Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136342e302f32332d3234203d3e20323633303837.roa
File:                     3137392e3130392e3136342e302f32332d3234203d3e20323633303837.roa (raw, json)
Hash identifier:          qbiZN5jbEbNIo52/ESYQncIQY7n1YVhh876agTf2l8w=
Subject key identifier:   5A:6A:82:CE:91:4D:7A:9E:35:AD:B7:28:C7:2C:1E:81:62:69:07:CB
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       11E32E46A0A043BFE0955105020A5B14EA93BFFE
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136342e302f32332d3234203d3e20323633303837.roa
Signing time:             Wed 22 May 2024 17:37:00 +0000
ROA not before:           Wed 22 May 2024 17:32:00 +0000
ROA not after:            Wed 21 May 2025 17:37:00 +0000
asID:                     263087
IP address blocks:        179.109.164.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e3:2e:46:a0:a0:43:bf:e0:95:51:05:02:0a:5b:14:ea:93:bf:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: May 22 17:32:00 2024 GMT
            Not After : May 21 17:37:00 2025 GMT
        Subject: CN=5A6A82CE914D7A9E35ADB728C72C1E81626907CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:c0:e7:27:9d:9c:0c:4e:00:ef:fa:70:46:
                    75:87:67:1a:59:25:53:ec:d3:d8:aa:2d:ce:72:80:
                    b1:52:45:0c:ca:ef:54:1b:82:a8:6a:e8:cd:02:75:
                    7a:d9:de:04:c7:e8:e1:ae:98:af:e4:2b:f2:87:05:
                    8c:66:61:4f:59:8e:0b:20:73:99:b3:88:97:1a:12:
                    b3:f5:e5:e1:28:62:48:42:4c:e8:85:52:86:19:96:
                    34:51:e2:ae:c2:bd:49:cb:02:01:38:a0:f2:10:3d:
                    4a:b0:ad:ff:a1:9a:ea:77:cb:e5:4b:1f:a6:aa:f6:
                    9a:f6:f7:dc:1a:94:90:c9:06:69:6d:2a:c5:4b:83:
                    29:23:1f:e9:fd:73:96:64:31:46:8b:24:cd:2b:6d:
                    56:b6:d1:eb:d4:89:00:5f:c5:02:cd:0b:ab:d9:c5:
                    51:bb:4d:7c:31:77:16:00:2c:e8:68:7b:1a:70:6b:
                    b6:a1:e6:c3:5e:ef:8d:4c:9f:8b:60:b2:01:6b:65:
                    f7:c3:7d:81:cc:67:78:1a:3c:6f:db:cd:26:85:af:
                    00:84:20:ef:88:ba:e2:f4:a0:14:15:c6:ad:02:5b:
                    71:0d:68:d4:67:36:bc:26:ac:f0:05:2f:f6:6e:ab:
                    dd:3d:58:e8:2f:fb:95:1f:25:df:e3:c9:27:d1:7a:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6A:82:CE:91:4D:7A:9E:35:AD:B7:28:C7:2C:1E:81:62:69:07:CB
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136342e302f32332d3234203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:37:46:92:2d:1b:19:71:e0:8f:66:09:62:1e:d0:68:2a:58:
         ab:8a:bf:32:eb:31:8b:49:eb:b0:9b:38:3c:7b:52:d4:83:8e:
         f5:53:be:90:44:22:32:77:04:da:c9:96:7d:c5:3f:3b:1a:70:
         d8:d4:ed:8a:6b:b6:83:4e:db:62:81:44:02:89:5e:6a:15:c7:
         66:40:69:1c:6b:0a:d4:a5:f4:60:58:02:ce:23:a9:1f:c0:30:
         4c:b0:ff:8a:88:cd:6b:3e:81:09:39:09:c5:fb:b4:08:f5:ce:
         35:d5:4e:b3:4a:2d:bf:4e:cb:56:25:6c:89:f1:18:c0:62:2e:
         a3:f1:5f:1f:7b:9f:c5:38:78:b7:25:ef:5e:4e:7c:18:b1:77:
         de:19:2a:03:a7:f4:b9:ff:71:92:a6:32:c0:e7:7f:cb:1a:dc:
         4b:93:be:c7:ae:2b:81:c6:8e:cc:d4:bf:5d:83:ac:4a:10:ab:
         50:b2:6a:8d:60:2b:d4:5c:bb:2b:91:41:45:ba:10:37:c9:fc:
         fe:66:37:8e:7e:8f:b2:09:ef:02:90:27:58:86:b6:4c:ee:44:
         ee:5b:b3:3e:e3:6e:a0:71:7d:17:7c:1b:8e:0b:cf:2d:fc:87:
         10:c0:23:17:e3:63:60:f2:bf:e1:c2:22:e1:a1:3f:93:ff:77:
         a0:a4:55:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org