Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa
File:                     3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa (raw, json)
Hash identifier:          sQTsLDesEsm0RiF5ZV4uBEiXDVDkEQEGgUH/bf4/4Sg=
Subject key identifier:   9F:65:11:18:AB:9E:E8:96:16:66:EC:E0:DF:34:35:54:12:26:38:9E
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       05A9EDFC714A309842503925217AF53B87A94601
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa
Signing time:             Mon 14 Oct 2024 15:21:17 +0000
ROA not before:           Mon 14 Oct 2024 15:16:17 +0000
ROA not after:            Mon 13 Oct 2025 15:21:17 +0000
asID:                     263518
IP address blocks:        191.243.212.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 10:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a9:ed:fc:71:4a:30:98:42:50:39:25:21:7a:f5:3b:87:a9:46:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Oct 14 15:16:17 2024 GMT
            Not After : Oct 13 15:21:17 2025 GMT
        Subject: CN=9F651118AB9EE8961666ECE0DF3435541226389E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:56:d0:86:cf:ac:b3:7a:38:d1:31:c9:14:
                    d0:4e:3d:82:8c:8b:07:b8:13:2c:c2:d4:f1:25:03:
                    33:e3:24:e0:21:87:6d:29:95:91:c8:02:7b:9e:12:
                    5b:33:a5:0f:63:6b:60:c1:99:6f:f8:96:ff:af:b9:
                    25:20:5e:7f:2d:93:6e:2c:b3:e9:70:12:c9:05:39:
                    d2:04:c8:e1:42:17:3d:3f:47:1c:6f:c3:b7:db:dd:
                    45:f7:1a:e6:ca:1b:3b:3f:0b:f1:48:48:3b:38:9f:
                    07:2b:13:0e:17:c1:a6:9b:09:38:61:b9:88:7e:d2:
                    7a:da:63:ae:31:b7:eb:3f:ad:36:32:dd:f7:44:17:
                    dd:8d:5d:13:89:f5:9a:7d:69:59:26:09:2d:a5:6d:
                    a9:fc:5d:76:13:71:73:38:79:0b:17:72:9e:1e:fe:
                    1f:0b:3e:4b:bf:d9:8a:c8:6f:de:f3:ae:f7:53:94:
                    b6:ca:5d:65:cb:73:e4:74:a3:9f:43:36:d0:bc:41:
                    71:1f:cd:23:5a:47:fb:7c:91:27:9c:38:19:b2:07:
                    bc:11:36:9f:f8:62:ec:4b:7f:5f:a4:10:5c:2e:32:
                    35:8f:a5:5a:d0:f8:0c:90:47:b8:a1:b9:cd:0e:69:
                    40:dd:3f:e8:0e:94:65:c0:24:0c:48:e9:a8:a2:8b:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:65:11:18:AB:9E:E8:96:16:66:EC:E0:DF:34:35:54:12:26:38:9E
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:00:95:a5:c9:c5:98:fa:11:0a:45:f4:46:7a:c2:2e:83:0e:
         cb:5b:ed:39:8b:e1:bf:ad:5f:4b:d6:d2:6f:fb:77:7e:2d:70:
         fd:61:ce:45:1e:67:e4:f4:ea:41:b9:f8:47:c2:c1:98:25:cf:
         e1:6b:e7:70:bc:f7:c9:24:23:47:53:ae:5d:e5:bf:0e:be:f9:
         4c:aa:19:e8:36:f9:be:96:e2:e9:ab:bf:f3:68:d7:92:88:df:
         d0:29:02:2f:45:2c:1a:cb:a2:96:80:4d:9b:8d:43:83:62:41:
         0b:17:ba:91:26:ce:11:40:04:61:ba:ed:3e:7f:19:57:71:15:
         8c:69:ec:e0:5e:bc:4b:89:09:78:48:3f:37:ae:0d:86:b2:13:
         e2:fb:d7:a4:28:91:87:71:b8:1c:cf:09:98:b4:73:64:ea:5a:
         0b:10:0d:33:c7:50:e2:c6:1f:ce:89:88:cc:55:f6:f8:3a:d5:
         60:bb:71:04:79:e9:e7:c7:5c:4f:16:bc:e0:25:6a:23:3f:52:
         8b:de:c5:c3:a9:f0:d8:f8:bb:f0:a9:60:2b:f6:b7:fb:82:08:
         0a:de:a7:94:83:d0:00:be:a5:6b:f2:1d:5a:95:77:13:08:2b:
         43:6e:1e:64:94:43:84:db:d2:b6:0f:ea:11:11:6c:89:cb:03:
         1b:86:10:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 15:57:09 2024 by rpki-client on console-ams.rpki-client.org