Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32332d3233203d3e203238313832.roa
File:                     3137302e3233312e3133322e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          bNgVWFcPvZOZzN5MTVgjPnrALkhydBNQAI5Z7pK8m0Y=
Subject key identifier:   4B:56:81:D7:D2:26:5E:78:82:F4:48:99:20:62:80:A8:DA:A3:7B:44
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       4B1F6FAE24A160A1FEA0264A99995716F3CAEBBC
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32332d3233203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:48 +0000
ROA not before:           Wed 17 Apr 2024 11:34:48 +0000
ROA not after:            Wed 16 Apr 2025 11:39:48 +0000
asID:                     28182
IP address blocks:        170.231.132.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1f:6f:ae:24:a1:60:a1:fe:a0:26:4a:99:99:57:16:f3:ca:eb:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:48 2024 GMT
            Not After : Apr 16 11:39:48 2025 GMT
        Subject: CN=4B5681D7D2265E7882F44899206280A8DAA37B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:66:a3:99:d6:b1:a5:b6:6f:37:04:9d:1f:
                    f7:8d:f1:c9:71:3e:5d:aa:cd:6c:34:c7:09:66:99:
                    4f:71:07:c8:db:b4:19:13:7d:a6:65:0d:c2:b3:2d:
                    ad:eb:c7:0b:fc:86:07:71:55:db:5d:0a:fd:2c:64:
                    f6:bf:a3:ef:de:d6:83:09:58:fc:d1:8a:3b:45:83:
                    ce:b2:a0:d3:6b:7f:f9:23:da:24:19:9b:33:cb:cf:
                    d5:e1:f8:0b:c5:10:ba:50:81:f2:6c:3d:c5:d9:2f:
                    51:c6:30:cf:d4:eb:13:cd:17:2b:af:96:b2:0e:c4:
                    e0:50:2e:b7:a2:0d:ae:dd:f3:77:16:e7:e7:03:93:
                    59:a8:0c:fd:3b:44:93:35:50:9e:06:3c:c6:11:7f:
                    fd:07:eb:11:c1:65:f1:64:77:9b:d9:80:d3:c3:08:
                    e1:f8:0b:e8:fe:2a:34:93:20:39:f0:5d:84:f0:aa:
                    b5:1c:29:91:2d:60:32:e4:af:8e:f9:12:ff:2e:7e:
                    ea:05:29:e1:2e:9b:97:b0:f6:cb:f9:cd:23:7e:31:
                    ca:ae:96:81:7a:5e:98:a8:97:5e:fa:00:00:0d:80:
                    c0:1f:d2:8d:42:44:f5:86:2e:f9:8b:6a:87:8e:c8:
                    5a:93:fd:ea:b9:34:59:f1:2c:5e:fa:fe:8a:72:1e:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:56:81:D7:D2:26:5E:78:82:F4:48:99:20:62:80:A8:DA:A3:7B:44
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:71:a0:fe:36:3f:ed:13:52:d8:45:7d:3c:96:90:46:03:c7:
         8d:b3:12:d6:35:fc:bf:c3:d1:fe:0c:81:5b:aa:0b:ee:b6:72:
         56:b1:c4:2e:58:5e:a2:86:46:17:f8:49:72:03:7e:6b:76:2c:
         a0:4f:98:25:d4:8a:ac:82:ff:09:7c:e7:5c:cb:80:fe:12:66:
         b1:ac:60:6c:bb:9e:20:cc:63:5b:15:30:c8:cb:22:6d:bd:51:
         49:90:9a:cc:12:9d:09:82:ee:a0:1b:bf:98:a1:26:e3:14:6a:
         33:f1:24:a1:47:78:fa:18:37:44:40:95:b5:b1:f6:69:19:00:
         4f:b8:93:3f:b2:25:cc:86:b4:24:79:45:ac:c2:0f:5f:9e:4f:
         ac:2b:bc:23:ee:a6:3e:ba:60:f3:d8:42:bf:e8:13:91:46:ae:
         87:83:9a:72:10:24:6a:f7:0b:ae:5b:dc:9a:02:43:8b:5c:a0:
         c5:e5:ce:81:50:4f:9d:a3:b1:5a:03:5f:0e:78:70:81:12:e1:
         d5:02:1b:07:6e:37:50:90:6d:b1:af:ff:6d:5a:9c:e2:57:cd:
         87:1a:3d:e6:8f:91:f8:25:58:62:5b:e6:91:7d:35:e3:3d:5a:
         0b:ef:80:37:72:8e:2a:a2:62:2a:0f:93:40:38:96:70:d6:b4:
         9b:aa:80:e4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSx9vriShYKH+oCZKmZlXFvPK67wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFM0YwQzdCRTRGQTAxNzUyNENFMjI0NEU0QUE4MzYz
NDQ2RkQwRDAeFw0yNDA0MTcxMTM0NDhaFw0yNTA0MTYxMTM5NDhaMDMxMTAvBgNV
BAMTKDRCNTY4MUQ3RDIyNjVFNzg4MkY0NDg5OTIwNjI4MEE4REFBMzdCNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW8GajmdaxpbZvNwSdH/eN8clx
Pl2qzWw0xwlmmU9xB8jbtBkTfaZlDcKzLa3rxwv8hgdxVdtdCv0sZPa/o+/e1oMJ
WPzRijtFg86yoNNrf/kj2iQZmzPLz9Xh+AvFELpQgfJsPcXZL1HGMM/U6xPNFyuv
lrIOxOBQLreiDa7d83cW5+cDk1moDP07RJM1UJ4GPMYRf/0H6xHBZfFkd5vZgNPD
COH4C+j+KjSTIDnwXYTwqrUcKZEtYDLkr475Ev8ufuoFKeEum5ew9sv5zSN+Mcqu
loF6Xpiol176AAANgMAf0o1CRPWGLvmLaoeOyFqT/eq5NFnxLF76/opyHq2JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUS1aB19ImXniC9EiZIGKAqNqje0QwHwYDVR0j
BBgwFoAUaOPwx75PoBdSTOIkTkqoNjRG/Q0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC82OEUzRjBDN0JFNEZBMDE3NTI0Q0UyMjQ0RTRBQTgzNjM0NDZGRDBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RTNGMEM3QkU0RkEwMTc1
MjRDRTIyNDRFNEFBODM2MzQ0NkZEMEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzMzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq54QwDQYJKoZIhvcNAQELBQADggEBAJFxoP42
P+0TUthFfTyWkEYDx42zEtY1/L/D0f4MgVuqC+62claxxC5YXqKGRhf4SXIDfmt2
LKBPmCXUiqyC/wl851zLgP4SZrGsYGy7niDMY1sVMMjLIm29UUmQmswSnQmC7qAb
v5ihJuMUajPxJKFHePoYN0RAlbWx9mkZAE+4kz+yJcyGtCR5RazCD1+eT6wrvCPu
pj66YPPYQr/oE5FGroeDmnIQJGr3C65b3JoCQ4tcoMXlzoFQT52jsVoDXw54cIES
4dUCGwduN1CQbbGv/21anOJXzYcaPeaPkfglWGJb5pF9NeM9WgvvgDdyjiqiYioP
k0A4lnDWtJuqgOQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org