Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231392e302f32342d3234203d3e20323637353430.roa
File:                     3230312e3138322e3231392e302f32342d3234203d3e20323637353430.roa (raw, json)
Hash identifier:          B0Hu9puSo3GXeSYslwEYcsTlL+thySHm0bMsjqKJKtw=
Subject key identifier:   14:9B:C6:48:84:60:F7:EA:41:A3:C7:2A:3C:07:7F:0D:42:30:7C:0F
Certificate issuer:       /CN=E066B97193F54796970FC225B48A67CD25FD8932
Certificate serial:       09EDB94AA1BBD01C760F2D6815EF9E7BAC3355D6
Authority key identifier: E0:66:B9:71:93:F5:47:96:97:0F:C2:25:B4:8A:67:CD:25:FD:89:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E066B97193F54796970FC225B48A67CD25FD8932.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231392e302f32342d3234203d3e20323637353430.roa
Signing time:             Tue 13 Aug 2024 11:19:32 +0000
ROA not before:           Tue 13 Aug 2024 11:14:32 +0000
ROA not after:            Tue 12 Aug 2025 11:19:32 +0000
asID:                     267540
IP address blocks:        201.182.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 18:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ed:b9:4a:a1:bb:d0:1c:76:0f:2d:68:15:ef:9e:7b:ac:33:55:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E066B97193F54796970FC225B48A67CD25FD8932
        Validity
            Not Before: Aug 13 11:14:32 2024 GMT
            Not After : Aug 12 11:19:32 2025 GMT
        Subject: CN=149BC6488460F7EA41A3C72A3C077F0D42307C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:46:82:cf:ec:ca:8e:dc:41:f9:ae:fe:1a:
                    86:14:9f:b7:82:53:10:70:e8:f5:bb:2f:bc:49:a0:
                    84:7d:a2:44:01:f2:e9:e8:cc:93:01:26:96:1b:b7:
                    cc:c7:69:8d:d2:d0:9e:d7:b8:42:b7:0b:47:12:24:
                    b7:5f:f5:be:c7:44:66:79:77:ce:be:be:b9:68:9f:
                    dd:c0:88:e1:db:97:a7:61:08:3f:87:73:b5:bd:79:
                    49:bf:17:c8:40:5b:5d:fd:38:6c:ac:7b:a0:03:29:
                    18:89:50:b1:27:0a:4b:05:ce:cf:6d:a0:47:c1:c8:
                    06:b7:a2:66:cd:fd:aa:82:54:f3:cc:03:45:c2:c8:
                    83:95:38:05:fa:0d:b2:81:66:4b:18:8b:2e:23:11:
                    f4:34:b4:f5:cc:5a:83:80:1a:71:60:69:5c:10:16:
                    a0:b8:8f:33:14:7f:a7:a7:31:f4:66:08:29:f5:7a:
                    f6:93:6c:4a:55:22:52:63:6f:9f:8c:92:82:2e:b4:
                    3b:e5:e3:f6:77:bb:78:39:90:45:41:a4:ef:7d:fb:
                    e3:de:d5:02:89:16:dc:8c:11:b6:2a:e4:3d:b4:67:
                    de:58:ae:ed:8c:86:51:09:8f:e2:c3:74:91:25:bd:
                    02:04:f2:12:25:14:bb:e8:fb:82:f7:57:2b:bd:68:
                    8c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9B:C6:48:84:60:F7:EA:41:A3:C7:2A:3C:07:7F:0D:42:30:7C:0F
            X509v3 Authority Key Identifier:
                keyid:E0:66:B9:71:93:F5:47:96:97:0F:C2:25:B4:8A:67:CD:25:FD:89:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/E066B97193F54796970FC225B48A67CD25FD8932.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E066B97193F54796970FC225B48A67CD25FD8932.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231392e302f32342d3234203d3e20323637353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:a6:1c:a8:cc:01:92:a8:23:33:2f:74:32:72:9f:94:18:4d:
         0e:bb:ac:4c:02:f9:a5:1e:e9:18:4a:c9:84:a2:97:62:ae:54:
         cb:d4:9a:54:09:ad:57:14:a1:3c:28:0f:5f:fb:63:da:d3:3e:
         4a:28:f4:bc:80:23:af:11:8c:65:1e:1a:7b:e3:c9:96:c8:bb:
         53:9a:49:ef:51:a2:21:0a:11:b9:84:87:ab:b2:5b:2b:51:ae:
         13:77:00:d2:a6:b2:a0:99:c6:32:84:b2:e5:33:c8:b1:87:95:
         24:9c:f3:92:52:83:ff:00:a9:85:46:2e:6f:8a:79:8c:9d:7e:
         ba:b3:5c:9f:c9:25:35:4d:f5:48:24:04:5b:1a:ed:93:a7:54:
         ec:8c:39:56:16:5a:a8:b9:40:0b:7f:f0:ad:2a:02:cc:b8:fc:
         a3:03:93:65:63:1c:f5:02:34:9b:62:9d:29:9d:38:f5:d0:e9:
         75:fd:bf:98:6c:a3:44:02:18:57:29:f2:91:d0:cd:0c:5a:be:
         b6:d5:f7:49:a6:40:26:69:00:51:e6:22:0f:51:aa:62:61:63:
         4f:c6:85:7f:aa:1b:6f:9e:13:f2:c3:52:16:04:71:77:5e:ca:
         f0:98:d3:ed:49:f7:7d:e8:b8:40:ba:2f:d7:c4:21:0b:62:2f:
         b9:c4:f6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 21:07:17 2024 by rpki-client on console-fra.rpki-client.org