e:2a:49:12:
         16:1e:67:6a:67:a6:34:3b:70:1b:0d:25:cf:45:79:06:70:c4:
         50:12:af:8e:32:51:24:d4:77:e2:5f:af:48:08:33:10:00:d6:
         72:6e:0a:a6:9b:23:e8:79:28:21:c5:fc:b4:6e:1f:9a:63:4d:
         65:2d:dc:63:f6:6c:ed:38:9e:41:fe:b1:63:54:82:9a:a0:07:
         3a:72:2e:89:52:c6:7f:db:3a:89:ca:bc:a2:14:aa:c4:26:9d:
         0d:b2:c4:e8:50:b5:54:7f:ff:66:15:7a:e1:52:c4:7f:25:09:
         ca:10:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 15:05:26 2024 by rpki-client on console-ams.rpki-client.org