Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32302d3233203d3e20323632373932.roa
File:                     3230312e37362e39362e302f32302d3233203d3e20323632373932.roa (raw, json)
Hash identifier:          JSC7/ovUF3V2XNwjcvongCPUNuzXsThZCK+ZWxOgWsU=
Subject key identifier:   55:7D:70:29:CF:03:80:02:78:FF:64:03:5F:7A:9F:1F:87:9D:59:9D
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       5B067FF810E84E4E7400C9696F1F03834EBE495D
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32302d3233203d3e20323632373932.roa
Signing time:             Tue 01 Oct 2024 18:34:51 +0000
ROA not before:           Tue 01 Oct 2024 18:29:51 +0000
ROA not after:            Tue 30 Sep 2025 18:34:51 +0000
asID:                     262792
IP address blocks:        201.76.96.0/20 maxlen: 23

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 18:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:06:7f:f8:10:e8:4e:4e:74:00:c9:69:6f:1f:03:83:4e:be:49:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Oct  1 18:29:51 2024 GMT
            Not After : Sep 30 18:34:51 2025 GMT
        Subject: CN=557D7029CF03800278FF64035F7A9F1F879D599D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:4a:bd:ed:bc:8a:7f:a0:05:e2:c2:f7:01:
                    cd:ef:be:82:5c:b6:63:8c:44:0d:91:c5:12:bf:60:
                    3a:20:5f:78:b0:84:49:32:eb:52:51:dc:b1:0f:c3:
                    b1:c1:50:39:ba:ad:4d:20:9d:ae:2c:ee:65:97:4c:
                    13:7d:ac:88:47:53:d3:06:e9:59:1a:ca:f3:d1:4d:
                    0b:71:50:97:dc:50:0e:ba:ba:0b:51:d8:93:49:83:
                    fa:70:9a:c5:88:d5:b9:60:03:e2:8b:1d:3d:8c:7b:
                    10:53:8f:fa:2c:b5:13:1b:6c:e4:de:0f:50:b2:56:
                    aa:f0:2f:54:ca:d6:b1:15:ae:01:7d:e1:27:55:16:
                    ae:3d:93:48:ad:41:a4:9c:1e:89:0b:fe:e2:a0:18:
                    f7:f1:d0:e1:96:93:e3:04:e6:08:ef:80:bd:69:4f:
                    a1:95:7e:4d:51:6c:5d:a0:1d:8a:8e:81:7d:d7:f0:
                    cc:55:05:b5:85:e1:8b:9c:41:cd:93:b3:c5:f5:6a:
                    fa:20:e9:1e:f3:8d:fa:66:7b:3e:94:ad:9a:8a:fc:
                    a0:11:a9:60:79:f2:ff:8a:76:df:6e:54:74:3f:6a:
                    36:cb:65:42:c6:3d:a0:86:3e:c6:3c:ca:9d:53:74:
                    42:7d:cb:58:fc:61:36:0d:4f:7f:d7:35:bb:29:7d:
                    7d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7D:70:29:CF:03:80:02:78:FF:64:03:5F:7A:9F:1F:87:9D:59:9D
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32302d3233203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:93:54:21:26:ab:c4:bb:a7:8b:80:1c:58:94:0e:d7:6a:1c:
         14:06:04:84:b8:14:1f:25:a7:fe:b7:38:80:35:e0:99:a1:a9:
         f2:3e:4f:6d:56:ee:43:96:d4:b5:c9:fc:f5:c9:09:3a:56:1d:
         88:87:af:b9:22:6a:56:ef:44:04:d8:b3:e1:b2:49:e1:63:75:
         d3:35:65:3a:57:5a:f6:32:57:3a:1d:0c:49:8e:3b:ed:f8:fe:
         8c:03:7f:6c:df:1f:ba:de:0b:ce:2c:e4:01:a7:62:04:e4:63:
         9e:f2:af:02:aa:00:a3:cf:4a:9e:e9:ff:34:0c:89:24:0e:21:
         bf:7b:98:39:76:5b:d2:84:89:38:d0:8d:e6:5c:6e:48:2e:c1:
         3f:66:89:e2:83:7a:1c:22:00:ea:9b:46:e6:c6:30:43:66:ea:
         5e:4f:d3:45:fc:92:a8:eb:7b:7d:49:ba:4e:ba:3e:14:31:55:
         18:c8:63:da:00:b6:26:72:a0:3e:c8:8d:c4:6b:32:b7:90:b5:
         55:4b:64:7a:28:63:cd:6a:81:b0:f3:7d:60:97:e9:39:36:24:
         d9:2b:c9:83:a4:88:3e:bb:8a:b8:4e:e0:01:66:af:7d:44:11:
         7d:b8:fc:4d:73:51:d5:0c:0b:fb:c1:98:f9:98:d4:a3:bb:ee:
         89:f6:e1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 22:05:17 2024 by rpki-client on console-ams.rpki-client.org