Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232362e302f32342d3234203d3e203533313038.roa
File:                     3138372e3130382e3232362e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          oPgpniOrPC7eB1sYU3oxYjAmauFh8j+ZqYc3RMctBG4=
Subject key identifier:   B3:25:3A:88:92:B1:27:03:D9:10:DF:43:7A:D4:5F:77:8C:15:87:98
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       5AAF317086314F615E249877836B7910DCAF5053
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232362e302f32342d3234203d3e203533313038.roa
Signing time:             Thu 06 Jun 2024 19:55:42 +0000
ROA not before:           Thu 06 Jun 2024 19:50:42 +0000
ROA not after:            Thu 05 Jun 2025 19:55:42 +0000
asID:                     53108
IP address blocks:        187.108.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 05 Jun 2025 19:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:af:31:70:86:31:4f:61:5e:24:98:77:83:6b:79:10:dc:af:50:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:50:42 2024 GMT
            Not After : Jun  5 19:55:42 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:67:1d:0e:5c:ee:71:8d:d4:53:b4:c2:19:
                    43:a6:04:97:c6:11:b1:57:63:e3:e3:b1:a1:cc:85:
                    e6:ca:c5:ee:7a:a8:7d:a5:31:72:9c:8a:36:2c:1d:
                    de:88:36:ba:5e:7b:84:9f:ca:a0:96:61:bd:0f:e9:
                    7a:84:02:ab:ba:32:9b:0c:5d:27:cf:e4:e7:ba:1f:
                    c1:cb:2b:fb:9c:b1:f5:a9:a6:a7:cb:03:b2:68:51:
                    1a:67:a7:4c:86:20:97:72:77:ef:9c:f8:09:50:ec:
                    fa:34:77:89:75:3d:49:20:d6:47:e3:8d:61:4a:8a:
                    45:9b:0b:97:7a:c5:6b:eb:5c:95:55:16:a4:b0:41:
                    6f:7d:16:87:06:63:0d:c1:9a:9d:37:7d:d1:39:04:
                    ff:60:c0:1b:19:85:b3:f5:35:ba:59:ae:45:d2:ad:
                    0f:5d:f3:45:54:63:39:f5:1a:b7:27:60:24:41:6f:
                    20:c1:68:a5:22:48:87:65:55:fa:25:1a:97:41:e7:
                    32:cd:04:22:2f:fc:fa:12:48:4d:83:21:23:57:93:
                    34:23:75:ab:d5:7f:d8:16:af:b5:7d:c6:c3:aa:2d:
                    2e:9a:c6:09:3a:b0:a0:9c:21:cb:17:09:76:a2:20:
                    5c:2b:84:66:ad:2a:59:39:6a:4e:1b:a6:27:b5:ae:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:25:3A:88:92:B1:27:03:D9:10:DF:43:7A:D4:5F:77:8C:15:87:98
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232362e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:54:4b:32:4a:95:a8:92:56:2a:0d:35:87:43:f5:e6:c7:d2:
         cd:45:16:64:59:ad:6e:06:7c:24:87:f5:3a:e0:91:18:91:c2:
         1f:1f:7e:34:99:6c:3f:c1:b2:fb:17:26:d2:3c:d0:be:5a:2a:
         13:df:d7:6e:90:1e:76:87:f8:cf:68:f8:00:bf:e8:70:84:c4:
         aa:a5:8d:07:01:73:0f:f8:01:c5:bc:df:d8:3b:d2:f5:99:10:
         76:76:9b:82:11:77:83:fa:ca:3e:49:cb:7b:92:d9:64:39:bc:
         2e:1e:26:ef:83:78:05:75:e4:35:0c:ed:15:a8:46:b6:65:71:
         37:2b:68:16:ad:88:39:72:55:2f:58:76:8f:45:7b:88:85:1d:
         00:95:b3:e2:28:0e:8e:2e:f1:79:c0:b2:21:ea:e3:43:e6:df:
         9c:3d:65:d3:1c:07:a7:c3:2e:30:da:d2:8f:c2:0a:a9:2e:1f:
         36:98:47:e7:6d:ee:32:b0:50:26:f4:7d:7e:2f:c3:c5:71:87:
         48:8e:ec:05:34:86:44:37:dd:54:bb:44:bb:8e:9f:72:4f:3c:
         0e:d0:2c:03:3f:cf:2e:62:be:3a:02:5c:01:49:8c:19:aa:23:
         af:f5:16:2b:31:c8:80:10:57:9c:88:78:c6:98:03:40:43:49:
         1b:07:dc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 22:44:13 2024 by rpki-client on console-fra.rpki-client.org