Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3139312e36302e302e302f31342d3134203d3e2034323330.roa
File:                     3139312e36302e302e302f31342d3134203d3e2034323330.roa (raw, json)
Hash identifier:          WI5UfI4gjxQrjYQHlduYCw23wQ8wPRYE4p4ZuOmceKQ=
Subject key identifier:   2B:88:A1:26:54:0D:6A:D4:EF:C0:77:EC:CF:3D:22:31:80:23:45:26
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       03CBDB322C8E5C248DC56B5A7AAA4601DEB9A3A4
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3139312e36302e302e302f31342d3134203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     4230
IP address blocks:        191.60.0.0/14 maxlen: 14

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cb:db:32:2c:8e:5c:24:8d:c5:6b:5a:7a:aa:46:01:de:b9:a3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f8:ce:f2:01:62:63:f2:a5:df:4d:6e:93:67:
                    40:6e:4f:eb:f2:01:61:73:cc:26:eb:fa:8c:ab:3c:
                    f3:06:a3:a1:84:3b:a0:b4:e5:4d:c3:f3:e6:0c:6f:
                    11:08:53:f1:2a:0a:e4:2e:d5:16:c8:a4:00:de:6e:
                    a6:71:40:68:9a:9f:0e:d7:1b:f2:aa:7f:a8:e9:8d:
                    e3:46:f9:ea:c0:54:7e:42:a9:ed:6d:8f:87:4d:8e:
                    78:01:4a:1b:ad:7a:f2:2e:35:65:bb:22:cf:20:9a:
                    c8:10:97:99:b8:07:b5:6a:3a:4c:68:37:04:81:d2:
                    d4:e5:7e:f8:4f:68:c1:c4:ce:3e:d3:d2:6a:5e:86:
                    ec:b7:33:c1:91:b5:22:35:1e:2d:09:d7:d7:5c:f3:
                    1f:4c:cb:3d:e6:e3:e6:13:73:c4:a5:c1:2e:e4:28:
                    38:00:a8:06:07:b2:5b:cf:85:c9:3f:f9:7b:3f:02:
                    89:0e:a5:c7:43:a9:bb:bc:23:b1:82:65:ce:77:84:
                    37:82:96:82:f5:cf:2c:31:5c:05:4f:74:6b:9d:73:
                    71:74:64:13:9b:63:9a:be:19:a1:2d:e8:7e:88:c3:
                    8d:73:e5:1f:b1:59:00:1d:fd:46:44:9b:98:9c:e0:
                    4c:f8:a0:b9:d2:24:dd:3a:e4:8f:fa:9f:a0:71:06:
                    c3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:88:A1:26:54:0D:6A:D4:EF:C0:77:EC:CF:3D:22:31:80:23:45:26
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3139312e36302e302e302f31342d3134203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.60.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         19:23:6d:d1:54:4b:eb:47:79:f7:73:d2:19:dc:a3:0b:5c:25:
         c9:dd:d8:f5:57:6d:2d:ed:54:74:43:4f:28:aa:9e:cf:76:76:
         43:e4:d2:f4:ac:3b:67:a1:ac:4c:d7:bf:99:69:2d:ff:ca:2d:
         6b:77:a8:9b:28:6b:17:59:28:29:d6:d7:c5:e7:60:17:b4:dc:
         cf:5a:f2:61:85:22:6d:f4:5a:a0:4f:ab:c0:e5:c7:5f:e9:0d:
         4f:af:04:64:e5:a1:77:34:5d:6a:35:0d:64:ea:1a:56:54:0a:
         61:b1:56:45:2b:0b:7d:40:f5:68:fe:a3:a3:06:b7:a7:39:3b:
         17:ad:63:d1:91:93:5d:7f:a1:31:b1:a7:af:d6:13:3d:85:f7:
         69:b3:54:c3:ad:ed:e1:5b:46:00:9c:b7:a6:7d:6d:c5:8f:d1:
         22:9a:75:6b:83:a9:90:9f:69:4b:b0:4b:e3:19:54:6c:54:d6:
         a3:bb:bb:69:6d:4d:ee:70:9a:8c:a0:9d:8b:68:d1:1b:ea:b4:
         0a:27:17:79:a2:4f:b9:45:05:7b:3e:e0:83:d0:e8:c3:97:fe:
         45:ba:b5:bf:d0:f4:b3:fa:ab:c1:ba:80:85:0c:0d:cd:ab:fe:
         9c:9f:43:ea:f0:7b:ac:73:7a:74:bd:e7:69:95:48:59:e6:5f:
         ad:5e:0a:11
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUA8vbMiyOXCSNxWtaeqpGAd65o6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MDdaFw0yNTA0MDIxODMxMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTJGOENFRjIwMTYyNjNGMkE1
REY0RDZFOTM2NzQwNkU0RkVCRjIwMTYxNzNDQzI2RUJGQThDQUIzQ0YzMDZBM0Ex
ODQzQkEwQjRFNTREQzNGM0U2MEM2RjExMDg1M0YxMkEwQUU0MkVENTE2QzhBNDAw
REU2RUE2NzE0MDY4OUE5RjBFRDcxQkYyQUE3RkE4RTk4REUzNDZGOUVBQzA1NDdF
NDJBOUVENkQ4Rjg3NEQ4RTc4MDE0QTFCQUQ3QUYyMkUzNTY1QkIyMkNGMjA5QUM4
MTA5Nzk5QjgwN0I1NkEzQTRDNjgzNzA0ODFEMkQ0RTU3RUY4NEY2OEMxQzRDRTNF
RDNEMjZBNUU4NkVDQjczM0MxOTFCNTIyMzUxRTJEMDlEN0Q3NUNGMzFGNENDQjNE
RTZFM0U2MTM3M0M0QTVDMTJFRTQyODM4MDBBODA2MDdCMjVCQ0Y4NUM5M0ZGOTdC
M0YwMjg5MEVBNUM3NDNBOUJCQkMyM0IxODI2NUNFNzc4NDM3ODI5NjgyRjVDRjJD
MzE1QzA1NEY3NDZCOUQ3MzcxNzQ2NDEzOUI2MzlBQkUxOUExMkRFODdFODhDMzhE
NzNFNTFGQjE1OTAwMURGRDQ2NDQ5Qjk4OUNFMDRDRjhBMEI5RDIyNEREM0FFNDhG
RkE5RkEwNzEwNkMzNjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4vjO8gFiY/Kl301uk2dAbk/r8gFhc8wm6/qMqzzzBqOhhDugtOVN
w/PmDG8RCFPxKgrkLtUWyKQA3m6mcUBomp8O1xvyqn+o6Y3jRvnqwFR+QqntbY+H
TY54AUobrXryLjVluyLPIJrIEJeZuAe1ajpMaDcEgdLU5X74T2jBxM4+09JqXobs
tzPBkbUiNR4tCdfXXPMfTMs95uPmE3PEpcEu5Cg4AKgGB7Jbz4XJP/l7PwKJDqXH
Q6m7vCOxgmXOd4Q3gpaC9c8sMVwFT3RrnXNxdGQTm2OavhmhLeh+iMONc+UfsVkA
Hf1GRJuYnOBM+KC50iTdOuSP+p+gcQbDaQIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FCuIoSZUDWrU78B37M89IjGAI0UmMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMxMzkzMTJlMzYzMDJlMzAyZTMw
MmYzMTM0MmQzMTM0MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAr88MA0GCSqG
SIb3DQEBCwUAA4IBAQAZI23RVEvrR3n3c9IZ3KMLXCXJ3dj1V20t7VR0Q08oqp7P
dnZD5NL0rDtnoaxM17+ZaS3/yi1rd6ibKGsXWSgp1tfF52AXtNzPWvJhhSJt9Fqg
T6vA5cdf6Q1PrwRk5aF3NF1qNQ1k6hpWVAphsVZFKwt9QPVo/qOjBrenOTsXrWPR
kZNdf6Exsaev1hM9hfdps1TDre3hW0YAnLemfW3Fj9EimnVrg6mQn2lLsEvjGVRs
VNaju7tpbU3ucJqMoJ2LaNEb6rQKJxd5ok+5RQV7PuCD0OjDl/5FurW/0PSz+qvB
uoCFDA3Nq/6cn0Pq8Husc3p0vedplUhZ5l+tXgoR
-----END CERTIFICATE-----
Generated at Tue Jul 16 18:33:28 2024 by rpki-client on console-ams.rpki-client.org