Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e36392e302f32342d3234203d3e20323632333639.roa
File:                     3134332e3133372e36392e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          jMrtMdgAk3WO/byL/jVOfdvsiyuK7m2tuk2nyYFQ0uU=
Subject key identifier:   8C:A6:17:D3:B0:B3:63:42:78:EC:F6:89:6F:78:09:EC:9C:57:16:1F
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       234D848E16BA261540D3E6AEEB087242EA436956
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e36392e302f32342d3234203d3e20323632333639.roa
Signing time:             Wed 03 Apr 2024 18:33:00 +0000
ROA not before:           Wed 03 Apr 2024 18:28:00 +0000
ROA not after:            Wed 02 Apr 2025 18:33:00 +0000
asID:                     262369
IP address blocks:        143.137.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4d:84:8e:16:ba:26:15:40:d3:e6:ae:eb:08:72:42:ea:43:69:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Apr  3 18:28:00 2024 GMT
            Not After : Apr  2 18:33:00 2025 GMT
        Subject: CN=8CA617D3B0B3634278ECF6896F7809EC9C57161F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:60:c6:e6:42:90:57:aa:02:26:c0:66:eb:
                    23:bf:3d:f0:80:f8:e1:a2:d6:2f:74:69:4f:14:c4:
                    15:3a:c6:b4:0d:1e:3e:95:78:8f:71:c6:09:e0:f7:
                    53:40:57:da:d1:07:1e:15:68:56:e0:a8:e6:a9:fd:
                    0b:10:03:f2:4a:57:46:24:05:df:43:bb:31:3b:08:
                    0b:41:af:2f:af:d5:81:37:94:69:38:a6:e3:38:86:
                    3a:61:ee:ce:e8:3c:e1:6a:32:72:69:3c:3c:94:43:
                    2a:ac:d5:67:2f:53:c4:2a:1f:0e:b7:f1:de:13:44:
                    c8:ec:b5:bb:2a:5a:0b:ac:a3:bc:12:fe:d5:8b:dc:
                    ad:73:cd:56:b5:9e:ba:16:1f:0a:6e:af:3c:ee:4e:
                    64:48:41:e0:72:e5:e4:c2:7d:08:5c:aa:64:b6:0c:
                    3a:96:af:82:7d:85:66:ba:38:30:42:60:4f:59:60:
                    ba:e5:4c:4b:24:2c:14:56:40:70:9d:c6:3f:e6:25:
                    3b:eb:4c:b8:d1:da:50:5f:44:30:b2:db:e7:de:3a:
                    b5:b9:7c:0d:9a:3b:04:5d:8a:41:e7:82:fc:b6:2f:
                    e2:32:d4:8c:a2:ad:28:ec:ee:ae:2f:74:4f:95:ca:
                    50:1e:22:61:87:65:41:24:78:ad:2e:10:cb:6a:8f:
                    45:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A6:17:D3:B0:B3:63:42:78:EC:F6:89:6F:78:09:EC:9C:57:16:1F
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e36392e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:3f:6d:f4:44:56:f0:31:6a:9e:a9:0d:42:4b:4e:a1:6a:fa:
         d4:f6:ab:ce:56:1c:6f:3c:07:3f:11:44:17:65:5c:09:1d:08:
         7e:bf:77:66:22:51:37:10:4e:0d:d1:f1:11:ab:0c:3c:46:38:
         dc:74:c9:74:a9:c7:ce:82:c5:63:96:1f:7d:34:2a:f5:b9:be:
         3c:71:32:15:ce:d2:02:43:6b:0b:19:b5:5c:f5:c7:68:79:e4:
         c0:fe:d0:88:fd:c7:2e:b4:5a:54:34:f8:18:f1:d6:fb:93:83:
         5b:b3:20:5a:bb:ba:b6:9c:6e:d1:7c:10:11:d6:fd:50:7c:57:
         88:14:ca:36:32:e5:d1:2a:79:91:e1:b4:03:a2:26:1c:5f:7e:
         2c:8e:c5:40:4e:91:2a:fa:8d:61:39:85:99:8d:c8:1f:02:af:
         77:92:2b:ec:89:ec:b5:c2:94:ad:de:21:a9:80:f9:69:df:58:
         b0:5f:72:2a:67:c7:3d:8c:87:22:de:46:01:e4:0c:10:db:93:
         28:47:b9:be:b6:ec:56:04:54:93:21:03:12:fb:72:de:61:0e:
         a0:ee:b1:ad:84:1b:7a:81:cf:07:71:e8:8d:87:d7:37:f6:ab:
         a3:f2:25:84:f5:6d:c6:7c:bf:63:be:46:d1:2a:1b:c3:ad:2a:
         f1:27:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 19:39:13 2024 by rpki-client on console-fra.rpki-client.org