Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234302e302f32322d3232203d3e20323637353432.roa
File:                     3139322e3134312e3234302e302f32322d3232203d3e20323637353432.roa (raw, json)
Hash identifier:          W98zAUhBzf+uFxJi/U0SMqL6fFL0woPqMmlo/O8wAa0=
Subject key identifier:   B7:50:8A:55:9E:1F:B3:04:8B:1F:8F:02:61:32:97:03:CF:A8:83:FA
Certificate issuer:       /CN=D18394BAA91A5D89736A3DB4C144FDC15F2EB677
Certificate serial:       0248DD12D02B0DC30088CE6E0A852382010F1F71
Authority key identifier: D1:83:94:BA:A9:1A:5D:89:73:6A:3D:B4:C1:44:FD:C1:5F:2E:B6:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234302e302f32322d3232203d3e20323637353432.roa
Signing time:             Tue 21 May 2024 19:29:21 +0000
ROA not before:           Tue 21 May 2024 19:24:21 +0000
ROA not after:            Tue 20 May 2025 19:29:21 +0000
asID:                     267542
IP address blocks:        192.141.240.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 22 May 2024 11:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:48:dd:12:d0:2b:0d:c3:00:88:ce:6e:0a:85:23:82:01:0f:1f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18394BAA91A5D89736A3DB4C144FDC15F2EB677
        Validity
            Not Before: May 21 19:24:21 2024 GMT
            Not After : May 20 19:29:21 2025 GMT
        Subject: CN=B7508A559E1FB3048B1F8F0261329703CFA883FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:60:09:0f:0a:b2:ec:7c:b7:48:bf:fa:68:
                    af:39:6c:8a:a9:58:41:5d:5c:c9:5a:fb:82:36:4c:
                    99:1e:36:02:ec:d2:df:ba:23:28:d6:e5:02:75:78:
                    0d:b9:19:60:54:27:07:1b:20:60:44:b3:25:32:f4:
                    1f:7a:69:d8:6b:59:5e:de:b8:46:7b:b1:29:40:8a:
                    27:1c:5f:13:b8:56:21:1b:0b:48:00:c9:7e:c7:66:
                    f9:62:e4:36:a6:00:50:cb:e0:04:e3:b9:44:10:55:
                    b4:db:25:1c:03:62:5a:2c:ac:ca:b4:61:de:93:69:
                    a1:7e:84:48:95:d4:48:28:f6:fe:8a:9c:ec:db:18:
                    47:72:00:0d:cb:ab:68:43:cd:e8:00:f0:74:81:e4:
                    40:ce:4a:0b:80:ca:33:dc:7a:35:2b:5f:d8:fe:ee:
                    ab:86:18:d3:3d:f2:a4:69:35:98:8f:21:4c:e1:36:
                    c1:60:e4:ef:21:3f:b3:e0:45:0b:88:6b:ba:5a:a3:
                    7c:09:37:c3:e0:ff:23:a2:70:74:f9:9a:c2:e3:6c:
                    c6:07:77:6a:a7:7b:1f:a1:fa:23:72:0f:69:a1:1a:
                    68:41:db:d2:c0:9a:15:16:55:b8:59:5b:78:6f:33:
                    40:ce:4c:c4:42:4d:2d:b1:df:44:d8:f7:5c:68:3e:
                    21:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:50:8A:55:9E:1F:B3:04:8B:1F:8F:02:61:32:97:03:CF:A8:83:FA
            X509v3 Authority Key Identifier:
                keyid:D1:83:94:BA:A9:1A:5D:89:73:6A:3D:B4:C1:44:FD:C1:5F:2E:B6:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234302e302f32322d3232203d3e20323637353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:1c:ed:9e:1e:01:2d:ff:7b:c7:91:e7:35:b2:97:60:e6:70:
         48:12:46:bb:1a:96:1c:29:00:9c:f3:66:2f:9a:f8:7d:d4:e5:
         57:74:59:c7:06:90:18:61:59:7b:61:6d:a0:90:29:61:7a:02:
         b9:0c:2a:eb:ad:d6:9a:43:ba:b3:58:90:b8:fd:ad:7d:9d:75:
         e3:ca:59:03:9e:8c:6e:dd:4b:b5:e2:a3:bd:ef:da:85:05:6f:
         a6:0b:2f:11:36:92:68:1e:f6:d9:ba:2f:29:34:2e:18:0f:d3:
         76:d9:09:0c:59:da:71:5b:06:73:7c:66:95:d2:8f:89:22:02:
         e3:24:c7:46:5b:10:c4:47:20:0b:b7:62:35:7e:e1:f0:9f:00:
         53:3e:a9:46:28:61:e2:f4:15:33:45:9b:1c:66:34:80:c1:2d:
         b0:14:47:19:f8:12:57:04:1d:b6:22:33:bf:27:2d:e1:e2:32:
         5a:ce:74:d8:48:84:ab:2b:f2:0c:65:c1:d8:65:e5:e1:f1:8b:
         2a:ce:48:b6:9b:4e:c6:2a:ee:40:2d:e5:c5:2d:a6:ec:f3:51:
         08:18:0f:d9:3b:37:c9:42:52:98:e0:6d:e2:8d:ab:63:08:64:
         33:83:4c:7a:6b:87:95:c4:62:56:aa:4c:62:97:80:04:95:1f:
         cf:a6:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org