Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32322d3234203d3e20323633303837.roa
File:                     3137392e3130392e3136302e302f32322d3234203d3e20323633303837.roa (raw, json)
Hash identifier:          5oddN4YhBwuq4ZYAjdxsb5uPD+oY9HZIJ5kn9UFspqk=
Subject key identifier:   02:8D:0B:83:20:28:F1:DF:D5:4D:E7:80:C5:B9:9A:24:F8:F4:EC:2C
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       5733FD958D6E92EEEE120E1F4A7FD4BD01FD748C
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32322d3234203d3e20323633303837.roa
Signing time:             Wed 22 May 2024 17:36:17 +0000
ROA not before:           Wed 22 May 2024 17:31:17 +0000
ROA not after:            Wed 21 May 2025 17:36:17 +0000
asID:                     263087
IP address blocks:        179.109.160.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:33:fd:95:8d:6e:92:ee:ee:12:0e:1f:4a:7f:d4:bd:01:fd:74:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: May 22 17:31:17 2024 GMT
            Not After : May 21 17:36:17 2025 GMT
        Subject: CN=028D0B832028F1DFD54DE780C5B99A24F8F4EC2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:74:a4:94:73:2f:c3:5f:1f:a3:af:21:08:96:
                    6f:8b:88:55:8b:21:5d:54:62:a2:d0:d1:4b:d8:01:
                    71:c3:0c:eb:74:e2:6f:36:45:dd:32:dc:ad:f8:7c:
                    08:50:d0:1a:89:6b:87:d0:c9:ca:1e:37:a6:90:ca:
                    04:0f:ca:87:10:93:b3:b1:d3:c7:a9:91:82:ac:28:
                    ce:f9:58:2e:4a:fb:2b:25:0e:c4:bb:e5:10:e5:3c:
                    a7:7f:ca:a3:3e:a0:21:40:f6:e3:20:2a:a1:3a:3b:
                    46:91:5a:3f:d2:f2:fc:4b:82:fa:dd:27:b4:e7:a5:
                    b2:43:88:3c:d0:90:dc:8e:4d:34:e6:3c:46:fb:78:
                    95:6e:7c:29:0b:75:b4:09:54:f5:7c:0e:20:f0:92:
                    fa:d7:d7:bf:93:48:c1:9a:d2:ce:46:5d:aa:60:0a:
                    74:56:cc:9c:51:a5:e4:3b:d4:36:99:2a:3c:07:f9:
                    2e:7c:1e:b3:b4:6d:94:ed:f0:2a:2d:fc:06:6a:f4:
                    6c:8b:eb:4c:0c:66:a6:fa:1a:5f:21:a1:e3:eb:04:
                    43:96:83:ba:c2:43:1c:53:3a:9d:6a:9f:18:73:a2:
                    ff:4c:36:e5:bc:b7:e3:a4:e0:e8:7a:1c:09:05:2a:
                    41:9b:48:60:20:b8:92:e8:6a:a6:cd:41:d6:a5:77:
                    e0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8D:0B:83:20:28:F1:DF:D5:4D:E7:80:C5:B9:9A:24:F8:F4:EC:2C
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32322d3234203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:a8:6f:55:ad:0e:48:b0:d7:84:de:a4:03:a9:12:64:bf:13:
         57:ef:89:6a:81:70:d7:1a:8e:cb:9c:27:fe:3b:6b:8c:e8:72:
         80:5b:ae:25:54:be:f1:39:ac:2c:29:9c:07:77:38:08:eb:2d:
         8b:72:aa:db:d3:b6:96:0c:4d:46:ec:5b:e1:00:47:1a:57:eb:
         9e:df:98:0c:36:33:d1:14:c1:26:c0:68:09:56:a7:71:d1:e8:
         bb:dd:29:b9:82:d5:e1:7e:c7:b1:d4:37:22:76:61:f2:cc:ba:
         a7:66:c8:55:97:57:be:0b:5d:fc:5e:e2:79:90:52:3a:16:25:
         92:65:c0:0c:72:9d:4a:ad:26:38:c0:1b:58:00:e8:17:66:cf:
         80:25:29:ce:9e:57:ae:f8:f4:95:ea:07:fd:c9:e5:26:5c:d4:
         d3:1d:f3:c5:83:56:d0:f1:80:48:9b:ff:d6:f6:c1:b6:92:5b:
         ea:47:17:c7:09:61:4f:9e:b1:ac:f9:2f:d5:76:93:48:67:44:
         7d:4d:23:50:72:71:78:2c:56:6b:e1:1c:18:8c:ce:0a:8b:11:
         cf:2e:f1:5b:45:78:5c:57:07:1a:80:cb:db:df:ae:66:99:2a:
         af:87:d6:6f:28:cc:d1:61:29:35:4d:73:b1:c9:16:f9:4c:87:
         94:6f:77:26
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVzP9lY1uku7uEg4fSn/UvQH9dIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB
MzY0M0Y5NDAeFw0yNDA1MjIxNzMxMTdaFw0yNTA1MjExNzM2MTdaMDMxMTAvBgNV
BAMTKDAyOEQwQjgzMjAyOEYxREZENTRERTc4MEM1Qjk5QTI0RjhGNEVDMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdKSUcy/DXx+jryEIlm+LiFWL
IV1UYqLQ0UvYAXHDDOt04m82Rd0y3K34fAhQ0BqJa4fQycoeN6aQygQPyocQk7Ox
08epkYKsKM75WC5K+yslDsS75RDlPKd/yqM+oCFA9uMgKqE6O0aRWj/S8vxLgvrd
J7TnpbJDiDzQkNyOTTTmPEb7eJVufCkLdbQJVPV8DiDwkvrX17+TSMGa0s5GXapg
CnRWzJxRpeQ71DaZKjwH+S58HrO0bZTt8Cot/AZq9GyL60wMZqb6Gl8hoePrBEOW
g7rCQxxTOp1qnxhzov9MNuW8t+Ok4Oh6HAkFKkGbSGAguJLoaqbNQdald+BVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAo0LgyAo8d/VTeeAxbmaJPj07CwwHwYDVR0j
BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C
LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF
QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9L
RmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1CLzAvMzEz
NzM5MmUzMTMwMzkyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
MzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEArNtoDANBgkqhkiG9w0BAQsFAAOCAQEAo6hvVa0O
SLDXhN6kA6kSZL8TV++JaoFw1xqOy5wn/jtrjOhygFuuJVS+8TmsLCmcB3c4COst
i3Kq29O2lgxNRuxb4QBHGlfrnt+YDDYz0RTBJsBoCVancdHou90puYLV4X7HsdQ3
InZh8sy6p2bIVZdXvgtd/F7ieZBSOhYlkmXADHKdSq0mOMAbWADoF2bPgCUpzp5X
rvj0leoH/cnlJlzU0x3zxYNW0PGASJv/1vbBtpJb6kcXxwlhT56xrPkv1XaTSGdE
fU0jUHJxeCxWa+EcGIzOCosRzy7xW0V4XFcHGoDL29+uZpkqr4fWbyjM0WEpNU1z
sckW+UyHlG93Jg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org