Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3131302e302f32342d3234203d3e20323632373931.roa
File:                     3136382e302e3131302e302f32342d3234203d3e20323632373931.roa (raw, json)
Hash identifier:          DPaJLprYRNWh+bs4KvQZaLucUmsPZ0VC1URdWyw6PJU=
Subject key identifier:   FE:FA:04:EE:3D:00:9E:85:D8:93:E9:CC:D4:9B:BE:23:F3:66:20:89
Certificate issuer:       /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial:       104D55391D1C172971CEF0A91035B8D2A51739A0
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3131302e302f32342d3234203d3e20323632373931.roa
Signing time:             Wed 24 Apr 2024 17:31:32 +0000
ROA not before:           Wed 24 Apr 2024 17:26:32 +0000
ROA not after:            Wed 23 Apr 2025 17:31:32 +0000
asID:                     262791
IP address blocks:        168.0.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4d:55:39:1d:1c:17:29:71:ce:f0:a9:10:35:b8:d2:a5:17:39:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
        Validity
            Not Before: Apr 24 17:26:32 2024 GMT
            Not After : Apr 23 17:31:32 2025 GMT
        Subject: CN=FEFA04EE3D009E85D893E9CCD49BBE23F3662089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:52:a7:1f:6e:04:ec:97:22:35:75:f0:25:
                    77:b9:06:e6:bb:d4:35:91:33:3d:76:1a:7c:a2:03:
                    40:f0:fa:93:06:32:b4:07:56:c7:cd:fc:7c:ca:68:
                    7e:d5:b3:77:0a:22:33:cd:68:66:ad:17:20:8a:bd:
                    b0:7e:71:e8:a0:67:84:bd:df:a8:14:11:93:0e:d9:
                    e3:99:58:fb:24:47:fa:19:f0:33:ed:0c:08:09:56:
                    9e:71:d6:bd:33:ac:d7:24:4e:43:8e:33:9d:a3:31:
                    22:83:64:bd:3d:00:77:a5:da:40:24:ce:85:b5:78:
                    cb:e2:99:4b:dd:12:83:17:bc:8b:12:10:36:1a:21:
                    af:4b:ad:ea:07:2f:29:d3:49:50:1c:15:64:71:dc:
                    79:32:29:5d:ef:4b:55:b9:d6:32:1b:90:1f:5f:4b:
                    64:01:70:09:d1:ff:3b:45:37:79:6a:33:a2:dc:65:
                    8a:e1:e5:4d:7d:67:dc:10:12:24:ca:6b:18:53:cb:
                    05:5d:76:34:65:f4:08:ad:83:31:2e:93:b0:d2:da:
                    a3:b2:06:f5:b0:08:6f:6f:ce:8e:2a:b6:cd:ca:5d:
                    ef:05:3b:e6:69:bc:6f:5f:59:7e:d9:61:b8:99:45:
                    4a:e1:5d:ed:e1:99:30:30:87:84:34:0c:26:a9:2d:
                    d7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FA:04:EE:3D:00:9E:85:D8:93:E9:CC:D4:9B:BE:23:F3:66:20:89
            X509v3 Authority Key Identifier:
                keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3131302e302f32342d3234203d3e20323632373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:5d:be:72:86:56:36:e7:9c:ac:e2:31:20:4b:f2:93:cf:8a:
         bb:cf:6f:15:52:a3:4e:be:0f:4f:cc:99:63:1b:a1:7f:46:bd:
         cf:51:c8:d2:0e:dc:7a:7e:62:a0:19:1a:1f:d1:e9:1a:73:89:
         28:b1:f1:30:e6:b8:bf:5d:e4:54:76:19:ed:5e:eb:49:86:23:
         b9:f2:d6:44:80:4f:a5:5b:e5:be:b7:c3:4c:92:41:6b:bf:af:
         9e:47:d6:ed:b0:50:cf:a2:4d:51:13:66:ac:6a:12:26:30:4b:
         77:d1:3f:50:e9:52:88:c7:26:26:af:13:5f:af:8b:d6:79:3f:
         b1:83:0e:ed:6d:30:29:f7:27:64:7a:8b:56:f8:ec:9b:35:45:
         bc:2f:02:63:48:30:99:00:7e:4e:f4:2c:8d:d6:87:b6:1a:08:
         5f:40:64:37:ed:20:cf:84:2a:a5:e9:39:ed:da:e0:62:ec:ab:
         82:90:d7:84:01:42:9d:81:4e:88:3f:33:0f:67:74:d8:e6:6b:
         f8:c2:c9:ea:4f:02:93:10:f0:d8:11:0c:61:1a:c1:a3:5f:14:
         8b:d1:55:16:9d:e2:3d:f5:81:2f:84:94:f7:44:f3:08:e9:e0:
         12:a4:63:e5:94:96:4e:2b:8f:a3:50:0a:f0:9d:97:cb:80:56:
         1e:63:56:09
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEE1VOR0cFylxzvCpEDW40qUXOaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk0QkU0NTQ3OUIxMEJGQ0E3QkI0MEE0NEMwNkI1MUQx
NUYyRDA1MzAeFw0yNDA0MjQxNzI2MzJaFw0yNTA0MjMxNzMxMzJaMDMxMTAvBgNV
BAMTKEZFRkEwNEVFM0QwMDlFODVEODkzRTlDQ0Q0OUJCRTIzRjM2NjIwODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mVKnH24E7JciNXXwJXe5Bua7
1DWRMz12GnyiA0Dw+pMGMrQHVsfN/HzKaH7Vs3cKIjPNaGatFyCKvbB+ceigZ4S9
36gUEZMO2eOZWPskR/oZ8DPtDAgJVp5x1r0zrNckTkOOM52jMSKDZL09AHel2kAk
zoW1eMvimUvdEoMXvIsSEDYaIa9LreoHLynTSVAcFWRx3HkyKV3vS1W51jIbkB9f
S2QBcAnR/ztFN3lqM6LcZYrh5U19Z9wQEiTKaxhTywVddjRl9AitgzEuk7DS2qOy
BvWwCG9vzo4qts3KXe8FO+ZpvG9fWX7ZYbiZRUrhXe3hmTAwh4Q0DCapLdfnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/voE7j0AnoXYk+nM1Ju+I/NmIIkwHwYDVR0j
BBgwFoAUaUvkVHmxC/ynu0CkTAa1HRXy0FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM29tREIzenhKVzFlN25NWnRKWlZvZWVrMkpUTUwzNHgxeDJxMXRLbm1n
WFEvMC82OTRCRTQ1NDc5QjEwQkZDQTdCQjQwQTQ0QzA2QjUxRDE1RjJEMDUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NEJFNDU0NzlCMTBCRkNB
N0JCNDBBNDRDMDZCNTFEMTVGMkQwNTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNvbURCM3p4SlcxZTduTVp0SlpWb2VlazJKVE1MMzR4MXgycTF0S25tZ1hRLzAv
MzEzNjM4MmUzMDJlMzEzMTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzczOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqABuMA0GCSqGSIb3DQEBCwUAA4IBAQA+Xb5yhlY2
55ys4jEgS/KTz4q7z28VUqNOvg9PzJljG6F/Rr3PUcjSDtx6fmKgGRof0ekac4ko
sfEw5ri/XeRUdhntXutJhiO58tZEgE+lW+W+t8NMkkFrv6+eR9btsFDPok1RE2as
ahImMEt30T9Q6VKIxyYmrxNfr4vWeT+xgw7tbTAp9ydkeotW+OybNUW8LwJjSDCZ
AH5O9CyN1oe2GghfQGQ37SDPhCql6Tnt2uBi7KuCkNeEAUKdgU6IPzMPZ3TY5mv4
wsnqTwKTEPDYEQxhGsGjXxSL0VUWneI99YEvhJT3RPMI6eASpGPllJZOK4+jUArw
nZfLgFYeY1YJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org