Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230342e302f32322d3232203d3e20323730323533.roa
File:                     3230302e3131302e3230342e302f32322d3232203d3e20323730323533.roa (raw, json)
Hash identifier:          Vx6ZVbWTdhDqMRp76sk30U0Sh6xCkr9bUcR/5K2ZXuY=
Subject key identifier:   D6:E3:12:00:12:74:59:1A:DD:10:D7:DE:8C:A6:1E:3B:AE:48:C8:E2
Certificate issuer:       /CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
Certificate serial:       11B4BD62A89EEDCEED94771FF734863236865994
Authority key identifier: 3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230342e302f32322d3232203d3e20323730323533.roa
Signing time:             Wed 24 Apr 2024 12:37:25 +0000
ROA not before:           Wed 24 Apr 2024 12:32:25 +0000
ROA not after:            Wed 23 Apr 2025 12:37:25 +0000
asID:                     270253
IP address blocks:        200.110.204.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b4:bd:62:a8:9e:ed:ce:ed:94:77:1f:f7:34:86:32:36:86:59:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
        Validity
            Not Before: Apr 24 12:32:25 2024 GMT
            Not After : Apr 23 12:37:25 2025 GMT
        Subject: CN=D6E312001274591ADD10D7DE8CA61E3BAE48C8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:9c:1b:d2:43:2a:c1:29:6c:c1:ff:e8:b7:
                    57:16:8d:35:8e:31:9a:eb:0a:e4:d3:ff:b1:cb:31:
                    8b:33:05:3f:18:aa:d2:87:b7:f9:a5:15:cd:3f:2a:
                    8a:ab:50:f6:c0:8c:22:06:2a:e2:fc:91:da:28:c2:
                    46:5f:e4:0a:12:16:90:86:60:7a:1d:8b:4a:54:04:
                    65:70:9b:f3:35:f8:11:c3:b5:7d:fe:01:30:39:b4:
                    07:ef:9e:b7:35:e0:bc:90:c4:4f:21:af:39:a4:5f:
                    3e:38:44:dc:e0:82:4d:b9:37:3f:4e:db:a1:89:ba:
                    5d:31:27:63:c1:b5:a4:92:87:14:3f:0c:b2:4f:df:
                    86:52:7a:77:7b:76:1e:56:97:a7:91:57:05:8e:79:
                    27:1f:d0:f3:cb:3b:fb:53:92:42:1f:a8:4d:af:d3:
                    c1:cb:c6:0c:0c:bb:bf:18:e8:7c:b8:49:28:1b:1e:
                    c4:9e:8c:3f:07:60:62:ac:53:4e:f0:25:77:26:32:
                    85:93:fa:e7:e2:a1:a0:57:18:a5:7b:ad:13:00:88:
                    40:88:9d:db:1c:7b:37:81:5e:aa:5d:51:b4:20:b5:
                    ca:8c:b4:b8:dc:85:9a:ef:6a:c5:33:52:38:1f:11:
                    24:e8:6a:bd:ab:ff:32:47:b0:55:05:e9:9c:d1:41:
                    11:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E3:12:00:12:74:59:1A:DD:10:D7:DE:8C:A6:1E:3B:AE:48:C8:E2
            X509v3 Authority Key Identifier:
                keyid:3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230342e302f32322d3232203d3e20323730323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:19:b8:96:d7:d6:73:b6:8f:9b:cc:6c:cf:ad:9d:8b:0e:d0:
         48:1f:47:44:96:63:20:47:85:ac:eb:14:a4:06:74:d3:d0:60:
         89:c2:2c:57:26:bf:52:f3:08:b4:b2:9b:59:f2:dc:aa:24:6b:
         25:92:a6:d2:3e:64:87:50:95:20:b8:46:3f:41:f2:6c:dd:a1:
         f9:31:27:7d:08:b0:62:83:01:ef:e6:96:fb:05:a6:1e:4d:da:
         64:13:5c:7b:9b:12:1e:e7:21:84:23:01:22:a1:f5:20:0b:58:
         bc:b2:2e:14:da:bf:d1:37:4f:3c:9f:ed:43:37:95:e6:84:d8:
         16:30:82:29:b8:79:3f:08:b5:84:65:49:45:cd:cd:99:3f:e5:
         97:30:96:a9:2a:d8:09:6b:8f:b7:c3:03:45:fc:19:08:c1:4d:
         e6:e4:37:84:3d:75:dc:ba:4f:76:4c:2f:ba:22:c4:bc:56:b0:
         d0:b0:3c:43:01:d0:c2:33:0d:89:4f:8b:a9:61:04:a3:18:64:
         40:d1:90:7b:24:0c:f1:47:5a:8b:35:b5:66:01:5c:31:fa:40:
         55:1c:bb:f4:2d:b6:b6:5d:89:08:d8:f2:47:ee:58:e6:65:f3:
         25:1b:d4:59:57:52:08:2b:e1:f7:24:e7:a8:9e:df:aa:17:b9:
         50:0c:d8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org