Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/3133312e3232312e36302e302f32332d3233203d3e20323634343134.roa
File:                     3133312e3232312e36302e302f32332d3233203d3e20323634343134.roa (raw, json)
Hash identifier:          jP/PhaFnBKXJJzlzmfiL/3ZNDI8LfraJPSM6U4eP51k=
Subject key identifier:   18:9F:50:25:29:41:DC:60:58:56:7F:26:3F:F1:95:15:62:F9:F1:28
Certificate issuer:       /CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
Certificate serial:       60B9AD4E888A8BC39DB4EC40D904F8E2FD5CDE12
Authority key identifier: 0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/3133312e3232312e36302e302f32332d3233203d3e20323634343134.roa
Signing time:             Thu 18 Apr 2024 19:36:32 +0000
ROA not before:           Thu 18 Apr 2024 19:31:32 +0000
ROA not after:            Thu 17 Apr 2025 19:36:32 +0000
asID:                     264414
IP address blocks:        131.221.60.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b9:ad:4e:88:8a:8b:c3:9d:b4:ec:40:d9:04:f8:e2:fd:5c:de:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
        Validity
            Not Before: Apr 18 19:31:32 2024 GMT
            Not After : Apr 17 19:36:32 2025 GMT
        Subject: CN=189F50252941DC6058567F263FF1951562F9F128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:8e:30:9e:60:d9:c2:87:a8:b9:c7:09:4c:
                    1c:05:b6:b1:16:e7:44:c6:a6:93:fc:be:92:3d:f6:
                    72:6b:ef:da:27:08:ed:89:00:1f:f8:63:14:b0:a3:
                    aa:85:7c:f2:19:3c:17:a7:83:ee:2a:88:24:c4:c8:
                    70:c6:ac:53:bb:42:5c:60:7f:55:60:35:45:f6:1d:
                    18:7f:98:6d:af:4b:63:b0:51:c2:05:f1:55:8e:ad:
                    94:77:ed:fc:3b:e2:f4:84:da:ca:57:e5:85:e3:e9:
                    95:ab:d5:9f:07:72:ad:87:48:e0:96:4a:66:f5:0f:
                    1f:92:7d:8f:0f:68:a9:56:d6:eb:de:d7:c1:4e:c9:
                    c2:d4:10:4a:1c:99:30:cb:c1:56:28:ad:99:43:da:
                    c5:90:5e:3e:97:36:d4:1c:57:31:57:84:1c:8c:87:
                    5c:6c:b3:94:76:1c:43:70:d2:2b:ee:90:fa:b6:18:
                    84:89:d7:0f:d9:e5:95:5a:b3:58:e6:bb:40:8f:61:
                    de:aa:f3:36:06:03:3c:ff:49:18:45:4a:b3:2a:ca:
                    64:9d:0f:c1:2e:aa:01:a8:f9:3f:f6:72:07:7d:e1:
                    f6:84:9e:f5:0a:33:4c:93:ac:c7:66:10:75:cd:6a:
                    64:08:9e:24:48:78:3b:29:f7:ad:08:bb:c5:0a:cc:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9F:50:25:29:41:DC:60:58:56:7F:26:3F:F1:95:15:62:F9:F1:28
            X509v3 Authority Key Identifier:
                keyid:0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/3133312e3232312e36302e302f32332d3233203d3e20323634343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:de:ab:b6:1c:28:e3:cb:4f:93:cc:83:44:7d:bd:cf:0f:8f:
         b0:6f:23:6a:d8:4f:a3:05:fd:7f:21:21:b2:06:60:46:1c:eb:
         c9:9b:ef:0c:3e:b2:69:e3:e4:b6:ac:8e:0f:1a:8a:45:b1:3d:
         56:9e:d6:e5:ba:12:64:0b:6e:30:be:ac:8b:77:81:ce:17:95:
         c8:78:81:04:f7:f2:7b:78:2a:4a:35:85:87:f8:6a:a5:1c:07:
         7e:c2:d8:d6:da:fc:8a:49:86:c4:45:18:98:d3:95:dc:ac:9d:
         cd:4c:15:57:97:aa:d8:81:59:ec:93:21:f1:b7:19:53:d2:06:
         e5:bc:20:23:4f:4e:2d:1b:ab:78:19:9f:89:f8:4f:f1:11:06:
         21:4f:5a:6f:ae:bc:4c:94:82:c0:01:ab:72:83:d1:62:a9:6f:
         ee:40:e5:87:88:6f:6a:df:67:6e:58:53:c9:f8:02:88:66:16:
         c7:53:5c:72:87:d5:57:b6:1b:96:42:1f:b4:5c:f6:3d:5c:69:
         96:0f:50:05:28:97:7e:84:b7:ef:05:97:58:b6:f2:77:5a:0f:
         1d:f6:ae:16:2f:21:eb:90:05:f4:46:63:85:25:be:0e:81:68:
         c4:c5:89:85:e5:dc:f2:22:1e:f9:6a:d7:74:bf:2b:22:14:6c:
         45:f6:22:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org