Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230342e302f32332d3233203d3e20323730323533.roa
File:                     3230302e3131302e3230342e302f32332d3233203d3e20323730323533.roa (raw, json)
Hash identifier:          IkVThf8hx2sjtm3ZlKRMhaeIKUtmBXF+CkTFMD36M/M=
Subject key identifier:   47:A7:FC:CE:8C:78:4B:6B:64:52:8D:39:92:E4:5A:FB:51:48:C8:31
Certificate issuer:       /CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
Certificate serial:       0DF48D6C47A02E851B97262A34CEF985035ABDDF
Authority key identifier: 3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230342e302f32332d3233203d3e20323730323533.roa
Signing time:             Wed 24 Apr 2024 12:37:31 +0000
ROA not before:           Wed 24 Apr 2024 12:32:31 +0000
ROA not after:            Wed 23 Apr 2025 12:37:31 +0000
asID:                     270253
IP address blocks:        200.110.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f4:8d:6c:47:a0:2e:85:1b:97:26:2a:34:ce:f9:85:03:5a:bd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
        Validity
            Not Before: Apr 24 12:32:31 2024 GMT
            Not After : Apr 23 12:37:31 2025 GMT
        Subject: CN=47A7FCCE8C784B6B64528D3992E45AFB5148C831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:d9:5b:46:48:c8:d1:81:e2:86:ef:14:fc:
                    05:3d:ab:9c:2c:5a:06:05:66:8f:b7:c8:2e:66:6a:
                    65:81:b7:44:cf:a0:2c:0a:53:a6:cc:c4:c8:1a:b9:
                    c8:2c:ed:a5:ff:b8:3d:52:a5:2a:2e:c5:1d:8b:db:
                    dd:bd:e3:0e:18:f9:31:a3:d8:23:11:6a:ee:99:0b:
                    e6:a0:78:68:d0:43:cd:fa:ce:ca:6a:7b:e3:84:82:
                    7e:50:75:1f:9b:8c:48:70:93:38:7b:5f:ad:50:6a:
                    8c:1c:8b:f9:e4:c0:ee:3b:a7:54:fe:f1:2e:6c:85:
                    65:5a:0c:c6:f5:63:84:bf:51:0d:c1:0b:05:54:b6:
                    53:c0:8b:5b:b4:95:db:68:3f:78:13:f6:82:78:a7:
                    5b:43:c0:c3:76:36:39:ad:40:65:7d:42:65:9f:6d:
                    20:7f:9e:ee:be:4c:ed:a3:e8:a1:c2:a9:7c:15:78:
                    ba:5c:a4:11:9d:16:53:b4:dc:0a:d7:34:43:3e:76:
                    7d:f2:93:09:21:80:f1:ba:56:43:f5:fc:b4:d2:0c:
                    de:3b:84:65:fc:46:93:de:61:9f:f2:f7:2d:6a:47:
                    d2:a3:75:91:20:36:90:cf:10:d1:93:67:05:c8:90:
                    d3:6b:8e:d8:43:04:df:7e:de:b2:da:8e:f5:f3:b6:
                    61:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A7:FC:CE:8C:78:4B:6B:64:52:8D:39:92:E4:5A:FB:51:48:C8:31
            X509v3 Authority Key Identifier:
                keyid:3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230342e302f32332d3233203d3e20323730323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:b4:8e:f4:ba:9d:c1:ab:99:d1:1d:94:73:2a:6b:e4:e6:88:
         68:1b:0b:a1:9c:82:8c:26:5c:f3:c8:c5:56:14:ea:5c:0a:a8:
         8c:06:5d:49:a0:d5:bc:0a:b5:ad:7e:81:6d:2b:cf:17:07:d6:
         01:84:57:b9:33:23:d0:6b:af:33:7c:8f:1e:59:16:a7:b2:ec:
         42:11:59:16:85:bd:d3:52:2b:ec:3f:14:ba:c9:5a:be:20:24:
         f0:dc:8d:20:54:19:08:1b:b3:ad:5c:6e:2f:85:13:9f:af:b6:
         68:ed:d9:09:3d:5d:e6:25:5d:18:ab:a5:71:2b:36:c3:62:eb:
         dc:fe:52:3a:d1:a8:4c:c6:f0:8b:e6:67:9f:d0:74:e1:a3:46:
         2d:ce:0e:18:f9:69:86:48:2e:c6:17:58:aa:37:5b:3b:1c:9e:
         5b:8d:da:de:1e:c9:f6:19:fb:ad:bc:a5:3a:75:10:9c:ab:cf:
         38:ea:9e:66:67:94:30:99:45:f7:8e:de:24:d8:fc:6d:78:a9:
         30:ce:95:e2:bb:e2:db:61:94:b7:85:24:9b:24:24:0e:9d:54:
         31:2a:dc:af:4b:0d:e4:ab:46:ef:4a:55:e5:40:3e:0f:e7:cb:
         a8:fb:ca:e2:22:27:21:fc:34:ba:88:36:f5:22:5e:57:07:3f:
         a4:b8:82:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org