Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136382e302f32322d3234203d3e20323633303837.roa
File:                     3137392e3130392e3136382e302f32322d3234203d3e20323633303837.roa (raw, json)
Hash identifier:          w/2rCf7U/XXiuBPmkcn+YdmmDGlK52dfFARNJ4StsSI=
Subject key identifier:   79:81:A4:6B:51:21:19:A9:45:52:CF:35:CA:A8:68:C5:7B:76:05:3C
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       E41D529C83BCA09EC021402711D1AFAF968187
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136382e302f32322d3234203d3e20323633303837.roa
Signing time:             Wed 22 May 2024 17:36:32 +0000
ROA not before:           Wed 22 May 2024 17:31:32 +0000
ROA not after:            Wed 21 May 2025 17:36:32 +0000
asID:                     263087
IP address blocks:        179.109.168.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e4:1d:52:9c:83:bc:a0:9e:c0:21:40:27:11:d1:af:af:96:81:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: May 22 17:31:32 2024 GMT
            Not After : May 21 17:36:32 2025 GMT
        Subject: CN=7981A46B512119A94552CF35CAA868C57B76053C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:76:e0:a5:68:a8:bc:da:5c:21:a8:ab:94:
                    5f:21:fd:48:b7:d0:59:c3:04:f9:c9:10:11:44:5a:
                    d6:a8:86:48:88:9a:53:6b:d1:4f:a9:e0:d6:80:1a:
                    61:0b:74:1b:a0:ca:b4:e2:86:3f:05:fb:69:0e:6f:
                    10:7c:c4:4f:6c:d6:3d:85:e7:a2:2d:59:bf:a9:b0:
                    0e:a0:54:dc:65:c9:bd:76:7e:88:e7:9b:ae:fc:09:
                    7d:b0:3d:f5:76:1d:60:f5:99:a3:d8:a3:ad:72:27:
                    15:a9:53:58:f3:69:8f:37:fd:f6:51:b9:bc:f6:b2:
                    60:cb:7b:ea:ee:c7:28:44:8b:b4:41:57:0e:6c:a6:
                    c9:b9:42:54:56:e3:2e:f0:7c:9c:f6:d8:d9:17:6d:
                    a5:16:4a:9b:6d:30:14:e6:ed:e6:19:fd:6d:23:8f:
                    ad:49:34:70:2c:d1:2e:bf:0c:aa:f7:c9:f3:8f:83:
                    41:2b:ec:c4:d2:e2:df:ef:4d:69:f9:88:cc:8b:e5:
                    4b:e8:64:54:6d:98:a1:ff:93:f7:ec:b0:66:ed:e5:
                    54:80:a9:64:ae:fd:54:3a:54:be:76:f5:03:23:01:
                    f6:8b:3d:a8:c7:94:4f:e2:67:70:50:04:d1:12:33:
                    db:e5:80:5c:cd:c2:8b:27:62:0a:41:19:0f:ca:e6:
                    b2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:81:A4:6B:51:21:19:A9:45:52:CF:35:CA:A8:68:C5:7B:76:05:3C
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136382e302f32322d3234203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:5e:31:23:12:5d:7e:7b:5f:04:01:dc:6c:13:8f:d7:9c:2f:
         bd:00:f2:55:d5:a3:cc:90:39:a3:10:24:3a:86:27:1d:f1:e3:
         62:d2:3d:d4:39:56:05:77:6b:55:ae:3a:fa:61:f6:36:97:63:
         ac:0a:db:ab:ef:16:ee:e3:b1:ba:68:d5:74:91:a2:e2:ba:bd:
         25:58:71:19:77:76:62:94:1b:32:e2:cd:4c:56:4a:33:ba:6c:
         91:59:a5:82:40:e1:89:2a:b5:9a:f0:04:60:52:17:15:90:48:
         b2:99:b5:e4:e8:3d:ea:4a:07:fb:89:5b:37:b9:6c:79:9e:af:
         e6:f1:8e:6c:6e:c4:55:90:f8:20:d1:2b:bd:89:ce:cb:b8:8e:
         e2:f9:bc:ad:38:c2:a7:46:ec:e0:95:b6:ac:a7:1f:21:12:c4:
         41:34:74:fd:af:14:2a:48:ea:7b:fa:b9:c5:e8:3e:3c:27:be:
         6a:e6:2b:89:a3:83:d9:72:a9:5f:3c:db:c4:7a:9a:c0:59:54:
         ff:3e:f0:6f:ba:a7:ad:78:e5:36:99:55:29:98:bf:88:18:a8:
         a7:dd:ab:d6:da:67:37:fe:88:52:ad:36:a8:39:74:39:67:46:
         c9:c7:1c:0e:a6:a4:03:2e:22:59:0e:d3:53:80:ad:d9:03:df:
         f3:6d:6f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org