Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3139312e35362e302e302f31342d3134203d3e2034323330.roa
File:                     3139312e35362e302e302f31342d3134203d3e2034323330.roa (raw, json)
Hash identifier:          /fVm91Z84VvOSHqiP5Td0N2Tnc5cAlOQnJeIH+g0QWs=
Subject key identifier:   42:67:67:B6:BE:D9:BA:58:63:96:0D:9F:74:A5:11:BD:6F:C0:7A:BA
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       15800D2CF6D039A0FEC535875E458A465ADA3890
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3139312e35362e302e302f31342d3134203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     4230
IP address blocks:        191.56.0.0/14 maxlen: 14

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:80:0d:2c:f6:d0:39:a0:fe:c5:35:87:5e:45:8a:46:5a:da:38:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:c8:10:06:77:32:09:45:09:b6:5b:b1:82:
                    63:be:bc:93:13:00:e4:fc:e9:13:29:3f:f0:a1:3f:
                    28:c6:fd:0e:4a:f7:e8:aa:6d:24:de:49:cc:ae:54:
                    31:29:08:22:37:68:bc:c2:44:22:8d:c4:07:42:53:
                    40:ae:1f:ba:6a:5b:f8:56:f7:8c:09:9e:7e:43:14:
                    c2:42:fc:06:39:04:1d:c3:52:af:0b:3c:d9:28:01:
                    49:a3:98:47:74:c0:da:88:a0:39:f4:53:ed:a4:cb:
                    7c:d7:21:4a:99:94:70:20:a6:42:35:f4:1d:b1:6a:
                    e2:38:8e:d8:76:63:de:22:aa:51:7e:ff:d6:26:23:
                    c8:6c:f3:89:14:0f:05:e3:1d:c4:f8:f6:5c:b0:61:
                    25:2e:84:b0:75:67:81:4e:6c:0b:d1:95:24:1a:a9:
                    6c:f4:83:34:25:61:3a:65:10:1e:e9:b8:7e:86:e7:
                    a3:19:97:11:6c:7f:0e:22:8e:85:9d:88:38:d6:2f:
                    27:6f:5d:4a:de:44:97:f7:50:98:7b:20:cf:78:29:
                    12:90:38:b0:33:75:68:8a:67:a2:61:62:6f:34:0f:
                    76:dd:08:1e:4f:8b:81:eb:a3:21:8d:ef:81:6b:f4:
                    26:e1:59:a6:16:4d:d2:55:fd:0b:b7:15:ef:53:44:
                    10:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:67:67:B6:BE:D9:BA:58:63:96:0D:9F:74:A5:11:BD:6F:C0:7A:BA
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3139312e35362e302e302f31342d3134203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.56.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         35:99:4c:16:37:66:d6:88:0a:b7:fa:a3:e9:b9:6b:88:93:7e:
         82:c7:64:1b:e6:86:d2:33:33:12:db:a7:13:d4:bd:40:2b:74:
         1f:71:25:8e:30:f3:e4:d0:3a:e6:d1:ba:47:c5:19:5c:c2:e6:
         37:37:58:50:6a:60:e7:b4:8a:35:12:62:49:73:cd:a0:51:98:
         27:ca:20:df:1c:b6:50:b9:8b:e1:52:96:c0:e7:df:e3:cd:8a:
         89:a4:69:98:13:41:e9:51:8e:a9:35:a2:15:5c:8a:91:b1:88:
         1d:dc:cc:43:4f:12:fe:8f:2b:9e:6e:cf:9c:11:db:53:7d:db:
         50:3e:33:e3:4f:3d:09:39:14:ff:85:da:c0:b6:e5:b5:a3:ee:
         ea:37:3b:60:1d:f5:56:35:95:b1:a2:70:b8:33:29:0c:eb:45:
         a5:54:3b:77:9e:3b:5e:58:3b:21:35:10:26:48:ec:6a:a5:e3:
         01:89:d3:69:73:ff:68:1b:de:04:a4:ae:37:0d:41:15:fd:7e:
         17:32:3c:7d:60:e1:32:2c:e1:14:25:fe:79:39:ab:46:06:a2:
         6c:94:ff:e2:df:e6:ac:99:23:1e:1c:c7:16:09:62:9c:fb:73:
         cf:be:63:d0:ed:0c:5d:60:02:c4:a5:26:f9:21:8e:40:6a:a6:
         63:f3:8b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 18:30:11 2024 by rpki-client on console-fra.rpki-client.org