Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32322d3233203d3e20323733343132.roa
File:                     3230302e3139362e34302e302f32322d3233203d3e20323733343132.roa (raw, json)
Hash identifier:          51xDXp0p7E2qy4neTBJjG08kZifc6GS6KdlVNYqtR50=
Subject key identifier:   1F:8A:7A:10:E9:AA:94:B2:53:E1:57:7E:76:F6:DC:5E:1F:5D:B3:E6
Certificate issuer:       /CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Certificate serial:       3947F920ED4E1735EB722AE9282F6ECD57CB093D
Authority key identifier: CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32322d3233203d3e20323733343132.roa
Signing time:             Wed 17 Jan 2024 12:25:03 +0000
ROA not before:           Wed 17 Jan 2024 12:20:03 +0000
ROA not after:            Wed 15 Jan 2025 12:25:03 +0000
asID:                     273412
IP address blocks:        200.196.40.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Fri 19 Jan 2024 00:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:47:f9:20:ed:4e:17:35:eb:72:2a:e9:28:2f:6e:cd:57:cb:09:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
        Validity
            Not Before: Jan 17 12:20:03 2024 GMT
            Not After : Jan 15 12:25:03 2025 GMT
        Subject: CN=1F8A7A10E9AA94B253E1577E76F6DC5E1F5DB3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:1e:ce:a7:4c:c8:8a:db:a3:eb:26:12:64:
                    79:6b:c9:77:e4:9a:ef:24:f7:82:c4:f5:cf:35:6b:
                    e4:dc:27:42:a7:0d:57:79:ef:77:f6:b5:3d:2f:d4:
                    ed:2e:58:3d:b4:bd:3c:ba:5f:55:87:61:42:69:ca:
                    bf:7a:db:e6:e6:98:a9:f5:e9:b5:44:1d:bc:4e:2e:
                    c1:c8:c4:c1:e2:34:5b:27:6f:ea:20:b0:cc:6e:75:
                    35:13:ff:37:c9:54:19:a4:79:b6:24:78:5f:cd:66:
                    1f:64:fe:92:d7:b3:76:6c:97:53:81:a3:17:28:22:
                    00:da:e8:3c:44:3c:ca:84:a4:33:7a:1e:ef:3c:35:
                    cf:a9:35:a8:1c:80:68:d1:c3:6a:06:69:02:fa:3b:
                    24:94:36:61:4e:81:76:1a:e0:6f:21:3c:35:34:a1:
                    78:16:e7:9d:f4:cd:69:7d:9c:14:37:8f:28:30:d8:
                    bf:42:f5:cd:72:40:9a:53:7b:5e:d8:d3:1b:f8:cf:
                    78:1f:9b:d7:52:1c:a8:82:fb:84:4c:ab:f5:b1:b1:
                    da:ba:e1:d8:0a:ed:5f:fe:a3:d6:86:b3:4e:9a:7c:
                    a1:2b:40:50:62:bb:37:39:75:43:4a:75:87:24:58:
                    74:dc:10:17:94:e6:99:0b:73:3a:f9:81:fe:53:39:
                    fd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8A:7A:10:E9:AA:94:B2:53:E1:57:7E:76:F6:DC:5E:1F:5D:B3:E6
            X509v3 Authority Key Identifier:
                keyid:CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32322d3233203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:94:32:42:20:0e:be:fa:fb:6b:d2:20:0d:01:f4:63:5d:4b:
         77:d8:a7:1c:8d:85:91:f3:ce:e3:81:43:eb:7c:fa:f3:f2:9e:
         5a:5c:35:73:be:d4:39:f8:40:28:03:99:59:56:f9:fc:af:8f:
         89:fd:1a:63:c4:45:58:d2:9d:c8:da:92:5d:db:de:bd:5a:82:
         08:41:21:06:18:be:d2:f1:03:23:c7:75:c3:3d:ee:00:32:d2:
         e5:53:4a:ef:e5:0f:eb:14:83:e5:1f:15:57:1a:2d:46:d5:eb:
         46:b1:b8:cf:46:cf:b3:b1:42:84:ce:8d:b8:7a:34:34:b6:e5:
         e0:7c:aa:17:1d:1b:e0:b5:71:03:6e:70:76:8d:46:2a:8a:f5:
         f9:2b:c5:f4:d2:a6:82:20:43:d5:c5:8a:b9:56:59:99:67:79:
         93:da:9f:55:a0:4e:c0:26:b2:89:77:92:d4:72:2c:3a:26:5e:
         9f:c3:49:ae:e6:73:95:1b:98:11:b0:7d:de:25:2b:f6:15:93:
         de:09:97:c1:7a:0a:f0:66:b8:44:bd:22:9d:d6:27:f8:24:0d:
         95:69:be:09:4c:97:67:81:3c:a7:e9:ef:59:ed:35:96:44:72:
         db:45:8b:ee:12:46:94:84:60:e2:48:9f:b1:a4:44:75:91:f1:
         ce:61:9a:6d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOUf5IO1OFzXrcirpKC9uzVfLCT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VGNzg0NTVERUI3QzVDQjY3QUMxQTFBNEYzRTVFRkRE
NzYwOUE1RTAeFw0yNDAxMTcxMjIwMDNaFw0yNTAxMTUxMjI1MDNaMDMxMTAvBgNV
BAMTKDFGOEE3QTEwRTlBQTk0QjI1M0UxNTc3RTc2RjZEQzVFMUY1REIzRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwh7Op0zIituj6yYSZHlryXfk
mu8k94LE9c81a+TcJ0KnDVd573f2tT0v1O0uWD20vTy6X1WHYUJpyr962+bmmKn1
6bVEHbxOLsHIxMHiNFsnb+ogsMxudTUT/zfJVBmkebYkeF/NZh9k/pLXs3Zsl1OB
oxcoIgDa6DxEPMqEpDN6Hu88Nc+pNagcgGjRw2oGaQL6OySUNmFOgXYa4G8hPDU0
oXgW5530zWl9nBQ3jygw2L9C9c1yQJpTe17Y0xv4z3gfm9dSHKiC+4RMq/Wxsdq6
4dgK7V/+o9aGs06afKErQFBiuzc5dUNKdYckWHTcEBeU5pkLczr5gf5TOf07AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUH4p6EOmqlLJT4Vd+dvbcXh9ds+YwHwYDVR0j
BBgwFoAUzveEVd63xctnrBoaTz5e/ddgml4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkI4Z0puZTd2NXcxQ3Y3dGdUZGhiak5kWUt0UjQ0YzVwcUhRM2NIQ1BW
djEvMC9DRUY3ODQ1NURFQjdDNUNCNjdBQzFBMUE0RjNFNUVGREQ3NjA5QTVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFRjc4NDU1REVCN0M1Q0I2
N0FDMUExQTRGM0U1RUZERDc2MDlBNUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCOGdKbmU3djV3MUN2N3RnVGRoYmpOZFlLdFI0NGM1cHFIUTNjSENQVnYxLzAv
MzIzMDMwMmUzMTM5MzYyZTM0MzAyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM3
MzMzNDMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIxCgwDQYJKoZIhvcNAQELBQADggEBAA+UMkIg
Dr76+2vSIA0B9GNdS3fYpxyNhZHzzuOBQ+t8+vPynlpcNXO+1Dn4QCgDmVlW+fyv
j4n9GmPERVjSncjakl3b3r1agghBIQYYvtLxAyPHdcM97gAy0uVTSu/lD+sUg+Uf
FVcaLUbV60axuM9Gz7OxQoTOjbh6NDS25eB8qhcdG+C1cQNucHaNRiqK9fkrxfTS
poIgQ9XFirlWWZlneZPan1WgTsAmsol3ktRyLDomXp/DSa7mc5UbmBGwfd4lK/YV
k94Jl8F6CvBmuES9Ip3WJ/gkDZVpvglMl2eBPKfp71ntNZZEcttFi+4SRpSEYOJI
n7GkRHWR8c5hmm0=
-----END CERTIFICATE-----
Generated at Fri Jan 19 01:49:36 2024 by rpki-client on console-ams.rpki-client.org