Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133342e302f32332d3233203d3e203238313832.roa
File:                     3137302e3233312e3133342e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          qWG9MZcTdYSm4lhuAclwZV19XR9encx3ifePjspxfJ4=
Subject key identifier:   3D:32:F9:74:3A:E4:1E:DA:E2:89:79:6F:0B:46:91:B0:04:D5:83:3C
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       124F53A93B6DF4131348F9F665DCAA57D419CE66
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133342e302f32332d3233203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:48 +0000
ROA not before:           Wed 17 Apr 2024 11:34:48 +0000
ROA not after:            Wed 16 Apr 2025 11:39:48 +0000
asID:                     28182
IP address blocks:        170.231.134.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4f:53:a9:3b:6d:f4:13:13:48:f9:f6:65:dc:aa:57:d4:19:ce:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:48 2024 GMT
            Not After : Apr 16 11:39:48 2025 GMT
        Subject: CN=3D32F9743AE41EDAE289796F0B4691B004D5833C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:2c:12:29:a4:14:4e:66:29:1a:07:00:a2:
                    10:63:85:28:e2:21:60:37:4a:77:f0:db:49:15:5e:
                    53:19:5f:d1:42:e8:73:ce:82:a0:e8:8d:0f:1e:72:
                    a6:ec:27:80:77:03:77:9a:b0:aa:ce:a5:93:1e:57:
                    cc:6e:22:38:ba:f5:52:14:e6:61:71:cc:e9:6e:49:
                    c5:21:fa:9f:3b:31:38:91:d8:c2:10:ef:00:4b:57:
                    ff:d9:ff:a2:db:4b:32:97:e6:dd:f6:f2:5e:0e:43:
                    af:ac:5f:3e:da:4e:8c:b5:09:a3:28:a9:08:e1:60:
                    1e:3b:8d:de:11:a9:6f:83:ea:16:a0:fa:6f:ef:25:
                    3b:65:05:3a:01:30:c1:e9:f8:8e:3b:c5:12:59:2b:
                    4e:d8:48:de:9c:0d:ae:dc:f2:3f:2a:8f:ab:46:2e:
                    ae:18:dd:83:b4:ef:d4:ef:1d:4c:93:76:85:3b:be:
                    db:b4:6b:d4:3f:42:89:23:7b:4c:71:96:15:4d:c2:
                    c6:74:f3:dd:5e:cd:53:be:21:d0:27:92:36:2e:f5:
                    29:52:3f:90:5c:e9:ff:dd:dd:cc:81:c4:c0:d2:8a:
                    80:cd:f8:4a:c8:d5:77:b3:13:a6:aa:ff:b9:33:df:
                    78:e2:d5:81:97:ac:24:a1:64:07:a8:78:08:5b:c8:
                    74:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:32:F9:74:3A:E4:1E:DA:E2:89:79:6F:0B:46:91:B0:04:D5:83:3C
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133342e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:46:16:25:01:8d:8a:ba:0c:3f:17:e9:0f:51:0f:b2:46:36:
         c9:f4:59:ff:e5:49:cb:d6:9e:07:cd:aa:8b:a7:dc:99:d5:f8:
         7c:7f:7e:b9:9d:24:4c:10:bf:46:af:db:5d:98:79:63:27:f9:
         94:c8:05:9b:c6:d7:1e:a8:c9:e3:ca:45:5e:02:0b:68:34:59:
         3d:f5:3b:b6:cc:8d:b4:09:c9:0c:02:28:26:9f:6f:48:bd:67:
         f6:b1:e0:04:da:4c:ca:54:07:aa:62:66:0b:3a:9d:55:07:cd:
         4c:b4:57:af:db:3b:74:59:1e:23:a8:50:b0:88:36:2b:8e:55:
         bb:21:98:3d:51:76:0e:c0:58:68:2c:75:2c:21:5f:8d:ea:1c:
         72:e7:da:6f:b8:28:a4:3f:9c:15:7d:a6:9e:2a:7b:2d:0f:c3:
         6b:41:ab:41:e7:ff:d9:b7:c0:70:72:cf:9c:b5:8a:15:60:51:
         6b:74:ad:42:f2:a9:fc:f8:79:0a:ea:10:92:3a:d7:de:2e:33:
         af:9a:10:37:fd:68:58:ee:56:ab:12:c9:b8:06:04:93:02:4c:
         b9:58:f0:c9:4c:55:20:57:db:d2:b6:95:7b:b3:11:21:f5:56:
         61:1b:e3:57:81:a8:8c:6c:d9:42:3e:8e:12:a5:b3:09:c1:38:
         ba:84:2f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org