Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133342e302f32342d3234203d3e20323731313636.roa
File:                     3137392e34322e3133342e302f32342d3234203d3e20323731313636.roa (raw, json)
Hash identifier:          juC648Ncggv/Y6wN2hOXF/azsWpCeiOCnzbdsNTM5p0=
Subject key identifier:   5F:3D:10:87:69:02:18:0A:26:B5:98:06:EE:FD:7D:F7:F1:7A:D0:55
Certificate issuer:       /CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
Certificate serial:       1F61FA9AF5866F5F8DD134B5448C805AA4E33910
Authority key identifier: 2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133342e302f32342d3234203d3e20323731313636.roa
Signing time:             Thu 09 May 2024 12:52:39 +0000
ROA not before:           Thu 09 May 2024 12:47:39 +0000
ROA not after:            Thu 08 May 2025 12:52:39 +0000
asID:                     271166
IP address blocks:        179.42.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:61:fa:9a:f5:86:6f:5f:8d:d1:34:b5:44:8c:80:5a:a4:e3:39:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
        Validity
            Not Before: May  9 12:47:39 2024 GMT
            Not After : May  8 12:52:39 2025 GMT
        Subject: CN=5F3D10876902180A26B59806EEFD7DF7F17AD055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:de:e8:75:b9:2e:d4:af:63:5e:a9:5d:af:ac:
                    de:8e:40:9b:51:5f:e0:27:54:34:3b:f9:72:f9:cf:
                    00:59:9c:eb:52:53:01:d3:3e:ea:68:ce:cf:12:3d:
                    29:a0:f1:18:b5:79:5b:86:3d:ef:ba:4c:3e:94:0f:
                    fc:fb:38:1a:b5:ac:29:f6:3e:21:b5:85:6a:99:c6:
                    f5:f2:67:fb:6e:5f:b2:64:54:da:14:36:ce:27:66:
                    0c:b1:80:7c:87:62:1e:0a:84:78:a2:cc:36:a7:a7:
                    72:c0:02:9d:7e:59:ea:aa:fc:f3:8f:5c:53:20:c2:
                    df:58:c8:5e:b5:33:92:aa:04:15:b4:bb:f7:b8:79:
                    82:46:19:3b:be:34:70:d3:3b:f5:64:88:72:92:9c:
                    b8:80:3b:77:5c:e3:ed:37:6c:8b:63:85:73:ad:ec:
                    06:64:2c:79:3c:91:9e:f6:42:cb:98:16:9c:11:e5:
                    38:8d:c6:5a:14:a6:91:c4:bd:86:31:4c:d7:97:49:
                    99:9d:0c:04:13:23:22:9e:39:f6:58:fa:02:0d:e9:
                    74:c2:0c:5a:7c:cd:2c:1b:a6:5a:af:0e:ee:22:a0:
                    de:40:04:a0:b2:f5:20:24:85:2e:0b:7b:ba:d3:b6:
                    af:23:7b:19:ba:e0:20:9d:09:d8:ff:3c:13:15:51:
                    70:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3D:10:87:69:02:18:0A:26:B5:98:06:EE:FD:7D:F7:F1:7A:D0:55
            X509v3 Authority Key Identifier:
                keyid:2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133342e302f32342d3234203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:50:18:d3:23:b0:37:29:c4:87:ef:11:3f:08:53:81:c0:27:
         89:8d:ed:b8:b1:52:c4:9c:51:a3:27:dd:23:50:e7:4e:47:1f:
         f9:40:b9:22:d8:61:76:37:d5:70:aa:56:25:21:03:05:79:e7:
         df:f8:3e:8a:b5:9e:a9:42:27:3f:61:24:fb:ec:61:e2:77:0d:
         e8:f0:d7:b7:62:98:98:2c:25:3e:f6:2a:8d:02:18:40:2b:c9:
         47:2f:01:ce:ed:3e:0b:30:ea:a9:76:2f:15:82:d1:55:5c:ee:
         d2:0d:3d:34:6e:20:1a:9a:72:66:45:0c:8e:cc:5f:b0:db:5b:
         c6:e5:05:09:3d:c7:94:c5:7d:74:0c:d4:d8:43:d0:e7:7a:c6:
         49:53:81:50:67:3e:ed:90:11:41:18:91:7b:76:be:53:6f:46:
         1a:94:b4:42:9e:9f:16:ad:84:e2:c8:fd:b5:fc:80:b3:38:59:
         0a:9b:46:6e:fd:1a:e4:51:07:33:73:60:c9:dd:f2:44:f1:d2:
         9e:d7:bc:ad:4d:10:91:8e:af:a4:35:78:44:56:c9:32:d8:38:
         7f:60:98:cd:37:2f:3e:d2:29:67:d9:d1:04:48:92:80:9e:a9:
         d4:d5:66:a6:22:66:59:81:c3:7b:11:29:34:c5:7e:96:fc:bc:
         36:1e:a8:51
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUH2H6mvWGb1+N0TS1RIyAWqTjORAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU4ODg2RjlEM0MzQjlFMDM1M0RCN0M3MkQxODRDN0RD
NTAyNjVGQzAeFw0yNDA1MDkxMjQ3MzlaFw0yNTA1MDgxMjUyMzlaMDMxMTAvBgNV
BAMTKDVGM0QxMDg3NjkwMjE4MEEyNkI1OTgwNkVFRkQ3REY3RjE3QUQwNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo3uh1uS7Ur2NeqV2vrN6OQJtR
X+AnVDQ7+XL5zwBZnOtSUwHTPupozs8SPSmg8Ri1eVuGPe+6TD6UD/z7OBq1rCn2
PiG1hWqZxvXyZ/tuX7JkVNoUNs4nZgyxgHyHYh4KhHiizDanp3LAAp1+Weqq/POP
XFMgwt9YyF61M5KqBBW0u/e4eYJGGTu+NHDTO/VkiHKSnLiAO3dc4+03bItjhXOt
7AZkLHk8kZ72QsuYFpwR5TiNxloUppHEvYYxTNeXSZmdDAQTIyKeOfZY+gIN6XTC
DFp8zSwbplqvDu4ioN5ABKCy9SAkhS4Le7rTtq8jexm64CCdCdj/PBMVUXDxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXz0Qh2kCGAomtZgG7v199/F60FUwHwYDVR0j
BBgwFoAULoiG+dPDueA1PbfHLRhMfcUCZfwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG5xUFpMcUM1YzFRUVJNN2RjbVdBVkR6Sm55aWZzQ0EycGVwOEdDZnA4
VlYvMC8yRTg4ODZGOUQzQzNCOUUwMzUzREI3QzcyRDE4NEM3REM1MDI2NUZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFODg4NkY5RDNDM0I5RTAz
NTNEQjdDNzJEMTg0QzdEQzUwMjY1RkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hucVBaTHFDNWMxUVFSTTdkY21XQVZEekpueWlmc0NBMnBlcDhHQ2ZwOFZWLzAv
MzEzNzM5MmUzNDMyMmUzMTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzKoYwDQYJKoZIhvcNAQELBQADggEBADBQGNMj
sDcpxIfvET8IU4HAJ4mN7bixUsScUaMn3SNQ505HH/lAuSLYYXY31XCqViUhAwV5
59/4Poq1nqlCJz9hJPvsYeJ3Dejw17dimJgsJT72Ko0CGEAryUcvAc7tPgsw6ql2
LxWC0VVc7tINPTRuIBqacmZFDI7MX7DbW8blBQk9x5TFfXQM1NhD0Od6xklTgVBn
Pu2QEUEYkXt2vlNvRhqUtEKenxathOLI/bX8gLM4WQqbRm79GuRRBzNzYMnd8kTx
0p7XvK1NEJGOr6Q1eERWyTLYOH9gmM03Lz7SKWfZ0QRIkoCeqdTVZqYiZlmBw3sR
KTTFfpb8vDYeqFE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org