Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/3230302e32342e3130382e302f32342d3234203d3e20323731363131.roa
File:                     3230302e32342e3130382e302f32342d3234203d3e20323731363131.roa (raw, json)
Hash identifier:          NWqlcmP9/8GJn7rO9v+wuZXbOxNZHiR9m2v+1nEYVXo=
Subject key identifier:   34:73:20:1E:A6:88:61:02:D9:F6:1B:A6:AB:31:A5:C9:E3:19:97:A1
Certificate issuer:       /CN=D6BFBE91A9C1216A37227717AD547135C4C3280E
Certificate serial:       26F7E915CCC21DFC74FBFB570B86B7A824AC1BA8
Authority key identifier: D6:BF:BE:91:A9:C1:21:6A:37:22:77:17:AD:54:71:35:C4:C3:28:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/3230302e32342e3130382e302f32342d3234203d3e20323731363131.roa
Signing time:             Wed 24 Apr 2024 18:16:20 +0000
ROA not before:           Wed 24 Apr 2024 18:11:20 +0000
ROA not after:            Wed 23 Apr 2025 18:16:20 +0000
asID:                     271611
IP address blocks:        200.24.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f7:e9:15:cc:c2:1d:fc:74:fb:fb:57:0b:86:b7:a8:24:ac:1b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BFBE91A9C1216A37227717AD547135C4C3280E
        Validity
            Not Before: Apr 24 18:11:20 2024 GMT
            Not After : Apr 23 18:16:20 2025 GMT
        Subject: CN=3473201EA6886102D9F61BA6AB31A5C9E31997A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:f8:f0:c9:6d:e5:a4:f4:ba:c0:19:8f:f7:
                    71:16:73:9e:45:98:78:f4:6e:15:4c:91:79:0c:41:
                    dc:a9:32:f4:4b:a7:7e:53:09:e0:b1:71:f0:f6:9c:
                    ae:fc:02:9f:2b:12:9c:98:9f:1e:eb:86:a4:3e:72:
                    5c:2e:f0:c1:25:d9:7e:0e:ce:f4:10:c9:64:06:68:
                    0d:9b:73:e4:5c:a2:d7:e2:d8:35:89:8b:f2:9d:6b:
                    5e:cd:5e:64:50:93:b6:e0:5e:f3:12:09:5a:f8:18:
                    ff:66:cb:4a:40:c6:14:d6:29:e4:3c:72:15:42:87:
                    1a:28:1f:bf:30:c3:f7:6b:1e:bf:c2:0e:82:f9:ac:
                    85:6c:2f:23:1c:da:94:cc:1e:f6:00:84:f8:13:1e:
                    8a:5b:2f:bf:d2:75:7e:33:40:2f:54:3f:37:cb:1f:
                    b8:4b:22:d4:18:b3:b1:6a:51:ba:8b:c8:a9:87:cc:
                    4d:84:15:e5:9d:02:d5:66:a3:55:4f:d6:27:8a:fd:
                    48:e4:ee:fb:d7:db:f2:2e:87:b6:84:34:8e:c1:5c:
                    33:8f:ee:af:d2:43:90:a1:3c:35:13:c4:5f:e9:48:
                    fd:a0:b3:0e:d0:ba:4e:35:89:97:d1:17:d0:17:b5:
                    92:60:32:25:5b:c4:b0:4d:64:ba:cd:1f:e6:d0:49:
                    3e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:73:20:1E:A6:88:61:02:D9:F6:1B:A6:AB:31:A5:C9:E3:19:97:A1
            X509v3 Authority Key Identifier:
                keyid:D6:BF:BE:91:A9:C1:21:6A:37:22:77:17:AD:54:71:35:C4:C3:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/3230302e32342e3130382e302f32342d3234203d3e20323731363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:79:5f:dd:55:cf:5e:11:65:1f:d0:a1:d6:19:ad:ef:fe:63:
         bf:19:aa:b3:d0:c6:dc:cf:f5:6f:5d:d5:07:c0:2b:38:db:d6:
         bc:72:06:a2:56:dd:74:2d:4f:88:59:53:4e:d7:4d:c4:e1:74:
         1e:0d:7b:8b:99:0e:6d:b5:07:78:91:ae:7d:66:e0:13:cf:60:
         3c:37:37:bf:81:e9:32:a0:2f:a1:b5:8d:19:1f:3c:0a:25:4e:
         2f:77:64:7a:e1:09:de:32:86:3e:b0:de:88:28:e5:7d:37:75:
         47:21:f8:5b:d3:0e:3b:43:2a:f3:f6:7b:7c:87:77:d1:d4:8f:
         90:cf:03:82:03:c4:4b:0d:b4:de:24:c0:24:8d:31:91:9c:a3:
         6b:dc:e8:3d:81:80:44:93:a8:4a:8c:24:01:f5:a6:a2:48:d4:
         83:18:1f:89:2e:48:a7:b5:97:ea:68:87:f3:45:e9:5a:ee:64:
         35:8c:72:74:46:3f:01:eb:3f:45:d1:d0:2c:ba:cb:51:f2:d3:
         05:79:4d:95:f7:28:f4:da:b5:11:39:dd:9e:3a:23:88:39:74:
         89:8a:d7:22:f6:c2:d1:f2:35:0c:b7:56:4e:85:7c:1d:d1:94:
         04:74:6c:21:42:b5:12:90:4e:00:af:9d:5a:59:38:e2:55:c7:
         0b:84:36:9d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJvfpFczCHfx0+/tXC4a3qCSsG6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZCRkJFOTFBOUMxMjE2QTM3MjI3NzE3QUQ1NDcxMzVD
NEMzMjgwRTAeFw0yNDA0MjQxODExMjBaFw0yNTA0MjMxODE2MjBaMDMxMTAvBgNV
BAMTKDM0NzMyMDFFQTY4ODYxMDJEOUY2MUJBNkFCMzFBNUM5RTMxOTk3QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71PjwyW3lpPS6wBmP93EWc55F
mHj0bhVMkXkMQdypMvRLp35TCeCxcfD2nK78Ap8rEpyYnx7rhqQ+clwu8MEl2X4O
zvQQyWQGaA2bc+Rcotfi2DWJi/Kda17NXmRQk7bgXvMSCVr4GP9my0pAxhTWKeQ8
chVChxooH78ww/drHr/CDoL5rIVsLyMc2pTMHvYAhPgTHopbL7/SdX4zQC9UPzfL
H7hLItQYs7FqUbqLyKmHzE2EFeWdAtVmo1VP1ieK/Ujk7vvX2/Iuh7aENI7BXDOP
7q/SQ5ChPDUTxF/pSP2gsw7Quk41iZfRF9AXtZJgMiVbxLBNZLrNH+bQST6xAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNHMgHqaIYQLZ9humqzGlyeMZl6EwHwYDVR0j
BBgwFoAU1r++kanBIWo3IncXrVRxNcTDKA4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9ZdU5HVkMzblF3VGFSRVVBeHVRa2poTWtzU1NiVHVzcmI0QzVlallN
SlQvMC9ENkJGQkU5MUE5QzEyMTZBMzcyMjc3MTdBRDU0NzEzNUM0QzMyODBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2QkZCRTkxQTlDMTIxNkEz
NzIyNzcxN0FENTQ3MTM1QzRDMzI4MEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvWXVOR1ZDM25Rd1RhUkVVQXh1UWtqaE1rc1NTYlR1c3JiNEM1ZWpZTUpULzAv
MzIzMDMwMmUzMjM0MmUzMTMwMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIGGwwDQYJKoZIhvcNAQELBQADggEBAFd5X91V
z14RZR/QodYZre/+Y78ZqrPQxtzP9W9d1QfAKzjb1rxyBqJW3XQtT4hZU07XTcTh
dB4Ne4uZDm21B3iRrn1m4BPPYDw3N7+B6TKgL6G1jRkfPAolTi93ZHrhCd4yhj6w
3ogo5X03dUch+FvTDjtDKvP2e3yHd9HUj5DPA4IDxEsNtN4kwCSNMZGco2vc6D2B
gESTqEqMJAH1pqJI1IMYH4kuSKe1l+poh/NF6VruZDWMcnRGPwHrP0XR0Cy6y1Hy
0wV5TZX3KPTatRE53Z46I4g5dImK1yL2wtHyNQy3Vk6FfB3RlAR0bCFCtRKQTgCv
nVpZOOJVxwuENp0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org