Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e36382e302f32322d3232203d3e20323632333639.roa
File:                     3134332e3133372e36382e302f32322d3232203d3e20323632333639.roa (raw, json)
Hash identifier:          9SWOSZ1lygM1pE5mjmX2CZdAByBoeBcdDblm7g/tcbQ=
Subject key identifier:   5F:A0:47:5E:2E:FF:8E:BE:74:2F:C3:D6:5F:AA:19:E1:BB:4F:C9:E1
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       0C31CAB95030E3632652D0BEB2614C37AD20E143
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e36382e302f32322d3232203d3e20323632333639.roa
Signing time:             Wed 03 Apr 2024 18:33:01 +0000
ROA not before:           Wed 03 Apr 2024 18:28:01 +0000
ROA not after:            Wed 02 Apr 2025 18:33:01 +0000
asID:                     262369
IP address blocks:        143.137.68.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:31:ca:b9:50:30:e3:63:26:52:d0:be:b2:61:4c:37:ad:20:e1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Apr  3 18:28:01 2024 GMT
            Not After : Apr  2 18:33:01 2025 GMT
        Subject: CN=5FA0475E2EFF8EBE742FC3D65FAA19E1BB4FC9E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:42:8f:83:45:06:a1:53:56:0c:72:17:a6:85:
                    b5:c3:cd:88:96:86:c8:cf:ce:ea:d1:b3:14:a1:41:
                    c1:04:5e:f1:e1:5e:fb:9e:8a:16:a7:5e:b7:e2:88:
                    fe:db:5e:50:27:42:00:7e:4b:b3:b2:d7:1c:13:c8:
                    98:cb:dd:78:2e:31:e3:cf:b3:0c:b0:9d:f2:e2:62:
                    a4:d3:3b:be:d7:b5:67:dd:ed:79:e0:17:41:6b:2e:
                    5e:e6:04:ea:3a:24:4c:1a:06:c5:22:8d:2b:60:2c:
                    b6:ba:12:5f:2e:bd:8f:d9:43:ab:a6:5f:5b:44:d7:
                    01:ed:0b:63:b4:86:71:9c:17:ee:5d:e8:bc:c7:d6:
                    78:64:54:02:3a:ea:52:ac:9e:2a:79:e5:94:64:cd:
                    c6:57:e6:80:ac:f0:8e:cb:00:38:16:75:2f:01:9e:
                    cf:4d:c5:a3:94:21:c0:f2:b3:86:de:0b:2a:ff:8a:
                    09:33:9a:d8:eb:3d:49:de:2e:d2:8e:eb:9f:7e:72:
                    6f:9f:f8:29:40:94:7f:09:03:d4:de:02:c2:6a:53:
                    e7:a1:60:fd:31:50:07:34:5c:da:44:58:a0:b5:69:
                    10:fd:c8:0c:71:49:84:2b:2f:fd:7b:bb:ff:36:a2:
                    fc:d2:83:39:33:3e:9d:4d:15:26:87:03:9f:21:11:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A0:47:5E:2E:FF:8E:BE:74:2F:C3:D6:5F:AA:19:E1:BB:4F:C9:E1
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e36382e302f32322d3232203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:f3:c7:4c:b9:fd:2c:f9:99:52:01:f8:6b:eb:5c:da:b0:d4:
         d4:89:50:8f:d8:e3:7b:be:d2:6e:93:fe:6d:86:80:5f:75:5a:
         8f:13:6d:df:2e:fc:ef:e7:49:02:ce:a9:49:76:20:06:87:83:
         72:f3:51:64:8e:10:7e:01:d7:63:f2:0c:55:66:70:6a:67:dc:
         57:47:96:78:c0:34:77:48:92:a7:df:6d:aa:0b:44:73:b4:59:
         c7:04:c4:09:6a:15:b7:e7:19:41:8d:0b:e2:ac:56:9f:54:c8:
         cc:c4:86:d3:ae:89:b5:a4:e1:29:46:76:70:eb:09:d3:45:be:
         93:ab:25:4d:2c:7e:c6:f4:ec:25:9d:9e:4f:f1:15:89:8c:99:
         f6:90:f3:6e:45:a6:98:97:35:ca:d4:2b:82:60:64:2b:69:9f:
         1e:9a:bb:ef:cf:75:1b:93:37:d7:77:a4:60:e8:16:f4:fe:20:
         b1:92:91:17:96:ce:cf:2c:4e:5f:28:a9:79:8d:4a:c1:d5:be:
         64:b5:3d:94:4b:19:71:ac:c5:78:ea:c8:70:bb:e7:c2:63:66:
         35:fc:3d:e3:b4:26:e3:11:a1:9e:8e:27:f5:d6:90:ed:53:5e:
         24:12:b8:5e:d6:72:a5:52:4a:87:e5:ce:13:ff:b2:93:b5:db:
         f4:10:94:c0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDDHKuVAw42MmUtC+smFMN60g4UMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y0NkExMzIzNDgxNDNFN0I2MEQ1NEFDNTk5QkU3NDg2
OEIwMDgyOTAeFw0yNDA0MDMxODI4MDFaFw0yNTA0MDIxODMzMDFaMDMxMTAvBgNV
BAMTKDVGQTA0NzVFMkVGRjhFQkU3NDJGQzNENjVGQUExOUUxQkI0RkM5RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzQo+DRQahU1YMchemhbXDzYiW
hsjPzurRsxShQcEEXvHhXvueihanXrfiiP7bXlAnQgB+S7Oy1xwTyJjL3XguMePP
swywnfLiYqTTO77XtWfd7XngF0FrLl7mBOo6JEwaBsUijStgLLa6El8uvY/ZQ6um
X1tE1wHtC2O0hnGcF+5d6LzH1nhkVAI66lKsnip55ZRkzcZX5oCs8I7LADgWdS8B
ns9NxaOUIcDys4beCyr/igkzmtjrPUneLtKO659+cm+f+ClAlH8JA9TeAsJqU+eh
YP0xUAc0XNpEWKC1aRD9yAxxSYQrL/17u/82ovzSgzkzPp1NFSaHA58hEXuBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUX6BHXi7/jr50L8PWX6oZ4btPyeEwHwYDVR0j
BBgwFoAUz0ahMjSBQ+e2DVSsWZvnSGiwCCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWFyYWZGZ25SYVk1TGlhWE5HYVZpdWlGU3RWd0dvS1dqMUs1N3I1dzJ3
dXIvMS9DRjQ2QTEzMjM0ODE0M0U3QjYwRDU0QUM1OTlCRTc0ODY4QjAwODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGNDZBMTMyMzQ4MTQzRTdC
NjBENTRBQzU5OUJFNzQ4NjhCMDA4MjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhcmFmRmduUmFZNUxpYVhOR2FWaXVpRlN0VndHb0tXajFLNTdyNXcyd3VyLzEv
MzEzNDMzMmUzMTMzMzcyZTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKPiUQwDQYJKoZIhvcNAQELBQADggEBAIHzx0y5
/Sz5mVIB+GvrXNqw1NSJUI/Y43u+0m6T/m2GgF91Wo8Tbd8u/O/nSQLOqUl2IAaH
g3LzUWSOEH4B12PyDFVmcGpn3FdHlnjANHdIkqffbaoLRHO0WccExAlqFbfnGUGN
C+KsVp9UyMzEhtOuibWk4SlGdnDrCdNFvpOrJU0sfsb07CWdnk/xFYmMmfaQ825F
ppiXNcrUK4JgZCtpnx6au+/PdRuTN9d3pGDoFvT+ILGSkReWzs8sTl8oqXmNSsHV
vmS1PZRLGXGsxXjqyHC758JjZjX8PeO0JuMRoZ6OJ/XWkO1TXiQSuF7WcqVSSofl
zhP/spO12/QQlMA=
-----END CERTIFICATE-----
Generated at Mon Jun 10 18:28:27 2024 by rpki-client on console-ams.rpki-client.org