Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3134322e302e302f31352d3135203d3e2034323330.roa
File:                     3137392e3134322e302e302f31352d3135203d3e2034323330.roa (raw, json)
Hash identifier:          0v23kZdwLYIFDBrSCjZZ/fR0ImMkIzEcmf9yZuusXm8=
Subject key identifier:   3A:FD:AE:4E:6A:99:5F:1B:B8:F6:70:85:52:8F:05:57:7A:2E:A0:AE
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1F44B0804CCAB5DF046B15CDBE5CEC477ECD03A5
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3134322e302e302f31352d3135203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     4230
IP address blocks:        179.142.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:44:b0:80:4c:ca:b5:df:04:6b:15:cd:be:5c:ec:47:7e:cd:03:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:d8:38:ed:8e:e0:55:1d:5f:a3:b9:70:cf:
                    ff:cb:c2:a7:2e:1b:7b:83:53:71:d0:3a:2d:d8:9c:
                    92:7c:8c:50:29:72:f7:68:83:c3:ad:ac:96:40:fc:
                    de:5f:e4:eb:39:ca:b9:db:b8:62:b6:2c:05:50:a8:
                    c7:c5:9c:21:03:73:a2:31:c3:c4:8c:5a:5f:32:d0:
                    be:48:58:2f:fe:4d:02:a9:ba:5f:5c:f1:8d:b1:89:
                    1d:8a:f1:eb:b6:da:24:72:1f:83:ec:8d:63:81:6b:
                    55:b4:b4:2e:62:43:52:48:68:32:e3:0d:4b:e7:d9:
                    fe:99:35:04:36:45:c0:c9:1b:76:6a:54:d2:1f:f1:
                    78:23:f1:d6:f1:ec:f7:2d:e5:1a:65:19:0d:ec:27:
                    b8:f3:7e:73:9a:18:ea:1e:28:13:f7:ee:2d:00:1c:
                    90:ed:bc:25:ed:6b:b7:15:e4:ec:25:ad:8a:83:09:
                    7b:cb:d6:68:93:36:38:c8:86:f6:be:3f:fc:5b:a0:
                    b2:3f:46:ff:57:36:5a:82:6a:bd:c8:9c:58:a9:c0:
                    d7:a8:ae:4b:7c:ad:11:31:cc:f0:6a:e5:ff:bf:56:
                    ac:57:c4:9d:db:f6:79:f8:5e:8d:24:d3:8a:dc:26:
                    46:27:15:1a:80:6e:18:1c:a4:d0:85:50:6e:68:ee:
                    f6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FD:AE:4E:6A:99:5F:1B:B8:F6:70:85:52:8F:05:57:7A:2E:A0:AE
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3134322e302e302f31352d3135203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.142.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         86:a1:34:1c:1b:a9:74:3b:d5:10:d6:b4:0c:d4:7a:75:6a:43:
         13:d7:78:ab:cf:dd:df:db:59:88:ab:08:fa:6e:be:8b:95:45:
         c3:f6:dc:cb:5c:40:da:37:6e:7c:24:24:36:7e:8f:54:82:48:
         33:61:61:28:7b:7d:72:84:00:01:7a:bc:20:7f:4d:db:0e:b7:
         ab:fc:e8:25:2b:78:6d:e5:56:e4:dd:7b:6e:bb:c7:48:6a:67:
         d7:a6:6b:75:89:07:dc:7f:4a:d2:4c:58:56:8c:00:b0:12:53:
         02:72:b5:f1:e5:f3:56:ab:4e:44:0c:fc:eb:36:06:81:68:6b:
         f6:92:13:4b:55:b7:d5:01:1a:f3:71:9b:90:86:53:49:e0:54:
         ba:7b:c7:2b:cd:d8:ff:47:ed:12:97:be:01:de:e6:95:4b:03:
         d7:b0:14:87:f1:da:b8:ba:a3:23:a1:71:0c:55:70:3c:72:5d:
         fc:6a:f6:6f:93:40:24:5a:c3:ac:2c:ed:2e:28:a1:7a:ae:f5:
         1a:2a:2e:13:b7:87:3c:51:bc:fc:22:a9:06:c4:b2:51:3b:43:
         d2:44:12:f3:6b:1a:80:91:d8:e2:09:31:2c:5f:99:65:62:c8:
         02:12:1c:9b:20:5c:03:1c:d1:c7:7b:2c:80:f7:c9:f0:41:4e:
         f6:ff:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 21:17:14 2024 by rpki-client on console-ams.rpki-client.org