Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134322e302f32342d3234203d3e20323635343832.roa
File:                     3136382e3139372e3134322e302f32342d3234203d3e20323635343832.roa (raw, json)
Hash identifier:          IuhrwuM9IQxYqYKRcezJXNt+iaB/dAhAz8sUEWAe7CY=
Subject key identifier:   A1:EB:BB:4D:CF:37:54:A2:64:3E:9E:6C:48:FA:8D:CE:A5:49:A6:2D
Certificate issuer:       /CN=AB0A9EADB83F739FC241A002FB1C2A394EECBF50
Certificate serial:       67C22AD482B534E95FDA3E7928A1671C6108AEE2
Authority key identifier: AB:0A:9E:AD:B8:3F:73:9F:C2:41:A0:02:FB:1C:2A:39:4E:EC:BF:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134322e302f32342d3234203d3e20323635343832.roa
Signing time:             Tue 14 May 2024 18:49:59 +0000
ROA not before:           Tue 14 May 2024 18:44:59 +0000
ROA not after:            Tue 13 May 2025 18:49:59 +0000
asID:                     265482
IP address blocks:        168.197.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c2:2a:d4:82:b5:34:e9:5f:da:3e:79:28:a1:67:1c:61:08:ae:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB0A9EADB83F739FC241A002FB1C2A394EECBF50
        Validity
            Not Before: May 14 18:44:59 2024 GMT
            Not After : May 13 18:49:59 2025 GMT
        Subject: CN=A1EBBB4DCF3754A2643E9E6C48FA8DCEA549A62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:63:9e:b7:26:1c:70:48:74:04:fe:4c:fb:
                    da:07:ae:f7:59:79:10:90:10:a9:28:14:9e:76:6b:
                    05:2b:05:e5:45:65:cc:c6:60:42:ad:48:2d:1f:9b:
                    c0:8e:cc:10:c6:f2:07:9e:46:fb:1c:21:e9:c1:06:
                    87:8e:19:a7:b3:1f:09:c7:3e:8a:e5:39:74:0c:5e:
                    ea:b6:06:40:d1:97:e2:c7:69:1e:c9:b0:30:a1:e4:
                    49:16:f0:26:d2:e1:70:16:a9:e0:f2:c6:b0:67:e0:
                    1c:c3:b7:69:2e:ec:a2:4b:2c:d3:ec:5b:ef:e0:88:
                    dd:1d:13:12:59:5e:59:cc:e3:7e:c7:c2:4a:6e:1c:
                    0e:c2:c0:03:2e:57:62:7f:51:dc:74:3b:73:af:7f:
                    a6:08:b8:e5:97:a2:37:ae:75:8a:c1:bb:7d:12:7f:
                    8a:9f:08:1d:dc:94:1f:ae:b1:5e:0c:d1:8a:d0:f7:
                    63:ca:31:3e:d1:21:58:4e:f2:19:a8:09:54:e4:89:
                    cd:e9:4c:00:0d:42:05:08:be:53:48:d2:ba:62:2c:
                    26:64:df:f7:c2:7d:a7:09:cd:de:0b:c8:a4:98:e2:
                    d8:03:fc:7d:26:7f:8f:69:1c:49:7e:58:83:23:79:
                    5d:57:13:74:5d:73:13:92:b4:fa:e7:ea:ac:a1:58:
                    cb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EB:BB:4D:CF:37:54:A2:64:3E:9E:6C:48:FA:8D:CE:A5:49:A6:2D
            X509v3 Authority Key Identifier:
                keyid:AB:0A:9E:AD:B8:3F:73:9F:C2:41:A0:02:FB:1C:2A:39:4E:EC:BF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134322e302f32342d3234203d3e20323635343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:f2:47:d3:f2:38:52:ba:7b:8a:a9:31:03:43:c5:3f:66:d9:
         90:a4:06:5f:50:81:ff:ee:7b:48:03:5f:6b:0c:13:af:16:37:
         c3:02:86:85:24:80:54:f1:f3:23:2e:fb:c5:a0:00:d8:0d:69:
         d4:7b:37:83:84:27:d1:59:6e:9c:cb:00:25:91:03:7d:9f:7a:
         5c:b8:a7:31:0a:af:90:b5:6d:9f:db:6c:08:b6:0f:75:00:cd:
         8a:75:93:dc:48:6d:c2:fe:13:bf:6b:7f:08:4a:21:aa:dd:c1:
         82:a7:92:9e:77:1f:c6:69:f2:7c:64:f7:25:f8:51:83:17:d4:
         68:28:ff:2e:ab:20:08:6f:0f:9a:7c:64:90:3a:c5:fe:f0:85:
         fa:ee:0a:84:6a:64:49:f7:51:4c:ef:80:92:bb:61:74:cb:f1:
         73:bc:de:b9:d0:fa:39:ba:b7:c9:d8:94:45:84:90:56:bd:e2:
         51:cd:2c:a1:e5:d9:31:cf:33:14:8d:12:af:8e:d0:41:73:83:
         43:35:0a:74:32:86:69:58:93:11:7a:5d:a0:bb:e4:62:85:48:
         71:5d:61:59:35:9a:77:35:bb:9b:77:fb:27:45:9a:c1:38:1b:
         86:fc:eb:ae:09:dc:a1:d5:2e:d5:5a:1a:9a:bc:c3:38:b7:ef:
         57:4e:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org