Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234332e302f32342d3234203d3e20323637353432.roa
File:                     3139322e3134312e3234332e302f32342d3234203d3e20323637353432.roa (raw, json)
Hash identifier:          0OI8sFlAnRSdRAHhvTuhPYYZsbPBeOy2Wi5ZUVU9ETQ=
Subject key identifier:   5E:02:03:D7:53:7F:20:C3:3D:EE:B5:1E:19:4B:83:29:49:F5:1A:E9
Certificate issuer:       /CN=D18394BAA91A5D89736A3DB4C144FDC15F2EB677
Certificate serial:       547D97FB3A3E98D2BE673BC5E54DAACA81FE8B97
Authority key identifier: D1:83:94:BA:A9:1A:5D:89:73:6A:3D:B4:C1:44:FD:C1:5F:2E:B6:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234332e302f32342d3234203d3e20323637353432.roa
Signing time:             Tue 21 May 2024 19:29:21 +0000
ROA not before:           Tue 21 May 2024 19:24:21 +0000
ROA not after:            Tue 20 May 2025 19:29:21 +0000
asID:                     267542
IP address blocks:        192.141.243.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 May 2024 11:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7d:97:fb:3a:3e:98:d2:be:67:3b:c5:e5:4d:aa:ca:81:fe:8b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18394BAA91A5D89736A3DB4C144FDC15F2EB677
        Validity
            Not Before: May 21 19:24:21 2024 GMT
            Not After : May 20 19:29:21 2025 GMT
        Subject: CN=5E0203D7537F20C33DEEB51E194B832949F51AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:b1:30:ef:fb:97:0b:39:43:74:9d:2a:fa:
                    a4:ba:ea:d6:63:bf:0b:64:2f:2d:31:e6:78:9c:bf:
                    4d:1d:50:8e:77:d3:f4:27:5f:a1:4e:12:ef:88:fe:
                    44:31:0e:38:da:1e:e2:79:ae:3b:56:ff:38:f7:4c:
                    35:45:14:1a:bc:d0:c7:30:e5:82:74:52:61:fa:a4:
                    6d:81:ef:33:1d:c3:f7:98:e7:4a:8e:81:f6:f7:f1:
                    d5:92:aa:e5:23:65:82:ea:85:72:3a:12:00:69:4b:
                    16:5c:83:01:88:79:f8:49:6a:0d:4e:56:2c:9e:fe:
                    10:21:dc:b4:22:95:92:aa:9b:81:c9:6a:5a:af:78:
                    08:31:bb:13:cb:b6:71:8c:af:8f:eb:b9:a3:e6:96:
                    62:16:18:63:b2:7e:8e:2b:e4:85:58:46:66:23:38:
                    05:74:c0:ef:4d:07:0b:01:e5:64:e1:d2:e7:c5:2e:
                    88:4a:cd:bd:ca:48:a1:31:58:0b:22:9d:a2:84:54:
                    b6:13:49:78:60:dd:06:1b:8f:53:19:a7:5a:4c:92:
                    03:f5:c9:86:f4:6e:94:36:a5:9a:be:eb:67:38:af:
                    f6:f0:b9:21:aa:87:58:cc:71:5b:3d:39:20:59:74:
                    e3:69:16:d3:da:93:b6:50:da:6b:37:15:ef:8d:33:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:02:03:D7:53:7F:20:C3:3D:EE:B5:1E:19:4B:83:29:49:F5:1A:E9
            X509v3 Authority Key Identifier:
                keyid:D1:83:94:BA:A9:1A:5D:89:73:6A:3D:B4:C1:44:FD:C1:5F:2E:B6:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234332e302f32342d3234203d3e20323637353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:30:f4:03:99:ed:19:fc:6c:f4:2c:a1:00:e0:79:ca:3e:83:
         45:fd:c3:12:75:ac:d6:53:0c:7e:06:3a:6d:a0:76:00:63:a9:
         fb:41:03:c2:99:04:4c:a5:a3:78:00:f5:83:2e:d2:21:20:67:
         a7:90:95:b7:99:93:6e:df:65:d7:fb:25:2e:aa:be:5c:77:d9:
         aa:5c:cd:9b:1d:3f:8e:c2:8f:23:5b:b4:a0:9e:b8:33:13:76:
         60:3b:61:b8:55:07:ba:cc:4c:b5:7a:80:e3:b7:a2:9c:e2:36:
         72:10:1b:c8:f3:ab:41:c4:01:70:36:b9:e6:d9:0d:53:5a:38:
         ee:78:23:dc:1a:34:f5:e3:39:32:fe:2c:25:6f:ba:a3:45:55:
         fa:3d:fe:d8:a3:f5:22:91:27:53:0b:df:54:bf:43:da:6c:4c:
         a7:bd:1f:ac:eb:46:f1:35:b4:2a:94:5a:da:fc:a1:e6:60:79:
         4c:07:8b:a3:51:0e:fa:f2:61:8a:0f:85:bb:48:b5:27:00:ad:
         16:10:1b:eb:a1:bf:6b:c8:16:05:01:58:f0:38:e4:91:a6:0a:
         69:b0:4e:49:a6:eb:9d:2e:d8:dd:16:74:51:ed:b4:c1:d9:05:
         5b:7f:bf:3d:9d:1e:fd:46:66:df:a8:3b:f8:59:55:df:eb:dc:
         cb:26:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org