Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3137392e3234302e302e302f31342d3134203d3e203232303835.roa
File:                     3137392e3234302e302e302f31342d3134203d3e203232303835.roa (raw, json)
Hash identifier:          ajk7zMSTRw2RcZ5/ISIHT9/9un38BmwQTRGle5I3ntw=
Subject key identifier:   B2:3D:45:42:2A:9F:56:87:18:9F:F0:E2:11:DA:FB:C2:C3:28:E6:EA
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       14590C59D237CA1D3CD51E74CCBAA6CBF476B234
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3137392e3234302e302e302f31342d3134203d3e203232303835.roa
Signing time:             Wed 03 Apr 2024 18:31:54 +0000
ROA not before:           Wed 03 Apr 2024 18:26:54 +0000
ROA not after:            Wed 02 Apr 2025 18:31:54 +0000
asID:                     22085
IP address blocks:        179.240.0.0/14 maxlen: 14

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:59:0c:59:d2:37:ca:1d:3c:d5:1e:74:cc:ba:a6:cb:f4:76:b2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Apr  3 18:26:54 2024 GMT
            Not After : Apr  2 18:31:54 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c2:05:57:01:cb:ab:85:83:a2:32:af:18:ac:
                    71:dd:c6:c1:cf:e3:33:64:de:b1:7b:d2:a9:72:7a:
                    83:41:9d:ff:cf:25:9f:43:9a:50:8b:be:e6:0d:fc:
                    f8:8a:a7:5c:09:8c:a4:be:8f:4a:8a:1a:6e:1c:11:
                    08:e6:02:63:ed:04:7a:82:e0:2a:97:39:53:c1:12:
                    41:45:95:51:01:59:72:1d:d8:b1:61:ec:21:67:a7:
                    79:f9:d9:77:53:b3:12:e0:48:a5:4c:3c:88:40:eb:
                    0a:6e:08:ff:09:ec:6a:d7:6a:41:ad:1c:60:50:7d:
                    47:e9:1e:30:a5:be:39:b0:42:e9:0b:36:69:2e:94:
                    13:7f:70:54:2d:48:68:38:83:6a:a9:52:c0:aa:e6:
                    77:a7:66:8d:4a:5d:eb:ef:ce:45:2b:c7:48:e4:63:
                    b4:39:88:16:d1:d9:bd:62:b8:df:32:77:db:72:c6:
                    0f:45:e4:0e:98:04:02:49:75:a2:09:1a:f3:df:44:
                    c9:ec:a9:d9:ad:c7:1f:ab:7e:16:14:97:a3:c6:75:
                    59:8b:95:48:43:76:00:1d:49:77:61:3f:91:c1:0f:
                    96:1e:88:5b:17:c0:4e:ec:1e:59:16:38:d4:92:00:
                    55:ee:62:30:bf:13:81:a6:de:b8:c8:a2:c6:2f:a8:
                    30:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3D:45:42:2A:9F:56:87:18:9F:F0:E2:11:DA:FB:C2:C3:28:E6:EA
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3137392e3234302e302e302f31342d3134203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.240.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         6e:27:ae:45:fd:96:f6:79:a3:27:2e:da:fb:94:00:4b:c8:48:
         8a:f6:6f:71:6a:9a:79:f8:3e:d4:49:c7:21:d5:a2:3a:17:55:
         a6:fc:cf:42:33:1f:cf:35:7e:18:55:8f:bc:5f:29:00:bd:bf:
         43:58:de:db:9d:98:26:7f:4b:e6:0b:b4:cd:dd:6d:39:00:77:
         9d:f5:2c:fb:3e:46:a7:b6:63:ae:75:d8:fb:f7:f3:ad:3d:de:
         d4:44:c7:0d:b9:fe:a0:9b:40:48:f9:bc:b1:35:01:e1:ca:4a:
         f9:4f:3d:0f:4e:bb:46:a7:ed:16:2d:c5:d0:c5:56:e6:c2:c0:
         20:8a:74:d2:96:e6:33:c8:c4:23:e6:04:ce:4c:99:44:f1:7d:
         f5:ce:1f:f6:b3:cd:a5:d0:5a:29:35:65:c1:41:35:11:9d:a9:
         f8:63:b4:d4:72:10:7b:13:1d:e0:f1:61:ee:90:6d:a0:21:9c:
         2d:50:13:f9:51:8f:bc:6e:6a:3c:6b:5d:53:78:63:10:2f:92:
         f5:58:98:c1:95:e0:d3:6d:f6:9b:b2:e8:7a:5d:4c:e2:78:de:
         d7:33:54:3b:69:e7:90:0e:b6:01:77:fd:44:19:a5:a7:e1:15:
         7b:76:d6:a9:9d:0a:62:c2:fc:90:cd:62:90:0a:f5:3a:a2:12:
         33:25:20:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 21:31:16 2024 by rpki-client on console-ams.rpki-client.org