Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233372e302f32342d3234203d3e203533313038.roa
File:                     3138372e3130382e3233372e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          vjo9aOEtF0VwE5GYjFiBvDko9Ve1nNMqTDvUAqecoqA=
Subject key identifier:   DD:AF:F7:AA:A5:7B:F2:EF:6A:79:24:BB:27:D1:83:14:08:6A:63:B1
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       4F79EB44FCEE17A8A02502656867F508531A4434
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233372e302f32342d3234203d3e203533313038.roa
Signing time:             Thu 06 Jun 2024 19:53:01 +0000
ROA not before:           Thu 06 Jun 2024 19:48:01 +0000
ROA not after:            Thu 05 Jun 2025 19:53:01 +0000
asID:                     53108
IP address blocks:        187.108.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 05 Jun 2025 19:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:79:eb:44:fc:ee:17:a8:a0:25:02:65:68:67:f5:08:53:1a:44:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:01 2024 GMT
            Not After : Jun  5 19:53:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:51:1f:4f:69:59:ab:80:73:ec:d0:7f:f1:
                    28:a5:f7:fe:87:5a:ad:17:6b:b9:b6:40:d1:9a:aa:
                    00:51:ad:8a:0e:14:18:05:8c:6d:5c:3a:58:70:b4:
                    4e:58:b6:33:9e:1c:e1:ce:f2:41:3e:c9:cf:c0:01:
                    47:4f:80:3c:e6:6c:f6:94:f2:db:97:55:d9:bd:12:
                    90:74:69:35:85:ba:10:72:bb:e8:e0:ba:cc:04:ce:
                    78:d8:e3:f7:cf:86:62:0e:dc:70:89:a0:4a:b4:8d:
                    4e:c7:a1:7f:6a:4c:39:21:a3:b1:f6:1a:25:4a:4a:
                    d2:a1:e2:13:29:4a:b4:1f:8e:31:84:98:77:c1:93:
                    a0:8d:b0:36:90:8d:fb:24:64:b3:5e:40:30:a6:92:
                    b0:b8:2d:93:66:3c:38:cd:3b:c2:d3:de:a0:c9:20:
                    af:3d:81:79:c6:56:68:00:d9:d9:83:53:7a:9b:94:
                    9e:52:c4:da:48:ff:74:7b:22:2f:4c:b0:15:b9:03:
                    af:48:7a:a8:96:c5:e2:72:57:a0:e5:d4:9b:6b:a6:
                    9d:55:d0:32:db:38:ed:10:1e:02:58:43:56:5c:7c:
                    55:d5:57:a6:f7:b4:57:22:15:cc:9c:31:16:c8:d6:
                    8a:09:0c:d1:71:b8:20:13:7d:2f:04:da:47:35:3d:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AF:F7:AA:A5:7B:F2:EF:6A:79:24:BB:27:D1:83:14:08:6A:63:B1
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233372e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:07:1a:4b:99:28:72:a6:1d:e3:95:08:29:ab:40:4d:09:43:
         74:e9:bd:d2:d9:3e:be:67:e9:e2:99:77:0b:04:0c:89:e6:4f:
         79:ea:33:22:15:d7:8b:ee:dd:f6:c5:77:ce:6d:98:22:99:38:
         d2:03:3b:f4:2e:75:15:be:22:84:35:9c:08:48:c5:89:87:04:
         e6:6c:b8:75:bf:7c:d3:2f:35:59:71:14:d4:b6:f5:86:bd:9f:
         ba:8b:c9:63:ff:af:64:46:b1:fe:46:58:be:5b:6a:bd:35:09:
         ec:de:2e:a5:cb:a5:a2:51:40:4d:45:ed:97:c6:f5:9f:c3:29:
         90:47:f3:36:95:ad:0d:81:99:51:25:c5:ce:db:0f:74:9b:8a:
         b7:c3:81:5f:26:8e:bc:3c:0d:b7:71:b7:9b:77:b8:d7:93:5d:
         51:0f:a8:b2:d6:6e:53:fc:5c:7b:02:52:5f:bb:d9:e3:78:17:
         b3:7f:d8:31:7e:b8:5b:d2:45:e6:d5:ff:8e:79:87:50:5c:fb:
         70:0f:e7:8b:b5:f7:28:e7:cf:c1:eb:86:b7:8b:23:77:7d:58:
         8e:ac:f1:96:e9:1c:f3:ca:3b:da:a4:74:a0:87:b6:aa:c6:36:
         17:6c:98:ee:a4:82:c6:54:3f:7c:50:d7:4e:97:09:2e:f7:76:
         31:dc:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 22:44:13 2024 by rpki-client on console-fra.rpki-client.org