Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32322d3234203d3e20323732353438.roa
File:                     3138312e3233322e3233322e302f32322d3234203d3e20323732353438.roa (raw, json)
Hash identifier:          oMGo9Eu7celOXz0GefQkDC6X2xbc0iO+mIToSzWJWus=
Subject key identifier:   FE:75:24:01:4F:28:96:08:B0:99:ED:71:57:E2:A9:C1:25:59:CA:A9
Certificate issuer:       /CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
Certificate serial:       4C248E09431095363898DCC573494CE8143C8A8D
Authority key identifier: 34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32322d3234203d3e20323732353438.roa
Signing time:             Thu 04 Apr 2024 15:29:40 +0000
ROA not before:           Thu 04 Apr 2024 15:24:40 +0000
ROA not after:            Thu 03 Apr 2025 15:29:40 +0000
asID:                     272548
IP address blocks:        181.232.232.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 13:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:24:8e:09:43:10:95:36:38:98:dc:c5:73:49:4c:e8:14:3c:8a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
        Validity
            Not Before: Apr  4 15:24:40 2024 GMT
            Not After : Apr  3 15:29:40 2025 GMT
        Subject: CN=FE7524014F289608B099ED7157E2A9C12559CAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:28:38:a0:73:b3:45:c5:69:14:db:a7:0a:
                    28:3c:42:18:d3:48:c9:d6:f1:63:9a:38:6c:df:9d:
                    e1:b8:5e:83:f4:11:c1:89:44:28:fa:36:ec:55:6f:
                    d5:cc:f6:b5:3a:1c:86:61:5d:08:37:f1:53:48:6b:
                    80:dd:56:8b:c1:d4:91:21:f2:01:e4:08:97:32:4e:
                    81:ca:b0:43:bf:23:c0:55:01:4a:0c:02:18:27:ac:
                    34:5e:f8:32:c0:96:e0:a2:09:67:af:a2:f8:08:9a:
                    fb:d0:2c:bd:c4:b4:1d:c2:49:c9:8a:91:a1:db:71:
                    21:2d:86:48:2e:6b:a2:a6:c9:11:1b:ad:ba:67:8f:
                    9c:fa:08:e4:fa:24:02:a1:d7:02:75:1d:9b:de:d9:
                    92:14:4b:3d:5d:6d:4c:48:50:8a:6e:5e:e1:e6:4e:
                    f3:d8:a0:ff:f8:06:40:50:b1:a7:6e:0f:f1:64:13:
                    b1:75:ba:e2:bc:fb:14:c6:1f:a2:e0:5b:96:5a:67:
                    9b:e0:f6:5d:6a:5c:7e:64:92:c9:f1:6b:04:2d:25:
                    f8:7f:17:a7:c2:18:4f:2d:fc:3a:75:15:5b:f9:5f:
                    01:30:af:bb:4c:dc:18:4b:6f:c9:a1:d1:e5:3d:5c:
                    c2:07:59:05:a2:98:57:55:3b:08:b9:66:f5:45:97:
                    c9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:75:24:01:4F:28:96:08:B0:99:ED:71:57:E2:A9:C1:25:59:CA:A9
            X509v3 Authority Key Identifier:
                keyid:34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32322d3234203d3e20323732353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:26:c4:8f:4a:5e:0b:45:8c:af:0b:0b:db:92:00:9a:c5:
         4b:ac:4d:a2:26:27:88:2d:6d:5c:cf:32:7c:13:91:7b:d2:1c:
         ba:64:af:bc:c7:e0:df:49:c6:50:98:6e:40:96:10:e6:7d:59:
         48:d0:72:f5:92:a2:c1:d9:9b:8f:f4:74:90:09:30:73:11:fc:
         4a:c2:bc:f1:a5:1e:d7:c3:0e:2e:eb:1d:36:1a:45:c5:83:10:
         fc:86:1f:5d:30:8d:b7:4e:4e:f7:b1:65:96:99:28:65:6a:8f:
         fe:86:46:6a:07:b8:d5:86:6c:4d:9e:32:9e:69:34:fd:70:f3:
         2d:0f:2f:82:de:1b:e4:9a:bb:2c:7f:68:c2:90:93:df:3e:41:
         63:14:c7:e8:99:2b:b1:95:a4:75:88:3b:40:33:78:3c:a2:60:
         27:ec:7d:25:24:77:f5:70:99:a8:c4:85:41:2b:d7:c1:39:8f:
         b3:38:c5:84:b9:87:30:81:51:a8:9a:ae:47:ec:74:44:3b:e2:
         d3:62:df:27:66:d2:4b:c8:9a:0b:40:17:4b:3f:a0:e1:f2:c3:
         3b:31:86:2b:70:04:db:24:e9:79:94:20:19:02:4a:5c:1c:1d:
         9c:97:7d:45:28:87:41:a6:2d:46:f3:9f:84:67:fd:21:26:f9:
         35:27:66:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 17:04:57 2024 by rpki-client on console-ams.rpki-client.org