Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32302d3230203d3e20323632373932.roa
File:                     3230312e37362e39362e302f32302d3230203d3e20323632373932.roa (raw, json)
Hash identifier:          q2XgLy89tKG/AuP/v3Ph3m7NeIjmEc3p2/m5Vjco62o=
Subject key identifier:   66:6E:C7:9F:F0:04:07:16:4F:37:E6:42:14:D6:3C:74:8B:E9:86:D5
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       04C2A5388816D539CFC18A422C088435C5D7B152
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32302d3230203d3e20323632373932.roa
Signing time:             Thu 04 Apr 2024 11:26:03 +0000
ROA not before:           Thu 04 Apr 2024 11:21:03 +0000
ROA not after:            Thu 03 Apr 2025 11:26:03 +0000
asID:                     262792
IP address blocks:        201.76.96.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 23:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c2:a5:38:88:16:d5:39:cf:c1:8a:42:2c:08:84:35:c5:d7:b1:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Apr  4 11:21:03 2024 GMT
            Not After : Apr  3 11:26:03 2025 GMT
        Subject: CN=666EC79FF00407164F37E64214D63C748BE986D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:5a:4e:8c:c8:10:6f:c5:7a:cb:63:64:4d:
                    c1:fc:6d:35:18:83:19:22:43:fd:83:18:28:59:63:
                    ee:75:9d:c7:0a:e8:68:de:d6:93:78:f5:c0:f7:7e:
                    d3:e5:19:d8:cd:dc:06:b7:ee:39:a2:43:d2:fc:f8:
                    07:af:ed:8a:e6:98:0b:7f:88:56:b0:7a:3e:32:bf:
                    5d:7f:a6:25:05:58:d6:97:a4:bb:07:42:27:ee:f2:
                    25:35:30:7b:86:53:4b:9a:ed:9f:ab:f9:1c:0a:7e:
                    19:8b:ac:e9:6d:0a:22:2f:5a:0c:05:6d:8e:ff:27:
                    99:d4:b9:2f:b2:28:45:12:ce:f9:18:ac:53:da:a0:
                    b1:51:30:c3:7f:2f:14:b6:d3:81:5f:41:9c:c8:25:
                    62:08:dd:e0:5f:a5:d5:71:c6:79:9d:b2:f9:c1:6f:
                    d7:a0:a7:52:a5:07:39:b4:a9:30:13:20:e0:20:a8:
                    84:e5:d2:03:4c:77:23:30:5f:26:b0:68:5f:65:b6:
                    64:0f:16:8b:58:dc:2e:1f:a5:24:df:24:b6:cd:f4:
                    d7:00:94:ae:35:93:51:16:3a:7c:ed:5c:a5:8d:74:
                    f9:4f:7e:59:62:d1:40:aa:a0:d1:bf:56:a7:9f:1e:
                    d8:5b:7c:64:91:da:3a:c9:bb:98:21:bb:86:0d:bd:
                    a0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6E:C7:9F:F0:04:07:16:4F:37:E6:42:14:D6:3C:74:8B:E9:86:D5
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32302d3230203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:a5:59:b1:81:b6:b0:25:88:19:cf:a1:78:aa:15:96:dd:22:
         23:02:45:5a:ec:ca:63:f4:57:7b:4c:71:fc:e7:19:fb:62:7f:
         29:75:15:da:fd:71:5f:2b:f0:d3:80:c8:b0:01:e2:bf:5e:72:
         0a:9f:61:51:8c:b8:87:6d:2d:16:21:b4:32:07:5b:da:58:09:
         a8:c5:4d:9e:8b:65:f7:15:c6:e5:d3:98:04:79:b5:c8:a7:60:
         92:cc:4c:e0:1d:a5:cd:23:a6:9d:52:4b:00:2e:ac:ec:11:28:
         95:a5:a1:57:4e:05:1f:4b:4d:c9:19:ef:74:9a:bd:88:eb:af:
         04:75:ca:6c:c7:c1:89:f7:a1:56:a7:e0:dd:f7:77:74:e9:56:
         3e:90:c1:e4:5e:7c:03:e9:9e:84:0c:6d:0d:8c:b3:b1:16:9d:
         fe:74:93:04:bc:bb:fa:24:76:0f:6a:08:0e:d2:07:79:72:c4:
         f0:08:ac:82:b3:af:51:b1:be:c8:a9:b5:8e:4e:ab:81:11:db:
         dd:9e:1c:56:71:d1:1d:74:18:29:13:ad:2f:37:9e:9b:15:fa:
         70:9c:ab:e6:83:cc:b4:c9:96:0e:ca:b4:c3:9b:51:b5:24:16:
         24:fe:d4:18:24:21:3c:c5:55:3c:cc:cc:ea:ac:5a:b7:5b:b7:
         57:27:64:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 00:19:38 2024 by rpki-client on console-fra.rpki-client.org