Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130302e302f32322d3232203d3e20323632373932.roa
File:                     3230312e37362e3130302e302f32322d3232203d3e20323632373932.roa (raw, json)
Hash identifier:          FG8s4DFwPtPTDrMUBJQEKlWug4IH3CxeHl+dvMccoJY=
Subject key identifier:   D8:76:46:A4:A5:79:09:6F:BF:91:55:CC:5B:34:53:52:47:8C:64:30
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       17E0B23C528150BBE652CF1930D6DEF421284D66
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130302e302f32322d3232203d3e20323632373932.roa
Signing time:             Thu 04 Apr 2024 11:26:03 +0000
ROA not before:           Thu 04 Apr 2024 11:21:03 +0000
ROA not after:            Thu 03 Apr 2025 11:26:03 +0000
asID:                     262792
IP address blocks:        201.76.100.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 23:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e0:b2:3c:52:81:50:bb:e6:52:cf:19:30:d6:de:f4:21:28:4d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Apr  4 11:21:03 2024 GMT
            Not After : Apr  3 11:26:03 2025 GMT
        Subject: CN=D87646A4A579096FBF9155CC5B345352478C6430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:ff:c6:fa:08:80:de:3d:75:4c:b1:e8:30:
                    7d:83:bc:30:2f:4a:b6:17:4a:8d:3c:0e:cf:f0:fc:
                    66:26:fb:12:59:c6:bd:e6:3a:bb:aa:75:8a:46:17:
                    33:b1:43:e2:d0:cd:ed:e4:50:b2:a9:6d:aa:e3:b9:
                    df:65:22:9a:61:b4:75:b1:20:ec:4d:ad:3e:47:d9:
                    aa:a6:f8:a5:e4:50:7d:3a:90:4a:25:b4:ab:ca:79:
                    09:b9:6a:30:35:b9:3c:02:85:50:1f:b2:43:2d:86:
                    fd:0d:ea:2e:88:21:f8:45:3c:db:70:2c:49:74:71:
                    c7:5a:12:e6:61:e6:f4:cc:d2:f0:fb:61:5a:60:31:
                    25:38:03:b8:3f:1d:5d:4f:7e:4f:e7:71:11:e8:b2:
                    6c:3c:b9:3c:4d:79:d0:9a:86:f8:e0:4f:44:c0:52:
                    ca:ab:95:ed:e5:c9:11:5f:e7:e1:05:c5:b2:8a:1e:
                    c9:09:81:f7:8f:2f:af:8c:1e:ec:85:bc:cf:ed:f9:
                    a4:6a:03:09:70:91:da:15:b6:f6:a2:be:43:29:06:
                    a3:a6:62:3e:86:bd:15:f7:1d:ce:f3:28:c8:25:0b:
                    51:ed:eb:a9:82:a5:0a:14:b2:7c:4f:8a:c2:df:44:
                    ac:67:d9:39:48:e8:50:97:12:b3:81:b0:2f:33:65:
                    e2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:76:46:A4:A5:79:09:6F:BF:91:55:CC:5B:34:53:52:47:8C:64:30
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130302e302f32322d3232203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:35:2d:a3:6c:b0:bc:68:e1:bb:c0:5a:c6:52:9c:27:11:65:
         da:ee:1a:eb:0a:27:53:39:03:6d:36:3b:c0:20:ba:ee:6f:20:
         24:07:a3:54:1b:2b:8c:b3:a7:0d:4f:48:b7:6e:b2:a7:83:3e:
         bc:dd:95:77:18:57:5d:bb:69:84:09:40:49:48:24:c1:1b:f1:
         70:60:57:b2:84:ed:91:26:28:3c:1e:77:9e:b5:66:df:7f:8b:
         54:5a:35:e1:c1:89:76:32:46:84:48:41:ca:14:5f:88:8c:9e:
         3e:55:c5:16:da:bd:2d:f4:ef:17:46:5e:15:88:9d:b5:22:1c:
         1d:a1:60:cd:01:e6:26:7f:91:d0:3e:61:7e:5a:96:2b:e2:2b:
         8e:eb:21:00:11:68:80:25:15:30:a7:8c:e3:5d:73:74:a0:9a:
         cb:df:4b:d8:0a:97:0d:26:56:ab:a6:87:84:d6:97:b0:05:1d:
         41:9f:fb:5c:fe:56:cc:ec:da:26:5b:41:4c:e5:b6:36:ab:28:
         b2:30:74:d5:22:bd:d2:34:0d:85:bb:c5:1b:a1:e7:e1:c3:f5:
         e8:5b:af:a9:e9:34:f0:e6:3f:38:20:54:6f:88:fc:cd:82:bc:
         f7:e5:66:8f:51:9c:ed:99:d0:5a:98:af:89:23:12:ca:14:1c:
         c6:5e:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 00:23:33 2024 by rpki-client on console-ams.rpki-client.org