Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130342e302f32342d3234203d3e203238313234.roa
File:                     3136372e3234392e3130342e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          Ufsvawy96oPVVDD/jkfjffdqgqIp9xRI7Tpxgefr7uM=
Subject key identifier:   B8:85:29:DA:EE:A9:59:65:E9:DD:3A:A7:7B:AE:E9:9C:26:4D:B6:EB
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       510F523CD55F6202507DE74A85E03545BE6D3EFF
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130342e302f32342d3234203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:02 +0000
ROA not before:           Thu 02 Feb 2023 19:55:02 +0000
ROA not after:            Thu 01 Feb 2024 20:00:02 +0000
asID:                     28124
IP address blocks:        167.249.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0f:52:3c:d5:5f:62:02:50:7d:e7:4a:85:e0:35:45:be:6d:3e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:02 2023 GMT
            Not After : Feb  1 20:00:02 2024 GMT
        Subject: CN=3082010A0282010100CE6205FA2A0D0C945C96DBF0BA987A3787674A7507F4B84621E3E5AE08BF797B237FF81F4CFEDA4C6ABAFF04C79D1087D998FCACF2D871F0D2204221185C4B0945EC1794F9D7966DC4CFD37CF9CF9820C21103286959C37356A27C30C595C18CD90E50DDBE0F84B07E99CFB306ECD2009AE87C8110BAD254DCAC45CF71957013FBB2CCE28C4A7F9351D6BE4D5C4E78735B645177796DD95CC43269AEA342A1EE0DF73E63FB2C94C30B7A77C72C945E45F867B518776985FD74AF77FBE57566555C8F674DE536768FDAB9D9C568F29EDEB9CB18863BD9DC8A60AE7FA1F549F2DF77FF41B89C360BE92C35B245BC6A2D1A4FC4208FFD39533984E22D60069BF7230203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:05:fa:2a:0d:0c:94:5c:96:db:f0:ba:98:
                    7a:37:87:67:4a:75:07:f4:b8:46:21:e3:e5:ae:08:
                    bf:79:7b:23:7f:f8:1f:4c:fe:da:4c:6a:ba:ff:04:
                    c7:9d:10:87:d9:98:fc:ac:f2:d8:71:f0:d2:20:42:
                    21:18:5c:4b:09:45:ec:17:94:f9:d7:96:6d:c4:cf:
                    d3:7c:f9:cf:98:20:c2:11:03:28:69:59:c3:73:56:
                    a2:7c:30:c5:95:c1:8c:d9:0e:50:dd:be:0f:84:b0:
                    7e:99:cf:b3:06:ec:d2:00:9a:e8:7c:81:10:ba:d2:
                    54:dc:ac:45:cf:71:95:70:13:fb:b2:cc:e2:8c:4a:
                    7f:93:51:d6:be:4d:5c:4e:78:73:5b:64:51:77:79:
                    6d:d9:5c:c4:32:69:ae:a3:42:a1:ee:0d:f7:3e:63:
                    fb:2c:94:c3:0b:7a:77:c7:2c:94:5e:45:f8:67:b5:
                    18:77:69:85:fd:74:af:77:fb:e5:75:66:55:5c:8f:
                    67:4d:e5:36:76:8f:da:b9:d9:c5:68:f2:9e:de:b9:
                    cb:18:86:3b:d9:dc:8a:60:ae:7f:a1:f5:49:f2:df:
                    77:ff:41:b8:9c:36:0b:e9:2c:35:b2:45:bc:6a:2d:
                    1a:4f:c4:20:8f:fd:39:53:39:84:e2:2d:60:06:9b:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:85:29:DA:EE:A9:59:65:E9:DD:3A:A7:7B:AE:E9:9C:26:4D:B6:EB
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130342e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:fa:db:e0:9d:bc:20:19:7f:d0:26:b9:bc:62:e8:53:18:f6:
         f5:36:9f:2b:8e:bb:32:68:85:2b:45:42:04:a8:44:4a:e8:43:
         28:48:de:9d:01:ed:03:e8:08:8b:b2:85:04:74:80:18:31:c3:
         be:06:ab:40:a3:96:35:a8:1c:8f:f8:9e:5b:6e:e1:dd:45:57:
         d9:3e:1d:62:47:7d:41:ea:60:b8:60:7a:38:3d:5e:71:05:15:
         22:75:18:31:86:ae:90:29:ed:d2:72:f2:88:4b:99:c1:21:fd:
         b8:ad:d9:c0:03:eb:fa:62:c9:48:e8:a7:85:1a:ae:50:64:b0:
         9e:aa:1a:7f:5e:62:d3:c5:bf:48:0b:cb:e3:80:cb:f3:f3:67:
         2e:79:89:a7:d3:d6:40:86:47:8d:9f:a7:8a:4d:c2:72:3a:f3:
         15:d4:70:4e:72:2a:18:ad:f6:ed:16:1e:d0:03:57:35:aa:fc:
         e0:13:28:cd:44:c3:da:1f:95:fb:8f:d5:5e:61:66:ca:92:09:
         0e:c1:a3:70:1c:3e:61:1d:dc:00:05:24:30:97:95:86:ab:5e:
         32:21:ed:0d:ea:ac:f4:eb:94:c1:73:c3:a2:83:88:2c:fb:3b:
         f9:bd:ee:99:b5:49:e1:d8:d7:9b:25:bc:4e:e0:0f:90:9f:88:
         63:14:27:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 15:39:13 2023 by rpki-client on console-fra.rpki-client.org