Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3134302e302e302f31352d3135203d3e2034323330.roa
File:                     3137392e3134302e302e302f31352d3135203d3e2034323330.roa (raw, json)
Hash identifier:          Jd7urERmm7Qx6LjsRsjKkjTCep4t3CN/4aaLWflqO1U=
Subject key identifier:   E5:EC:43:80:D5:C8:ED:F8:BD:BE:38:18:A4:18:AA:45:24:5A:8B:E3
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       53732603138BD1BC119B56DCD7E5133F60B5C2A8
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3134302e302e302f31352d3135203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     4230
IP address blocks:        179.140.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:73:26:03:13:8b:d1:bc:11:9b:56:dc:d7:e5:13:3f:60:b5:c2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:74:c2:95:81:a8:82:ca:84:56:81:87:59:
                    21:2f:53:ed:e0:db:88:97:81:7f:6b:c4:b7:65:c6:
                    b9:9e:3b:73:d1:97:ab:bf:c3:a8:12:eb:3b:00:43:
                    15:8c:15:c5:60:35:34:1c:63:cb:25:35:d3:25:d6:
                    ef:6a:1b:6a:0c:57:7b:40:e9:0c:b8:52:7b:51:ce:
                    53:c9:71:76:b9:1e:22:ab:52:08:89:4e:f3:e2:ba:
                    df:e3:2d:bf:ad:bc:ae:37:e5:52:0f:6d:b3:80:80:
                    d9:82:ed:29:19:b4:90:ef:bd:11:8f:4f:ac:c4:ed:
                    db:b2:76:c2:da:14:87:4c:4f:31:cb:b7:46:44:05:
                    2b:2e:ce:ab:83:ef:e0:d0:82:bd:bd:c5:71:38:80:
                    16:1c:33:da:b7:58:00:f9:e0:af:26:f5:99:00:1f:
                    1a:1e:61:22:34:93:68:1a:01:b2:de:9e:60:dc:a2:
                    bb:eb:11:1c:72:ec:2e:8c:8f:b8:9b:ee:84:dc:fd:
                    25:d8:0f:8f:08:bd:ce:e7:68:7a:5f:c8:5d:2a:ea:
                    61:64:da:4b:ad:b9:e7:78:86:ac:f6:0d:e9:c8:25:
                    1d:89:78:88:61:9d:96:eb:48:1c:ba:18:06:7a:5b:
                    6d:a7:9e:5d:db:da:1b:af:93:72:4f:c9:f1:d0:79:
                    3d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:43:80:D5:C8:ED:F8:BD:BE:38:18:A4:18:AA:45:24:5A:8B:E3
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3134302e302e302f31352d3135203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.140.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2c:cf:5e:a4:2d:66:9d:b6:32:10:ae:64:4e:f6:92:ea:d8:e0:
         75:94:ec:41:6f:36:be:43:48:88:e3:28:51:88:d3:a6:21:ab:
         ee:0f:60:ac:f5:99:f1:46:ff:20:f7:1e:9c:fc:33:e6:b4:a8:
         3e:03:2a:d6:ca:ad:26:31:df:01:ba:8c:06:39:b2:97:ea:76:
         ef:1e:6c:5b:09:11:59:10:77:86:35:4b:fc:e5:81:b8:88:c2:
         c0:3f:81:e3:c3:69:01:63:36:d4:65:40:31:ae:ef:4c:8e:aa:
         f0:94:99:8e:3e:c9:45:c6:c3:23:34:58:c1:ad:9b:ef:2a:48:
         95:32:d8:5f:fe:7a:a6:2b:6a:9b:77:72:64:cd:04:70:62:43:
         cc:e0:26:82:21:11:04:17:77:ed:1b:43:03:73:f7:18:46:24:
         a9:76:06:76:e8:15:66:dc:a9:1a:27:13:fc:34:ba:de:58:e3:
         12:c1:05:86:75:7a:55:1a:e6:ff:26:2a:46:9f:c4:3c:75:f5:
         03:16:b1:53:0e:c1:84:0b:9e:90:42:3f:42:1e:80:b1:f5:bd:
         fd:90:88:5a:b6:b3:b4:2f:99:76:64:c0:20:26:f0:0c:84:16:
         2c:7d:2d:dd:8d:35:da:3c:a2:07:38:05:e5:8a:2e:f9:ce:57:
         d8:93:d5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 21:17:14 2024 by rpki-client on console-ams.rpki-client.org