Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32342d3234203d3e20323731313636.roa
File:                     3137392e34322e3133322e302f32342d3234203d3e20323731313636.roa (raw, json)
Hash identifier:          8ngwxdM+BTc0vbCFpfz6fF6jT6xGWsxa/6ROozqoigo=
Subject key identifier:   6F:27:0F:EB:F1:00:7F:24:CC:E1:FE:BF:CD:58:A9:4F:DA:B4:03:7C
Certificate issuer:       /CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
Certificate serial:       0A9A41D60EFE25E717CD0BD901735A97AABB2D32
Authority key identifier: 2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32342d3234203d3e20323731313636.roa
Signing time:             Thu 09 May 2024 12:52:34 +0000
ROA not before:           Thu 09 May 2024 12:47:34 +0000
ROA not after:            Thu 08 May 2025 12:52:34 +0000
asID:                     271166
IP address blocks:        179.42.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9a:41:d6:0e:fe:25:e7:17:cd:0b:d9:01:73:5a:97:aa:bb:2d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
        Validity
            Not Before: May  9 12:47:34 2024 GMT
            Not After : May  8 12:52:34 2025 GMT
        Subject: CN=6F270FEBF1007F24CCE1FEBFCD58A94FDAB4037C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5c:55:43:c2:50:87:fe:9d:d6:9a:3c:3c:fe:
                    ae:f9:b3:fb:85:f0:50:51:c0:20:74:d3:db:e6:a4:
                    44:ab:8a:0f:05:3a:c5:b8:ef:04:6b:1a:89:7e:54:
                    ea:cd:a8:50:68:a7:0f:66:a4:e6:59:1d:bd:d9:39:
                    f4:a5:7c:36:ec:37:46:48:d9:36:88:0b:26:02:8f:
                    ba:e1:1c:94:3f:88:81:12:ec:8d:83:c5:86:56:1b:
                    b0:5e:05:69:7e:37:aa:6c:d7:35:64:68:37:20:62:
                    57:12:04:67:c5:e4:6d:a6:2e:c9:f8:35:3d:84:8a:
                    71:b7:99:47:fd:55:2f:5e:aa:c1:6f:0f:fd:1c:73:
                    8c:e2:a8:05:b2:2c:80:d6:ed:b3:de:e9:d1:ad:ee:
                    db:03:c0:48:49:05:b8:bf:bf:ef:db:77:d0:ef:f3:
                    c0:31:4a:5f:54:f5:54:b8:dc:08:b5:7f:48:ca:dc:
                    dd:36:ce:e0:28:5f:29:11:87:d2:d5:61:9b:bd:21:
                    22:46:28:9b:cf:76:4d:c5:54:c6:79:59:1e:6d:e2:
                    e9:38:37:f9:05:90:4b:b1:40:9a:2a:e7:70:58:fb:
                    fd:b0:62:66:31:72:58:0a:f3:d8:1c:98:ce:33:1a:
                    24:f5:49:07:0f:c3:2e:76:14:d2:e0:cf:1f:e0:e2:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:27:0F:EB:F1:00:7F:24:CC:E1:FE:BF:CD:58:A9:4F:DA:B4:03:7C
            X509v3 Authority Key Identifier:
                keyid:2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32342d3234203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:df:c3:00:fe:04:63:68:7a:79:fa:3a:70:fc:d5:56:fb:
         d6:5d:9d:27:d9:13:0e:49:88:ae:dd:ed:0d:06:01:b8:11:33:
         f9:b7:d5:1f:f8:5a:6c:62:0d:36:58:85:5e:d6:bf:d6:1b:5f:
         67:aa:29:4e:0d:e6:46:3d:e4:06:7d:8e:88:05:90:b7:ec:18:
         31:22:0c:f6:3b:d7:59:08:bf:f5:79:9a:6d:0b:fb:c5:f5:d6:
         dd:29:2f:3e:63:ce:f0:e1:b0:87:56:8b:c0:3e:fa:5a:9a:7e:
         b7:00:cb:81:99:5b:c3:54:86:3a:06:77:4f:09:c3:2f:1a:be:
         ed:f4:11:c3:7f:9a:cc:c8:0b:40:56:62:a4:ec:ad:bf:e8:70:
         60:4c:88:54:16:a2:3f:90:47:47:85:9a:35:ae:86:bc:c7:84:
         f5:10:0c:f1:2d:6d:2c:6a:59:d0:c3:b2:c7:20:b6:20:13:1a:
         94:db:cc:77:3f:5a:12:67:72:0f:77:80:bd:84:4f:fb:20:34:
         bd:e5:b2:f6:da:5b:cb:de:13:ed:3c:4c:45:d5:7f:9f:58:71:
         6a:b4:5a:23:c5:1a:3f:fc:e8:82:f3:42:13:7a:19:65:fc:7e:
         00:d1:1f:dd:1e:c3:bc:93:7a:dc:ed:6c:08:b7:98:67:1b:d0:
         e3:c5:0e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org