Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3139312e302f32342d3332203d3e20323731363431.roa
File:                     3230302e3139342e3139312e302f32342d3332203d3e20323731363431.roa (raw, json)
Hash identifier:          2GE4wmzscDBfPSgIfrLo09gShXtg4lsCj4mH6zKtwzI=
Subject key identifier:   CD:9E:0C:F9:73:E1:7C:21:8B:7A:7D:E5:F6:9F:19:4A:FA:23:0F:C4
Certificate issuer:       /CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
Certificate serial:       3F396EF744BAFC524E57725451A572692101900F
Authority key identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3139312e302f32342d3332203d3e20323731363431.roa
Signing time:             Fri 31 May 2024 15:18:07 +0000
ROA not before:           Fri 31 May 2024 15:13:07 +0000
ROA not after:            Fri 30 May 2025 15:18:07 +0000
asID:                     271641
IP address blocks:        200.194.191.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 05:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:39:6e:f7:44:ba:fc:52:4e:57:72:54:51:a5:72:69:21:01:90:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
        Validity
            Not Before: May 31 15:13:07 2024 GMT
            Not After : May 30 15:18:07 2025 GMT
        Subject: CN=CD9E0CF973E17C218B7A7DE5F69F194AFA230FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:0e:5e:22:9c:95:ce:10:5b:9c:b5:d8:c9:
                    b0:0f:91:5e:4c:ba:e9:b3:2d:f2:4a:da:f0:b7:a5:
                    1b:04:b6:f1:64:af:83:a1:50:e8:7a:b6:a4:b8:d0:
                    4e:5d:65:f7:d1:f9:cc:32:36:f5:1a:6d:a3:52:22:
                    92:5b:a5:d8:92:99:ed:18:13:05:b7:13:54:cc:f3:
                    e7:ae:63:ef:4a:a4:2e:7a:f8:9a:98:94:12:7f:66:
                    8d:f4:91:29:75:24:37:e1:11:32:2d:2f:39:7d:eb:
                    f0:03:a1:67:86:5f:d5:1a:87:8b:4b:43:e3:82:a4:
                    39:6c:05:b0:31:42:2d:03:f1:65:fc:60:aa:44:68:
                    40:f9:67:54:a5:38:e7:8c:15:08:99:f0:a5:ea:33:
                    79:7f:5e:74:51:20:bc:9d:ed:d4:51:62:8e:80:8c:
                    6f:9f:1e:59:14:a2:c1:53:c2:a9:b5:aa:d2:a7:70:
                    6e:62:3f:74:3d:ca:70:78:51:3c:fd:92:70:96:6c:
                    3f:1c:ec:09:37:cc:ca:f6:b3:50:00:7e:fd:af:b6:
                    45:62:ea:2d:5f:7d:bb:fb:19:60:65:c0:7e:64:ae:
                    fe:16:91:9c:72:cb:24:2e:e5:32:a4:5f:a9:91:2b:
                    99:f6:56:1d:20:fe:65:27:25:68:5e:da:75:b7:0c:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9E:0C:F9:73:E1:7C:21:8B:7A:7D:E5:F6:9F:19:4A:FA:23:0F:C4
            X509v3 Authority Key Identifier:
                keyid:D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3139312e302f32342d3332203d3e20323731363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b7:e5:da:41:15:1e:c9:50:fe:3e:c6:9c:c6:cb:e0:52:b1:
         d7:3d:49:68:c1:2a:fe:71:d2:c0:6f:05:3e:c8:6c:86:4a:36:
         91:63:2b:d7:df:db:dc:08:a9:de:46:dc:7a:f8:eb:b1:b9:60:
         b7:d3:15:fe:36:d8:ff:3e:8f:d3:57:a7:3c:df:dd:a8:60:23:
         67:17:19:28:b6:30:8f:85:df:e5:c0:16:d8:b8:83:10:8b:75:
         7f:50:77:01:00:6f:bb:ce:5a:e5:fb:a5:39:09:67:de:82:0a:
         00:0f:84:54:66:8f:e4:04:58:62:20:e4:cb:10:a4:70:8e:a0:
         07:d8:a3:5f:e1:63:f9:36:d7:33:a5:52:2c:7f:6d:1c:66:5b:
         01:d1:78:16:53:fb:39:d6:9f:a4:98:49:ca:81:1f:ea:b4:41:
         55:b6:cd:db:cb:40:84:d1:44:ae:70:d4:09:cf:fc:bb:65:e6:
         7a:8c:7d:c2:b1:84:e6:08:ac:66:40:32:38:0f:e9:c6:d1:fb:
         0d:8a:e8:d6:e3:d3:35:da:1f:4a:0e:ab:b9:07:46:13:bd:eb:
         82:f8:67:cc:78:35:26:85:d1:69:1e:68:f8:c0:82:36:47:c0:
         32:c9:24:84:a1:ef:f5:2b:72:55:c0:2b:e3:8b:d2:f1:c6:1a:
         90:9c:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 07:49:54 2024 by rpki-client on console-ams.rpki-client.org