Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3131302e302f32332d3233203d3e20323632373931.roa
File:                     3136382e302e3131302e302f32332d3233203d3e20323632373931.roa (raw, json)
Hash identifier:          +udXKFun9fpMf0rejtWY0P2mFThO21ScXihar8lhCFU=
Subject key identifier:   9A:D1:3B:D8:5B:82:D0:26:79:91:57:2D:02:E0:EB:DF:D0:81:C6:95
Certificate issuer:       /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial:       62036B9E2469A9B81770F896E41A577D9076761D
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3131302e302f32332d3233203d3e20323632373931.roa
Signing time:             Wed 24 Apr 2024 17:31:29 +0000
ROA not before:           Wed 24 Apr 2024 17:26:29 +0000
ROA not after:            Wed 23 Apr 2025 17:31:29 +0000
asID:                     262791
IP address blocks:        168.0.110.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:03:6b:9e:24:69:a9:b8:17:70:f8:96:e4:1a:57:7d:90:76:76:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
        Validity
            Not Before: Apr 24 17:26:29 2024 GMT
            Not After : Apr 23 17:31:29 2025 GMT
        Subject: CN=9AD13BD85B82D0267991572D02E0EBDFD081C695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:3c:85:7a:bf:46:71:a8:aa:37:d3:7e:bc:
                    62:ad:46:2d:fd:b1:96:e1:4e:67:b7:a9:36:e2:13:
                    b2:9b:2d:b9:86:d8:37:48:d8:df:de:0a:0d:b4:df:
                    5e:24:f5:30:03:1a:a9:00:4f:64:b8:2f:dc:55:14:
                    35:4d:0e:88:cc:15:cd:52:09:cb:91:8f:d4:f4:0c:
                    3c:0a:a4:61:44:0b:d9:43:6b:fe:5d:05:44:05:99:
                    a2:af:08:24:16:2d:c0:32:f7:ba:b0:98:fe:23:90:
                    0b:be:66:0f:2e:4b:27:de:7a:aa:46:8e:69:85:6f:
                    ba:f5:94:10:4e:18:e2:f5:67:bb:3c:88:b5:9a:ac:
                    a5:df:e8:09:32:ab:c0:90:3d:69:f4:cb:91:3e:9a:
                    5c:5a:0d:2b:14:51:fe:d7:73:5b:4b:2e:98:ae:89:
                    7a:11:51:4f:85:3d:8f:32:e7:ce:8c:99:e0:de:e5:
                    c7:d9:76:6f:21:8b:40:aa:da:66:43:4d:3a:12:e0:
                    c2:d5:f4:91:a4:b0:8d:4d:94:0b:ce:1e:c9:0e:64:
                    06:0a:6d:41:ef:89:44:f6:46:0e:7a:c5:45:36:36:
                    08:1c:9c:cf:27:d5:ce:c6:88:23:4e:f4:9a:6c:8e:
                    7b:4f:1a:68:c5:19:36:89:70:7f:4e:1d:0a:29:83:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D1:3B:D8:5B:82:D0:26:79:91:57:2D:02:E0:EB:DF:D0:81:C6:95
            X509v3 Authority Key Identifier:
                keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3131302e302f32332d3233203d3e20323632373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:05:1d:60:f9:78:a4:76:f7:e4:38:cb:60:04:6e:82:04:0a:
         55:57:f5:fe:d5:60:f5:d6:39:cf:c7:f0:cd:a7:41:26:53:5a:
         05:c5:ac:77:d2:c4:c4:f4:9c:7f:db:ba:4e:87:7a:4b:66:08:
         c0:27:8a:24:db:f4:2c:33:2f:48:f0:56:a8:d1:0b:08:ce:b1:
         cf:cc:dd:c1:45:5f:2a:13:ec:b5:f4:fb:3d:61:a4:3a:9e:bb:
         75:ae:75:5e:19:53:c6:f8:c8:ba:25:bb:d4:04:62:e0:d9:10:
         33:e7:81:7a:16:9b:ed:a5:e9:e6:96:5a:c4:d5:dc:48:17:df:
         88:58:55:72:97:2a:3e:34:00:d6:6a:fe:11:dc:31:06:70:99:
         f0:2b:f4:ce:f0:82:ce:f7:9d:f3:e7:62:1f:dc:a3:39:31:fd:
         e4:18:69:0e:de:fb:75:08:f8:ac:44:a3:e3:b1:c5:35:57:86:
         3e:8f:d8:01:f7:ef:c7:bd:31:35:c9:db:27:84:c0:d6:27:64:
         28:95:ce:eb:db:8b:8b:db:77:ec:3d:48:d4:8c:19:a2:db:dd:
         f0:fb:a0:78:f0:f1:73:16:ed:f7:78:6c:6f:e0:a5:6c:47:ba:
         68:b1:8e:d5:ee:62:62:35:d9:ab:0e:0c:22:6e:61:20:11:4e:
         df:15:d0:07
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYgNrniRpqbgXcPiW5BpXfZB2dh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk0QkU0NTQ3OUIxMEJGQ0E3QkI0MEE0NEMwNkI1MUQx
NUYyRDA1MzAeFw0yNDA0MjQxNzI2MjlaFw0yNTA0MjMxNzMxMjlaMDMxMTAvBgNV
BAMTKDlBRDEzQkQ4NUI4MkQwMjY3OTkxNTcyRDAyRTBFQkRGRDA4MUM2OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHITyFer9GcaiqN9N+vGKtRi39
sZbhTme3qTbiE7KbLbmG2DdI2N/eCg20314k9TADGqkAT2S4L9xVFDVNDojMFc1S
CcuRj9T0DDwKpGFEC9lDa/5dBUQFmaKvCCQWLcAy97qwmP4jkAu+Zg8uSyfeeqpG
jmmFb7r1lBBOGOL1Z7s8iLWarKXf6Akyq8CQPWn0y5E+mlxaDSsUUf7Xc1tLLpiu
iXoRUU+FPY8y586MmeDe5cfZdm8hi0Cq2mZDTToS4MLV9JGksI1NlAvOHskOZAYK
bUHviUT2Rg56xUU2NggcnM8n1c7GiCNO9JpsjntPGmjFGTaJcH9OHQopg4WBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmtE72FuC0CZ5kVctAuDr39CBxpUwHwYDVR0j
BBgwFoAUaUvkVHmxC/ynu0CkTAa1HRXy0FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM29tREIzenhKVzFlN25NWnRKWlZvZWVrMkpUTUwzNHgxeDJxMXRLbm1n
WFEvMC82OTRCRTQ1NDc5QjEwQkZDQTdCQjQwQTQ0QzA2QjUxRDE1RjJEMDUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NEJFNDU0NzlCMTBCRkNB
N0JCNDBBNDRDMDZCNTFEMTVGMkQwNTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNvbURCM3p4SlcxZTduTVp0SlpWb2VlazJKVE1MMzR4MXgycTF0S25tZ1hRLzAv
MzEzNjM4MmUzMDJlMzEzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzczOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqABuMA0GCSqGSIb3DQEBCwUAA4IBAQCZBR1g+Xik
dvfkOMtgBG6CBApVV/X+1WD11jnPx/DNp0EmU1oFxax30sTE9Jx/27pOh3pLZgjA
J4ok2/QsMy9I8Fao0QsIzrHPzN3BRV8qE+y19Ps9YaQ6nrt1rnVeGVPG+Mi6JbvU
BGLg2RAz54F6FpvtpenmllrE1dxIF9+IWFVylyo+NADWav4R3DEGcJnwK/TO8ILO
953z52If3KM5Mf3kGGkO3vt1CPisRKPjscU1V4Y+j9gB9+/HvTE1ydsnhMDWJ2Qo
lc7r24uL23fsPUjUjBmi293w+6B48PFzFu33eGxv4KVsR7posY7V7mJiNdmrDgwi
bmEgEU7fFdAH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org