Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e382e302f32322d3332203d3e203631393030.roa
File:                     3139312e3234332e382e302f32322d3332203d3e203631393030.roa (raw, json)
Hash identifier:          oBPHHmQ0lO8l+Hx9r8TgEgB7JGQH5FDlmfquTHbmOZI=
Subject key identifier:   B1:C3:9E:7C:F7:AF:FA:FA:A6:83:A0:C7:35:AB:CC:FD:32:95:F5:20
Certificate issuer:       /CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
Certificate serial:       162CF0341C7ABC7427FB4B250E23DCAA8460580B
Authority key identifier: 00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e382e302f32322d3332203d3e203631393030.roa
Signing time:             Mon 23 Sep 2024 19:30:55 +0000
ROA not before:           Mon 23 Sep 2024 19:25:55 +0000
ROA not after:            Mon 22 Sep 2025 19:30:55 +0000
asID:                     61900
IP address blocks:        191.243.8.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 19:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2c:f0:34:1c:7a:bc:74:27:fb:4b:25:0e:23:dc:aa:84:60:58:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
        Validity
            Not Before: Sep 23 19:25:55 2024 GMT
            Not After : Sep 22 19:30:55 2025 GMT
        Subject: CN=B1C39E7CF7AFFAFAA683A0C735ABCCFD3295F520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:83:41:e9:4b:35:9d:70:ca:6c:e5:d2:b1:
                    27:b1:c1:4c:56:5a:ea:00:7d:f4:13:0f:6b:3d:92:
                    42:b3:3e:6d:8e:81:c6:91:1b:bd:08:18:80:46:e3:
                    77:1a:65:a7:e5:f9:e8:c6:3f:3d:69:b4:32:7d:85:
                    f0:1e:ac:5b:4b:c2:4e:06:d2:7b:dc:e3:0c:e6:8c:
                    01:bc:01:7b:6f:ce:65:c6:f5:87:c6:ab:29:5b:29:
                    46:5a:6a:13:cb:76:9c:d0:da:a8:26:20:fa:66:44:
                    50:ec:c7:93:f1:44:7e:b9:a0:c1:86:c5:34:32:81:
                    ca:64:d3:1c:ac:be:86:fa:14:d1:a9:25:a1:d3:ea:
                    56:0e:10:83:69:e4:21:93:07:50:b1:53:05:9b:d2:
                    33:f0:00:25:b5:6f:4a:f0:87:c1:9f:14:2f:2d:0b:
                    a9:31:4a:68:31:25:36:68:6f:81:06:5c:fa:96:1e:
                    78:63:e2:03:24:ec:e7:7d:94:d6:92:a2:53:7d:c1:
                    a8:b9:ce:dd:d8:06:ef:32:07:0c:07:c3:f2:47:00:
                    32:18:fd:80:0f:c5:ef:8b:8a:ab:11:4a:a5:c9:a3:
                    c1:55:f1:7d:e9:47:55:5a:b1:63:16:93:50:c0:d6:
                    cb:70:8f:a0:0b:a0:a1:59:a6:0c:1a:57:a8:67:cf:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C3:9E:7C:F7:AF:FA:FA:A6:83:A0:C7:35:AB:CC:FD:32:95:F5:20
            X509v3 Authority Key Identifier:
                keyid:00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e382e302f32322d3332203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:23:e5:c9:89:fa:66:0a:26:95:b5:50:3b:06:f2:57:c7:6c:
         48:e8:28:ab:a6:72:98:8d:c7:51:e5:85:aa:8b:a2:21:ff:d5:
         74:95:e2:19:4c:c5:96:f5:aa:64:29:ec:fd:4a:f8:73:4f:e6:
         9a:e7:58:5b:8a:2a:3b:0f:88:63:07:f6:da:5f:93:b0:7a:01:
         a3:25:6d:a8:fd:be:58:e2:c6:8f:24:fc:16:d0:2a:b6:56:94:
         a6:85:c4:2c:b9:51:59:85:4b:3a:f3:67:61:e5:15:ae:a2:9d:
         f2:cd:0d:13:54:1c:ce:f0:19:de:69:a4:dd:6b:6b:bb:5a:87:
         2d:8b:9b:11:69:09:66:8d:25:68:2a:18:37:fc:37:84:90:aa:
         e0:f5:06:ce:1e:fc:4d:17:0a:32:09:3d:87:41:1f:37:ec:d3:
         c7:5c:dd:da:c9:c7:5e:85:1a:e7:3e:32:b4:35:a3:33:f4:74:
         18:6a:e2:6f:7e:40:1b:70:f6:71:ef:32:34:96:d9:36:1e:ef:
         e1:0f:06:c7:cb:c1:f6:9e:6b:b2:49:87:d4:15:23:56:d9:0f:
         d1:39:d9:6b:19:c2:86:3d:a9:5f:57:d9:18:2b:04:d2:ea:48:
         8e:2f:62:a2:45:49:a7:c0:7b:94:73:c6:1e:d7:83:8d:83:44:
         fb:f3:59:d9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFizwNBx6vHQn+0slDiPcqoRgWAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA0NEY1NDY2MjFGMUVCRjdDQkY4NDlGNEZFREE4RThD
MTZEMUU5QTAeFw0yNDA5MjMxOTI1NTVaFw0yNTA5MjIxOTMwNTVaMDMxMTAvBgNV
BAMTKEIxQzM5RTdDRjdBRkZBRkFBNjgzQTBDNzM1QUJDQ0ZEMzI5NUY1MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvT4NB6Us1nXDKbOXSsSexwUxW
WuoAffQTD2s9kkKzPm2OgcaRG70IGIBG43caZafl+ejGPz1ptDJ9hfAerFtLwk4G
0nvc4wzmjAG8AXtvzmXG9YfGqylbKUZaahPLdpzQ2qgmIPpmRFDsx5PxRH65oMGG
xTQygcpk0xysvob6FNGpJaHT6lYOEINp5CGTB1CxUwWb0jPwACW1b0rwh8GfFC8t
C6kxSmgxJTZob4EGXPqWHnhj4gMk7Od9lNaSolN9wai5zt3YBu8yBwwHw/JHADIY
/YAPxe+LiqsRSqXJo8FV8X3pR1VasWMWk1DA1stwj6ALoKFZpgwaV6hnz/JjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUscOefPev+vqmg6DHNavM/TKV9SAwHwYDVR0j
BBgwFoAUAET1RmIfHr98v4SfT+2o6MFtHpowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG80MTRyOGtKWmloUURDdHBMakhFUm1QamN5anB4UFV5d2FSaDllaGNQ
SlgvMC8wMDQ0RjU0NjYyMUYxRUJGN0NCRjg0OUY0RkVEQThFOEMxNkQxRTlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwNDRGNTQ2NjIxRjFFQkY3
Q0JGODQ5RjRGRURBOEU4QzE2RDFFOUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvNDE0cjhrSlppaFFEQ3RwTGpIRVJtUGpjeWpweFBVeXdhUmg5ZWhjUEpYLzAv
MzEzOTMxMmUzMjM0MzMyZTM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzYzMTM5
MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAr/zCDANBgkqhkiG9w0BAQsFAAOCAQEAfyPlyYn6Zgom
lbVQOwbyV8dsSOgoq6ZymI3HUeWFqouiIf/VdJXiGUzFlvWqZCns/Ur4c0/mmudY
W4oqOw+IYwf22l+TsHoBoyVtqP2+WOLGjyT8FtAqtlaUpoXELLlRWYVLOvNnYeUV
rqKd8s0NE1QczvAZ3mmk3Wtru1qHLYubEWkJZo0laCoYN/w3hJCq4PUGzh78TRcK
Mgk9h0EfN+zTx1zd2snHXoUa5z4ytDWjM/R0GGrib35AG3D2ce8yNJbZNh7v4Q8G
x8vB9p5rskmH1BUjVtkP0TnZaxnChj2pX1fZGCsE0upIji9iokVJp8B7lHPGHteD
jYNE+/NZ2Q==
-----END CERTIFICATE-----
Generated at Tue Oct 8 00:11:47 2024 by rpki-client on console-fra.rpki-client.org