Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e37302e302f32332d3233203d3e20323632333639.roa
File:                     3134332e3133372e37302e302f32332d3233203d3e20323632333639.roa (raw, json)
Hash identifier:          Gz0JQm+UAk8q4WmCztSRRMfGhVevGg6Lm3hNJlG8lsI=
Subject key identifier:   B8:DD:75:56:17:5D:DB:E7:B3:A5:C3:AA:C9:00:51:0D:F9:44:D3:A9
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       4B4B5860EFBD82C72393A219595C756E22E3CEEF
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e37302e302f32332d3233203d3e20323632333639.roa
Signing time:             Wed 03 Apr 2024 18:33:00 +0000
ROA not before:           Wed 03 Apr 2024 18:28:00 +0000
ROA not after:            Wed 02 Apr 2025 18:33:00 +0000
asID:                     262369
IP address blocks:        143.137.70.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4b:58:60:ef:bd:82:c7:23:93:a2:19:59:5c:75:6e:22:e3:ce:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Apr  3 18:28:00 2024 GMT
            Not After : Apr  2 18:33:00 2025 GMT
        Subject: CN=B8DD7556175DDBE7B3A5C3AAC900510DF944D3A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:3d:f1:24:02:4d:ad:a4:3a:f8:8f:f8:35:
                    a7:f0:1c:b9:87:ea:c8:e3:19:c8:20:73:ca:21:15:
                    ab:1e:a4:86:8e:79:73:ed:74:80:49:09:53:dd:83:
                    33:13:2a:ec:9c:aa:be:9c:72:f6:b6:35:32:31:23:
                    8c:38:63:6d:57:e4:34:cb:d8:45:59:09:65:dd:5b:
                    2e:94:bf:69:f2:b5:90:26:f5:1f:73:3c:f2:fd:a1:
                    b7:79:0a:cc:7e:42:ba:cb:95:3e:ee:38:44:46:17:
                    82:2c:af:bd:d5:7b:63:cc:de:f9:9f:0f:2c:c4:62:
                    f8:c5:90:32:25:a1:29:13:aa:0f:f4:c8:c3:08:a6:
                    7e:85:94:2d:43:fd:ae:5c:44:0e:90:2b:73:6c:89:
                    b5:ac:45:79:db:ec:e3:69:bc:2e:fc:3b:de:0d:b0:
                    88:6a:61:12:f8:44:b7:b3:50:8d:25:1f:c0:9d:13:
                    43:e6:32:e6:c5:40:fa:0f:1d:bb:b1:ed:66:70:c6:
                    84:17:c6:bc:de:95:8c:50:ea:09:bc:29:95:44:96:
                    5b:0b:6b:fa:b8:72:a4:fe:29:e2:43:23:37:c4:95:
                    50:c7:91:4b:18:46:54:56:3f:5c:c4:7a:72:64:65:
                    d6:6e:56:85:55:05:67:6a:40:ab:e6:39:5b:73:41:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DD:75:56:17:5D:DB:E7:B3:A5:C3:AA:C9:00:51:0D:F9:44:D3:A9
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e37302e302f32332d3233203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:a9:52:89:3d:63:41:90:e4:b4:96:84:0b:be:76:0e:5b:18:
         dc:97:e6:20:f9:0b:2f:b6:cf:8e:80:f5:8e:fb:41:1e:cc:d0:
         5c:9c:7c:b5:07:8c:25:e1:e4:2a:70:db:4a:be:38:17:85:2d:
         69:23:7a:98:7e:03:fb:a0:d2:a8:e6:4b:09:36:80:90:88:21:
         bc:2b:45:34:f5:03:28:34:79:84:5e:a1:ac:33:bb:88:70:c5:
         77:d8:05:77:48:da:63:bf:d7:b8:d5:e4:8d:58:40:38:dc:e0:
         bc:04:be:77:ed:f1:6f:cd:a1:e4:b9:47:0d:99:66:13:27:36:
         75:03:e9:c8:4e:25:04:66:e0:fd:6c:f5:fc:97:e7:07:78:f3:
         7a:d9:eb:dc:56:94:61:08:a6:0a:9b:24:d9:80:48:4e:a1:2b:
         c8:f9:31:63:d6:ac:0e:e8:84:ba:d3:e7:42:a6:44:bd:18:6c:
         0f:23:db:4e:48:a3:c0:88:29:8d:81:42:52:5b:1b:22:ed:4b:
         51:a5:ec:ff:ae:67:97:88:48:b7:6e:4f:68:20:6c:13:97:df:
         20:65:d2:f9:2e:f8:d3:d4:be:83:95:b8:53:32:d5:db:25:98:
         5e:61:01:d9:ba:d3:13:6f:3b:c4:d8:fe:5c:bd:91:db:4b:cf:
         8e:ff:68:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 19:39:13 2024 by rpki-client on console-fra.rpki-client.org