Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/3230302e32342e3130382e302f32322d3232203d3e20323731363131.roa
File:                     3230302e32342e3130382e302f32322d3232203d3e20323731363131.roa (raw, json)
Hash identifier:          S+sDexqINO9OcA43kWFfM0waLJscdTxo0gEFwYo2z7E=
Subject key identifier:   E3:0C:44:E4:BA:17:0F:FA:50:6A:B6:A0:5C:BA:D2:A1:0E:99:F8:B0
Certificate issuer:       /CN=D6BFBE91A9C1216A37227717AD547135C4C3280E
Certificate serial:       E173A52EB1E202A59B4532DD6E400D7C924056
Authority key identifier: D6:BF:BE:91:A9:C1:21:6A:37:22:77:17:AD:54:71:35:C4:C3:28:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/3230302e32342e3130382e302f32322d3232203d3e20323731363131.roa
Signing time:             Wed 24 Apr 2024 18:16:09 +0000
ROA not before:           Wed 24 Apr 2024 18:11:09 +0000
ROA not after:            Wed 23 Apr 2025 18:16:09 +0000
asID:                     271611
IP address blocks:        200.24.108.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e1:73:a5:2e:b1:e2:02:a5:9b:45:32:dd:6e:40:0d:7c:92:40:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BFBE91A9C1216A37227717AD547135C4C3280E
        Validity
            Not Before: Apr 24 18:11:09 2024 GMT
            Not After : Apr 23 18:16:09 2025 GMT
        Subject: CN=E30C44E4BA170FFA506AB6A05CBAD2A10E99F8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:33:14:40:47:5d:d7:ca:46:03:64:17:6a:f4:
                    bd:be:3a:e3:34:87:74:7b:07:8a:d7:1b:c8:48:00:
                    7a:a5:f3:79:83:18:29:3a:91:84:6c:f8:9c:54:a5:
                    ef:71:1e:7d:fb:60:67:c2:21:07:ba:ee:ed:e6:5b:
                    b9:51:b5:b7:20:76:d1:93:86:06:e6:d8:ff:d6:7d:
                    32:d3:02:65:99:35:4f:47:0e:16:05:69:79:33:61:
                    8d:e8:74:4f:10:3b:76:8f:cc:42:bb:50:75:75:94:
                    ff:c1:bd:d8:2e:8c:25:da:c6:a0:e7:66:e9:23:54:
                    8d:a6:da:d8:2c:2c:11:23:fc:71:21:26:36:e1:04:
                    65:f4:8f:9e:30:cf:3b:fc:34:4b:5b:7e:f3:89:d8:
                    39:4c:e9:b3:89:81:e4:a8:85:c7:eb:89:b1:d4:db:
                    59:90:9e:1a:63:3b:b5:5b:d9:bd:cf:5e:4d:de:1a:
                    d8:6d:2f:f8:2b:a4:bf:8a:27:23:32:ba:90:22:38:
                    f7:60:bd:15:91:9a:6d:6a:dc:83:b4:7b:47:45:78:
                    da:6a:cc:a4:8f:ae:2d:02:14:b7:0d:f3:c2:a5:4b:
                    a4:82:95:0b:8d:24:d0:ed:65:61:98:d8:53:2c:ec:
                    4e:5f:d6:0b:01:77:31:57:b0:25:33:2f:53:76:af:
                    b5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0C:44:E4:BA:17:0F:FA:50:6A:B6:A0:5C:BA:D2:A1:0E:99:F8:B0
            X509v3 Authority Key Identifier:
                keyid:D6:BF:BE:91:A9:C1:21:6A:37:22:77:17:AD:54:71:35:C4:C3:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/3230302e32342e3130382e302f32322d3232203d3e20323731363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:72:4d:1c:29:02:8e:43:9b:a9:fc:5d:44:03:65:67:fb:75:
         81:a4:4e:3e:c7:50:c7:09:94:ad:88:3b:2d:ff:90:b1:b0:c0:
         62:5a:77:51:09:b7:98:13:6f:ea:ef:ea:5a:a8:4a:b0:75:28:
         7f:2c:8f:a7:a0:34:c7:53:d8:d5:fc:aa:8f:53:82:07:6c:3f:
         07:29:b8:0b:ea:12:06:95:dc:7b:ff:16:2a:07:d6:8f:9f:cb:
         1a:a0:1b:1e:db:c7:df:cc:c9:d0:47:f5:7b:68:d4:95:3c:4e:
         7d:16:da:77:51:38:d0:7c:32:f6:39:e9:61:8e:ec:dc:15:a5:
         c2:88:6b:e2:a7:c7:59:df:a7:a5:4a:7b:7d:60:34:6a:17:8c:
         b1:c0:42:ae:02:d6:9d:cc:44:54:1a:60:0f:eb:99:05:cd:94:
         23:ea:5f:ac:1d:04:86:d7:da:ec:cd:d2:7f:23:a5:82:39:46:
         b8:b0:c4:f3:a8:3c:82:9a:a4:0e:f0:8d:31:b1:6c:71:aa:fd:
         71:6a:10:53:7b:96:14:5f:c1:55:e6:09:75:01:ec:ac:28:c7:
         2b:b7:ff:cd:ba:f4:78:db:f2:a9:a4:9d:25:5b:2a:47:64:94:
         b3:23:8e:c9:85:7d:87:c2:1e:41:75:9a:8a:05:76:bb:f9:53:
         a9:3c:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org