Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3139312e33382e302e302f31352d3135203d3e2034323330.roa
File:                     3139312e33382e302e302f31352d3135203d3e2034323330.roa (raw, json)
Hash identifier:          g0Jh4KVcjV6ocJUKEjPafY+0r0SkLHvc5VklAO57A7A=
Subject key identifier:   A1:52:B3:BE:A3:74:AA:89:20:F1:67:31:42:85:87:5D:86:5F:75:EF
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       06B320C07742BAF65A41AB13B0037F0A116A9941
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3139312e33382e302e302f31352d3135203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:13 +0000
ROA not before:           Wed 03 Apr 2024 18:26:13 +0000
ROA not after:            Wed 02 Apr 2025 18:31:13 +0000
asID:                     4230
IP address blocks:        191.38.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b3:20:c0:77:42:ba:f6:5a:41:ab:13:b0:03:7f:0a:11:6a:99:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:13 2024 GMT
            Not After : Apr  2 18:31:13 2025 GMT
        Subject: CN=3082010A0282010100D4A5908A686257C6D04A36B8F92ACE7F67EEA6623FB569FB74830CB4B91628A817430F12B5C3B6AF567A15B53AAE583D1BF10ADF7207CB9384BAADAEC36BEACE412A3022BB356E3214D386C34EAFAAFC7D3460605A1F270212BC5FA8D3F356EF00EEE4D84AB3073A36C562E1877170A78CF20DEDAB85D2237368C1A80397AFFBE1F66F2DD86226DA948E3DF6EF115DD539D1E5F77F19A299D703E87214BCE036A5FF11EFA73AF9168549BA52039980F36B6302FDFFA72EAE9CB5A916AE5CC1D0715FF697DB8885DCDECAACC93D9E565911F4599B4FCAA34E0E2BB99C880C38E96B646DECFE462222E377BD467E90E37E05F25380B589E702E6BE0FBC801DC8F90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:90:8a:68:62:57:c6:d0:4a:36:b8:f9:2a:
                    ce:7f:67:ee:a6:62:3f:b5:69:fb:74:83:0c:b4:b9:
                    16:28:a8:17:43:0f:12:b5:c3:b6:af:56:7a:15:b5:
                    3a:ae:58:3d:1b:f1:0a:df:72:07:cb:93:84:ba:ad:
                    ae:c3:6b:ea:ce:41:2a:30:22:bb:35:6e:32:14:d3:
                    86:c3:4e:af:aa:fc:7d:34:60:60:5a:1f:27:02:12:
                    bc:5f:a8:d3:f3:56:ef:00:ee:e4:d8:4a:b3:07:3a:
                    36:c5:62:e1:87:71:70:a7:8c:f2:0d:ed:ab:85:d2:
                    23:73:68:c1:a8:03:97:af:fb:e1:f6:6f:2d:d8:62:
                    26:da:94:8e:3d:f6:ef:11:5d:d5:39:d1:e5:f7:7f:
                    19:a2:99:d7:03:e8:72:14:bc:e0:36:a5:ff:11:ef:
                    a7:3a:f9:16:85:49:ba:52:03:99:80:f3:6b:63:02:
                    fd:ff:a7:2e:ae:9c:b5:a9:16:ae:5c:c1:d0:71:5f:
                    f6:97:db:88:85:dc:de:ca:ac:c9:3d:9e:56:59:11:
                    f4:59:9b:4f:ca:a3:4e:0e:2b:b9:9c:88:0c:38:e9:
                    6b:64:6d:ec:fe:46:22:22:e3:77:bd:46:7e:90:e3:
                    7e:05:f2:53:80:b5:89:e7:02:e6:be:0f:bc:80:1d:
                    c8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:52:B3:BE:A3:74:AA:89:20:F1:67:31:42:85:87:5D:86:5F:75:EF
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3139312e33382e302e302f31352d3135203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.38.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9e:cf:25:b3:91:f8:05:d7:c4:80:52:2c:b7:ac:9f:0d:b9:6d:
         b5:4e:e4:0a:44:64:a9:8b:9c:6f:58:b5:41:d6:98:d5:b3:c3:
         77:d2:7c:6d:4e:f4:91:cb:a8:c9:65:1b:d4:ff:42:b6:19:0e:
         23:09:b3:b6:c5:54:a3:f1:8e:6a:92:7c:47:86:dc:50:71:69:
         8d:2a:93:5a:9c:b4:40:52:66:1a:3c:dc:7e:de:40:98:5e:44:
         15:75:8c:7f:2b:1e:ce:ea:6d:ea:79:03:8b:a1:58:36:b7:a5:
         46:f3:b6:d0:88:c6:0f:2b:02:35:15:c5:91:84:06:74:bb:ad:
         cf:da:82:8b:3a:94:79:2d:42:d6:33:be:df:19:93:b5:5e:f6:
         ba:51:e7:72:0c:75:87:fd:ab:70:9b:f8:cf:6e:c0:7e:0f:3e:
         b3:e6:97:e1:4a:94:37:61:0b:35:dd:b0:a5:17:63:f6:12:ef:
         5d:69:ab:3a:83:73:fb:9e:57:ec:67:4c:a0:7a:64:00:30:17:
         78:8e:d3:69:88:d3:36:7b:04:45:22:1e:fa:03:2a:32:18:47:
         28:12:96:78:9c:07:62:7c:65:4b:a9:e4:f6:fa:e7:bc:30:32:
         30:c1:d6:2a:94:46:05:ba:7f:e9:02:82:f2:c5:43:61:af:3d:
         f5:c6:01:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 18:33:28 2024 by rpki-client on console-ams.rpki-client.org