Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230362e302f32332d3233203d3e20323730323533.roa
File:                     3230302e3131302e3230362e302f32332d3233203d3e20323730323533.roa (raw, json)
Hash identifier:          tigxKHsf1r79n9Bf66h5sXf0vUCMZIeX87eYADe4ajs=
Subject key identifier:   02:56:8D:C7:72:92:1F:FF:7A:0C:F1:F8:59:5D:7D:C4:A3:1C:79:32
Certificate issuer:       /CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
Certificate serial:       5975449768A0AFBFF3B979F892FAF0281DADE641
Authority key identifier: 3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230362e302f32332d3233203d3e20323730323533.roa
Signing time:             Wed 24 Apr 2024 12:37:36 +0000
ROA not before:           Wed 24 Apr 2024 12:32:36 +0000
ROA not after:            Wed 23 Apr 2025 12:37:36 +0000
asID:                     270253
IP address blocks:        200.110.206.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:75:44:97:68:a0:af:bf:f3:b9:79:f8:92:fa:f0:28:1d:ad:e6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
        Validity
            Not Before: Apr 24 12:32:36 2024 GMT
            Not After : Apr 23 12:37:36 2025 GMT
        Subject: CN=02568DC772921FFF7A0CF1F8595D7DC4A31C7932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:41:83:1f:51:dd:d3:90:c6:4a:51:36:20:
                    9f:c8:3f:bd:b8:26:f5:60:c1:8a:79:28:9e:95:06:
                    ad:0a:02:3e:8b:ff:15:6f:18:1a:00:7c:50:e0:df:
                    4c:d3:1c:e1:13:a8:5c:c1:e3:8c:6d:83:b2:7f:fd:
                    6d:11:46:6c:7b:69:d6:ee:33:b9:12:fa:b0:71:13:
                    90:fd:73:49:69:3b:a3:b0:30:cf:b7:69:a9:df:c6:
                    ce:17:f0:ff:e0:ec:b8:cd:e3:b1:f6:c4:72:bb:7d:
                    1e:77:2e:e7:35:e6:c2:8e:12:b5:71:a0:81:50:8f:
                    9a:7c:2f:d5:43:28:c1:ad:15:e4:37:13:8b:f5:98:
                    5d:ca:b6:12:4e:48:36:6f:05:07:d9:fa:4a:c8:a4:
                    97:0e:13:cd:ca:3d:95:a6:e5:76:f8:43:2b:7d:40:
                    d0:4f:47:cd:bf:13:12:a1:e8:28:e2:a6:45:48:6d:
                    b0:91:31:f6:a9:27:fa:de:bc:4e:4a:8a:20:d6:dc:
                    1e:f1:91:e0:36:da:e8:cf:0a:27:e6:b2:46:64:cc:
                    90:6e:c2:72:7a:ac:35:a7:03:70:42:82:86:6e:56:
                    53:9f:d8:9f:2b:37:42:56:a2:12:15:18:07:78:b5:
                    8c:39:da:3a:37:fb:91:77:b8:74:4c:26:15:a8:ea:
                    23:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:56:8D:C7:72:92:1F:FF:7A:0C:F1:F8:59:5D:7D:C4:A3:1C:79:32
            X509v3 Authority Key Identifier:
                keyid:3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230362e302f32332d3233203d3e20323730323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:82:ec:9a:db:43:5e:74:ec:69:b6:be:fe:9e:f4:ce:cd:03:
         6a:31:3e:56:99:5d:69:fa:5e:4e:4d:6e:3c:03:3b:ee:ab:14:
         2c:1a:08:27:56:09:c0:24:e1:e6:65:c2:ae:0d:f3:83:4a:a4:
         60:41:e4:f6:5c:94:65:7b:bd:20:64:b4:ee:6f:94:f9:76:2d:
         7e:85:0c:ce:2a:9e:d3:38:6b:ac:11:f5:3c:2e:3a:4c:48:26:
         98:05:a0:76:71:42:84:98:27:53:4f:28:c5:ae:38:14:4b:d6:
         5c:59:d0:c1:1b:d4:4e:4a:19:56:68:fa:98:aa:05:57:8d:c5:
         e5:54:31:32:7b:24:7e:c7:c1:9e:8b:4e:65:1d:2a:09:d2:dc:
         d1:26:89:e8:86:ed:80:9e:07:cc:fe:6f:50:0e:1e:43:9e:a7:
         22:3f:a6:24:c4:fe:91:4b:2b:20:60:6e:57:70:ae:c7:b4:6a:
         17:08:9b:5e:35:9d:d9:aa:72:dc:d5:9c:4d:47:d9:d2:d4:79:
         ce:db:64:39:39:14:96:26:01:23:80:2b:6f:6f:ae:f2:35:e5:
         dd:bd:d5:71:34:14:b3:5a:c8:43:16:b1:21:a5:44:d3:95:0b:
         4e:46:3c:2e:9a:03:67:89:79:c4:52:2e:85:22:a0:e6:9c:c2:
         3d:7c:7d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org