Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136382e302f32322d3232203d3e20323633303837.roa
File:                     3137392e3130392e3136382e302f32322d3232203d3e20323633303837.roa (raw, json)
Hash identifier:          7LXiogoaYcR2qw5ruyTwhMsG92HCGpoZs8P2qRpwIWU=
Subject key identifier:   0A:19:C1:B2:E2:4E:45:B8:80:26:4E:39:A7:6A:26:3C:13:F6:69:C1
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       0B6C2A92941B26A9C8D74B36B191C11E335478C6
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136382e302f32322d3232203d3e20323633303837.roa
Signing time:             Thu 18 Apr 2024 14:32:35 +0000
ROA not before:           Thu 18 Apr 2024 14:27:35 +0000
ROA not after:            Thu 17 Apr 2025 14:32:35 +0000
asID:                     263087
IP address blocks:        179.109.168.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 22 May 2024 17:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6c:2a:92:94:1b:26:a9:c8:d7:4b:36:b1:91:c1:1e:33:54:78:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: Apr 18 14:27:35 2024 GMT
            Not After : Apr 17 14:32:35 2025 GMT
        Subject: CN=0A19C1B2E24E45B880264E39A76A263C13F669C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:12:0d:da:d1:ba:37:d8:57:73:46:e7:26:
                    14:06:e6:0a:31:0b:1e:3a:10:f0:3b:33:2b:18:77:
                    6b:1f:5d:5f:e0:89:5d:aa:9a:26:4f:4b:a2:15:ab:
                    44:96:97:d5:62:c8:63:f7:80:64:f0:67:f5:d7:38:
                    11:14:0f:fe:43:b8:43:61:02:f6:35:c5:8b:95:ab:
                    fc:5a:cd:e1:bf:52:f7:b5:63:f6:17:3b:3a:b8:82:
                    95:46:df:9e:5e:bf:6f:8d:3d:2e:78:b4:e5:57:84:
                    a8:66:e6:8c:8a:df:85:42:cf:37:de:fb:cf:4f:fe:
                    1b:4a:45:3f:a0:04:27:fd:2b:39:14:c5:72:05:79:
                    e0:c2:b9:0c:2d:9e:cf:96:0e:58:1b:52:b5:5a:ea:
                    0c:af:e8:13:79:35:83:ea:f3:bc:cc:7d:b6:8d:56:
                    e7:ed:46:c1:9e:4c:65:84:29:04:33:56:a7:74:39:
                    87:90:86:d2:5b:81:f1:f4:6b:e2:d5:b6:8b:07:4b:
                    5b:cb:81:ea:70:3f:d0:90:ff:c0:87:7f:c6:19:4f:
                    b6:a8:89:9a:9f:a7:20:56:0e:2c:5c:f3:79:86:c0:
                    9e:ae:71:19:39:27:5a:44:5f:53:51:13:e4:8c:60:
                    6f:f5:fc:60:39:bb:3e:6f:a1:ce:02:65:8a:2f:a3:
                    f6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:19:C1:B2:E2:4E:45:B8:80:26:4E:39:A7:6A:26:3C:13:F6:69:C1
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136382e302f32322d3232203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:16:d0:0e:89:3a:9c:9d:ad:7a:3a:24:e1:71:2f:55:cd:5d:
         5a:8d:50:2f:d4:f8:60:6d:4d:00:0e:96:5d:f3:4a:98:e3:71:
         9a:62:ea:64:0f:61:6a:67:75:29:c7:59:a3:75:05:19:16:f4:
         68:3a:a4:8e:ad:72:f5:b4:46:98:73:06:3b:5b:40:9c:bd:7d:
         df:4c:e1:8d:74:94:42:6b:3a:44:bc:f2:79:5c:56:c2:90:4f:
         96:f6:44:c7:38:9d:3b:81:e7:29:64:33:c6:22:6f:c2:92:45:
         a5:09:65:92:1f:51:e7:7f:40:ad:1a:f0:16:0d:db:02:17:f7:
         1e:bf:51:59:e2:4e:c4:87:e8:cc:e6:fd:32:73:45:c4:f5:37:
         68:3a:aa:54:f0:eb:6e:8d:ba:d9:1e:bc:df:59:d9:7f:f8:3a:
         75:17:55:e5:c2:d6:5b:c5:c5:71:6e:e8:21:ce:86:b3:10:fd:
         4d:cd:8c:2b:57:ec:d4:82:f8:d5:f8:88:68:fe:5e:6c:8e:f1:
         06:73:d1:d5:bb:ab:ff:35:e3:f5:1d:5d:a5:b8:55:ab:da:25:
         65:5b:bb:e9:a8:10:28:0b:24:60:4a:d8:d5:d2:11:05:e6:8f:
         92:54:8f:13:ef:4d:b8:d7:ad:07:9f:84:20:19:0e:f4:38:d7:
         87:2f:99:6d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUC2wqkpQbJqnI10s2sZHBHjNUeMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB
MzY0M0Y5NDAeFw0yNDA0MTgxNDI3MzVaFw0yNTA0MTcxNDMyMzVaMDMxMTAvBgNV
BAMTKDBBMTlDMUIyRTI0RTQ1Qjg4MDI2NEUzOUE3NkEyNjNDMTNGNjY5QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmnxIN2tG6N9hXc0bnJhQG5gox
Cx46EPA7MysYd2sfXV/giV2qmiZPS6IVq0SWl9ViyGP3gGTwZ/XXOBEUD/5DuENh
AvY1xYuVq/xazeG/Uve1Y/YXOzq4gpVG355ev2+NPS54tOVXhKhm5oyK34VCzzfe
+89P/htKRT+gBCf9KzkUxXIFeeDCuQwtns+WDlgbUrVa6gyv6BN5NYPq87zMfbaN
VuftRsGeTGWEKQQzVqd0OYeQhtJbgfH0a+LVtosHS1vLgepwP9CQ/8CHf8YZT7ao
iZqfpyBWDixc83mGwJ6ucRk5J1pEX1NRE+SMYG/1/GA5uz5voc4CZYovo/ZZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUChnBsuJORbiAJk45p2omPBP2acEwHwYDVR0j
BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C
LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF
QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9L
RmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1CLzAvMzEz
NzM5MmUzMTMwMzkyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYz
MzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEArNtqDANBgkqhkiG9w0BAQsFAAOCAQEAwxbQDok6
nJ2tejok4XEvVc1dWo1QL9T4YG1NAA6WXfNKmONxmmLqZA9hamd1KcdZo3UFGRb0
aDqkjq1y9bRGmHMGO1tAnL1930zhjXSUQms6RLzyeVxWwpBPlvZExzidO4HnKWQz
xiJvwpJFpQllkh9R539ArRrwFg3bAhf3Hr9RWeJOxIfozOb9MnNFxPU3aDqqVPDr
bo262R6831nZf/g6dRdV5cLWW8XFcW7oIc6GsxD9Tc2MK1fs1IL41fiIaP5ebI7x
BnPR1bur/zXj9R1dpbhVq9olZVu76agQKAskYErY1dIRBeaPklSPE+9NuNetB5+E
IBkO9DjXhy+ZbQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org