Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e37312e302f32342d3234203d3e20323632333639.roa
File:                     3134332e3133372e37312e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          EVInzevnJ2uFS3LweCG/PqxmeSnymgYjH9ButafeIs4=
Subject key identifier:   C8:36:5E:FD:E7:F6:AC:CF:66:40:1E:B4:FA:A8:67:68:0E:FE:DE:1A
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       1A35B88831B9C26B8138A9105F880D8656FF6E0F
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e37312e302f32342d3234203d3e20323632333639.roa
Signing time:             Mon 10 Jun 2024 14:04:30 +0000
ROA not before:           Mon 10 Jun 2024 13:59:30 +0000
ROA not after:            Mon 09 Jun 2025 14:04:30 +0000
asID:                     262369
IP address blocks:        143.137.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Jun 2025 14:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:35:b8:88:31:b9:c2:6b:81:38:a9:10:5f:88:0d:86:56:ff:6e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Jun 10 13:59:30 2024 GMT
            Not After : Jun  9 14:04:30 2025 GMT
        Subject: CN=C8365EFDE7F6ACCF66401EB4FAA867680EFEDE1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b4:ec:df:85:9c:35:f7:9f:f1:8c:83:33:61:
                    e4:65:76:26:6d:bb:ba:2a:54:06:e4:c5:cd:11:60:
                    b8:23:17:8a:be:1e:1a:ba:cb:94:42:2d:13:81:42:
                    f8:a3:0f:ad:9c:70:97:4d:d0:e9:68:86:88:ab:09:
                    81:c3:4c:8c:41:fe:bb:f2:fd:cd:b9:0e:c9:4f:26:
                    fb:4e:63:fd:72:45:c9:f1:96:17:e1:fe:ea:31:1c:
                    58:b6:67:fd:10:cd:dc:3c:cb:fb:2b:9a:22:fe:29:
                    2d:f1:6e:d3:21:da:51:eb:82:1d:f6:88:7c:0b:3d:
                    15:89:e7:6e:b4:e8:ab:df:43:2d:2b:0f:67:66:1a:
                    b2:d9:49:52:31:63:fb:bb:05:6d:08:7c:92:7a:bc:
                    71:b7:51:a2:ea:3d:67:e8:30:7f:9c:95:41:3c:0f:
                    34:a5:a2:7f:f1:e5:d7:29:58:00:40:5d:3f:aa:1a:
                    89:e5:13:30:67:59:64:59:12:4b:50:cd:d0:50:ef:
                    f2:24:04:ea:a5:3e:a4:80:49:87:55:81:c3:a1:9b:
                    32:f2:c9:49:4e:53:f6:2e:1b:75:20:2c:27:84:95:
                    d0:b5:2c:50:2a:b2:30:3e:da:1a:10:ae:e7:e6:78:
                    dc:1a:ec:52:72:50:c9:e3:82:73:78:a2:00:b7:48:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:36:5E:FD:E7:F6:AC:CF:66:40:1E:B4:FA:A8:67:68:0E:FE:DE:1A
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3134332e3133372e37312e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:6f:5a:12:80:d7:3b:7f:79:b9:59:44:82:de:a0:ff:86:7c:
         ae:77:fd:81:d2:58:8f:52:bc:ec:aa:e7:fb:23:36:71:0a:b8:
         81:3c:92:b2:16:49:2f:a8:e8:66:a7:c7:b3:8d:3e:94:01:e4:
         17:e8:d1:df:b3:14:25:7e:f1:6a:a3:6f:a9:ed:74:2d:62:21:
         1f:86:93:e4:b7:61:70:2a:6d:ef:ca:5f:d3:49:c2:47:b0:df:
         7c:9a:5e:5f:66:be:11:67:85:58:90:ba:38:08:1c:f8:73:57:
         97:82:ac:22:7d:20:52:73:b6:29:59:42:bb:32:c2:3a:8a:fb:
         e0:81:84:5d:9c:67:5d:47:ea:26:ce:54:ac:b3:38:4e:50:20:
         cd:36:fe:73:60:5c:01:cd:38:5a:d6:58:b5:a7:11:28:3e:d4:
         84:be:a6:09:da:8a:f7:45:8a:10:1c:21:72:61:88:c4:a5:64:
         e9:61:4a:18:23:45:de:db:77:ed:25:20:70:61:c6:c1:68:be:
         1e:58:ba:6e:12:0d:16:9e:77:a9:c7:36:e3:c7:19:b2:66:86:
         0b:3a:0e:ab:42:31:ee:b8:5e:1c:86:a8:31:0d:ff:44:fd:66:
         e5:82:cf:1a:a8:17:a7:18:ce:38:9f:5d:b7:11:2a:7b:43:53:
         90:05:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 21:17:14 2024 by rpki-client on console-ams.rpki-client.org