Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e34332e302e302f31362d3136203d3e2034323330.roa
File:                     3138372e34332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          HGM2JFBGSEBt/HcHktEK8Fbwq7KE3EQVUgR39tQzwVg=
Subject key identifier:   62:FC:F3:EF:92:5E:0C:BB:4B:2C:77:B8:C3:E4:81:05:5E:95:FD:72
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2E12CF6558EB0AB461F50CB9C66A710A5DE93143
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e34332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     4230
IP address blocks:        187.43.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:12:cf:65:58:eb:0a:b4:61:f5:0c:b9:c6:6a:71:0a:5d:e9:31:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:d2:66:c1:be:2c:b4:f4:da:9d:7f:68:37:
                    ab:2e:f5:b5:3e:88:23:e4:21:0d:e8:70:cb:00:ee:
                    26:0d:a5:17:52:cd:d0:f1:df:0c:8a:99:d7:84:23:
                    b0:b0:48:41:23:39:7e:53:18:fb:2c:ec:56:37:83:
                    1c:aa:50:0b:7a:b7:65:e7:10:d3:35:85:ca:ab:f8:
                    4c:a9:51:7e:11:ea:ee:33:56:31:6e:04:d9:3c:57:
                    41:c2:ea:da:92:f2:f1:79:c5:13:ab:10:b1:b0:35:
                    b6:bd:17:24:77:1c:b6:00:91:b5:5b:45:c1:10:22:
                    fc:d8:d1:a9:1f:c6:72:38:d4:e7:11:a0:e0:4f:ee:
                    4b:5b:be:a2:60:ca:7f:c6:eb:73:4b:b2:10:af:40:
                    83:d3:9f:01:4d:c8:6c:26:47:41:fb:82:cf:58:95:
                    54:0a:f7:7e:ae:02:30:50:19:52:52:3d:7e:aa:46:
                    38:94:d5:9c:c9:24:0e:27:14:cc:43:ba:72:e5:90:
                    a2:c2:0f:dd:db:b4:79:f2:04:d8:9c:53:3a:e9:bc:
                    99:9e:41:7b:66:b5:2d:92:eb:20:4e:85:81:e2:a3:
                    0e:90:fa:5d:e5:0d:55:97:ba:06:cb:ac:53:8a:bc:
                    1f:ac:69:24:79:f2:cd:fa:5a:9b:b5:d0:31:94:64:
                    be:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FC:F3:EF:92:5E:0C:BB:4B:2C:77:B8:C3:E4:81:05:5E:95:FD:72
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e34332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:5e:2a:f7:b7:79:f6:28:1c:30:99:7f:f7:cd:5a:b6:9b:
         c8:c5:bf:a5:f6:77:30:1a:10:8f:3b:90:89:64:00:c2:23:c8:
         7e:10:7c:ea:a7:05:6b:aa:aa:64:50:7f:ee:7a:87:fd:8a:45:
         50:fc:e6:c6:db:37:e2:49:c8:d4:19:18:6a:44:6e:6e:ab:7c:
         9d:b3:29:b3:cb:f0:b9:fb:5d:06:c6:94:0e:ae:6a:b7:ee:47:
         0b:fe:b3:99:89:53:b5:aa:af:87:d9:c0:ed:76:51:ab:7c:9d:
         b3:95:f9:1f:cb:13:be:d3:c7:c4:6e:ff:9d:64:12:49:c4:7c:
         6a:71:3b:84:ca:9e:2c:08:32:5c:c2:36:69:24:8a:30:ea:96:
         64:70:e7:54:28:d3:71:d9:98:b1:b7:09:f6:0a:65:c2:7f:dd:
         2e:99:7c:4c:93:47:f7:9b:33:b3:c2:42:2f:eb:16:58:89:af:
         13:55:64:dd:cd:20:8b:65:0f:be:ee:cd:5f:68:3b:c1:57:fc:
         3e:0a:52:2d:9a:55:f8:8f:da:f0:d9:e9:c7:7b:e4:49:16:d4:
         68:de:c2:21:9d:9d:86:23:fb:33:9d:72:da:20:7c:4e:6f:fa:
         a7:24:0a:b6:3f:8e:96:e0:74:9c:84:e6:d8:fd:7f:7c:6c:b7:
         e8:81:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 20:13:36 2024 by rpki-client on console-fra.rpki-client.org