Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133332e302f32342d3234203d3e20323731313636.roa
File:                     3137392e34322e3133332e302f32342d3234203d3e20323731313636.roa (raw, json)
Hash identifier:          GiURQCdPkEUNYHFS+KoCmyoEd9UafwIRmKjvvL8fy78=
Subject key identifier:   DA:FE:DB:E8:91:2B:D0:1D:07:E7:84:5F:EF:A9:FB:E8:D3:64:6F:2E
Certificate issuer:       /CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
Certificate serial:       2837C9614A876788B214D13C7A27A8E15A57A53D
Authority key identifier: 2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133332e302f32342d3234203d3e20323731313636.roa
Signing time:             Thu 09 May 2024 12:52:37 +0000
ROA not before:           Thu 09 May 2024 12:47:37 +0000
ROA not after:            Thu 08 May 2025 12:52:37 +0000
asID:                     271166
IP address blocks:        179.42.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:37:c9:61:4a:87:67:88:b2:14:d1:3c:7a:27:a8:e1:5a:57:a5:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
        Validity
            Not Before: May  9 12:47:37 2024 GMT
            Not After : May  8 12:52:37 2025 GMT
        Subject: CN=DAFEDBE8912BD01D07E7845FEFA9FBE8D3646F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:d9:0c:d5:39:18:49:a4:83:ef:89:46:14:
                    01:01:9d:0f:0d:31:f4:43:c3:b8:56:f3:7d:0d:12:
                    e0:28:40:29:ea:28:e1:e3:71:89:aa:cd:ae:f0:28:
                    11:40:25:2c:98:ec:22:b8:48:1a:b8:9e:fb:20:d6:
                    14:62:00:f2:4c:41:67:40:30:27:75:30:83:29:f4:
                    35:e0:16:72:62:46:74:e5:1d:56:e4:88:c4:05:0d:
                    41:00:b0:5a:a3:e6:13:6c:55:6d:d0:99:e0:0c:36:
                    a9:d6:f2:54:b2:d6:1c:88:2a:cb:a8:99:a4:b9:95:
                    95:de:9b:98:dc:09:91:92:b0:cc:26:a9:77:a7:12:
                    71:be:c6:3e:05:5e:b4:47:e6:94:25:33:23:9f:8b:
                    66:76:11:f6:d7:97:84:bd:f9:c6:fd:c6:2a:1c:6f:
                    1a:6e:0d:78:1b:86:aa:fe:22:4e:49:60:6f:71:3b:
                    2a:e1:cf:51:62:22:69:4e:59:ab:a1:d2:0a:91:fa:
                    6a:2d:25:2b:f4:98:b4:e0:15:b4:1d:e1:24:e6:b5:
                    36:22:b3:1a:15:22:94:69:86:ad:c1:4b:c5:50:66:
                    fd:6b:5c:37:fa:f1:fb:b5:28:d4:c8:c6:b1:c4:d6:
                    49:5f:49:ba:14:ce:c9:5b:fa:3b:13:97:39:fe:03:
                    98:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FE:DB:E8:91:2B:D0:1D:07:E7:84:5F:EF:A9:FB:E8:D3:64:6F:2E
            X509v3 Authority Key Identifier:
                keyid:2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133332e302f32342d3234203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:16:be:ea:94:12:ae:dc:32:9f:9d:15:e4:b8:5f:b6:c7:a8:
         5a:41:c4:29:1f:c5:ab:da:19:5d:c6:e7:dd:c9:65:9a:79:bb:
         3d:01:64:9b:65:25:c2:18:2f:ef:25:37:6e:4d:38:3f:26:c2:
         8d:8d:91:e1:c5:14:ad:33:32:90:3a:76:58:60:4a:5e:a8:54:
         16:ff:88:04:c4:db:49:ba:62:e6:5f:f8:dd:b7:96:77:7b:14:
         90:dd:15:72:bc:c3:dd:a8:87:30:66:3e:0a:3c:60:29:ae:4e:
         d6:f6:5a:31:f9:43:00:a2:26:0f:2e:aa:ee:0f:1b:89:d4:90:
         21:0c:1e:56:2a:36:cb:86:e5:92:2d:b2:3f:af:ee:28:46:4e:
         c8:1d:54:70:f1:a4:fa:5f:08:a1:33:be:5c:88:46:c3:fe:b7:
         0e:f3:63:28:e1:bb:36:56:42:32:dc:9c:22:c5:d6:b7:85:a1:
         71:43:6a:b0:45:09:4d:67:83:7c:d2:ad:77:9e:70:19:f1:a4:
         df:06:eb:44:55:50:7c:33:22:1e:06:73:d5:d2:7b:ec:2f:68:
         c0:19:f9:f3:4d:1a:65:73:7f:a9:6e:e1:ad:33:e7:57:35:9c:
         9f:92:24:86:91:93:22:25:4f:65:c2:47:0a:8b:5e:c4:3d:0b:
         f9:6b:aa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org