Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133352e302f32342d3234203d3e20323731313636.roa
File:                     3137392e34322e3133352e302f32342d3234203d3e20323731313636.roa (raw, json)
Hash identifier:          /EyesR1i66+pjZm9rtof7iBWkHInGA79Ffo4ETM//F0=
Subject key identifier:   4C:5A:EA:77:76:49:53:16:2B:74:23:60:19:4A:8E:20:72:44:FB:D9
Certificate issuer:       /CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
Certificate serial:       59EAD3755CC150F3B3EDA1ABB910EF5AA6199E15
Authority key identifier: 2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133352e302f32342d3234203d3e20323731313636.roa
Signing time:             Thu 09 May 2024 12:52:42 +0000
ROA not before:           Thu 09 May 2024 12:47:42 +0000
ROA not after:            Thu 08 May 2025 12:52:42 +0000
asID:                     271166
IP address blocks:        179.42.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ea:d3:75:5c:c1:50:f3:b3:ed:a1:ab:b9:10:ef:5a:a6:19:9e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
        Validity
            Not Before: May  9 12:47:42 2024 GMT
            Not After : May  8 12:52:42 2025 GMT
        Subject: CN=4C5AEA77764953162B742360194A8E207244FBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:96:82:39:ea:a8:05:3e:92:9c:e8:33:df:
                    e6:bd:85:86:9c:f1:8d:a2:7d:34:2a:28:89:05:df:
                    0d:db:57:0c:89:92:8a:fd:72:e9:f4:de:af:99:b0:
                    fa:fa:2e:24:b0:80:d2:a7:95:65:1d:a9:cc:18:7f:
                    e9:3a:91:11:ac:dc:89:16:31:6c:f4:e4:24:7e:8d:
                    a6:46:0e:b1:e5:aa:da:28:91:7b:e4:9f:51:b0:17:
                    64:0f:44:11:51:63:42:6e:ce:51:ab:71:69:4c:bc:
                    1d:2c:c4:6e:d6:c8:30:a1:fc:a2:0f:33:8a:92:4d:
                    9d:7b:85:4b:91:e1:8d:ad:1b:41:fa:d2:f9:0c:84:
                    e3:2e:9a:fc:1f:94:16:16:62:9e:79:d6:19:d9:a3:
                    cb:a3:65:ae:2e:9d:f4:c6:8f:15:5b:07:50:08:1d:
                    e6:e5:ac:46:56:1e:a5:75:12:3b:d3:aa:ce:9c:56:
                    a4:c9:0f:05:3c:6d:d3:49:6b:81:3d:0f:87:a1:77:
                    70:ab:94:73:89:14:27:e9:2b:a8:ff:6a:62:16:b3:
                    a5:b9:8a:20:d9:24:68:cf:43:86:34:c7:f5:5a:2b:
                    af:18:2b:71:85:31:03:10:29:5f:08:db:4e:ed:cd:
                    7f:98:a7:53:4c:fe:b6:11:d3:29:9c:a4:4b:0b:a3:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5A:EA:77:76:49:53:16:2B:74:23:60:19:4A:8E:20:72:44:FB:D9
            X509v3 Authority Key Identifier:
                keyid:2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133352e302f32342d3234203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:3d:61:f5:61:48:40:3d:93:08:bc:93:dc:e5:d2:19:02:fa:
         69:6f:79:dc:89:7e:b4:de:b7:20:a5:5f:f7:15:fb:18:96:af:
         52:26:d1:8b:4f:84:fe:16:5f:ca:fd:c3:6a:a2:e9:d8:65:d0:
         95:35:bc:c6:01:ee:bd:2a:04:22:b4:b1:49:05:d0:b3:0a:8e:
         cc:ae:cb:5f:85:2b:67:e8:26:7e:5d:e7:20:fc:f0:30:3c:60:
         26:48:fc:48:d1:07:d1:a6:5b:6f:c8:72:2b:6a:05:dd:b4:1f:
         cf:2c:39:29:10:ed:0c:5b:b0:62:67:e7:50:fd:e5:e3:50:91:
         96:8d:da:af:72:47:ef:d7:3c:51:f9:9a:76:35:f0:74:ec:1a:
         e1:ba:0e:50:95:15:ae:0a:8a:b1:5b:85:73:ba:ac:74:82:a9:
         7f:5c:c8:56:e2:3d:90:bb:f0:44:b6:12:f7:18:09:68:37:05:
         27:11:24:82:54:15:3b:29:ea:77:af:cf:61:d1:2f:21:f2:11:
         18:23:2d:ee:14:96:6d:ac:4e:01:c5:ca:fe:73:e8:c2:77:14:
         29:62:d0:24:e7:0d:9d:29:e9:4d:a4:a4:c8:1f:a4:28:92:e8:
         42:2c:d0:35:9b:e9:5a:7a:9c:35:a8:4e:72:ca:14:4a:99:fb:
         06:42:8b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org