Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/3136382e39302e3230342e302f32342d3234203d3e20323635323930.roa
File:                     3136382e39302e3230342e302f32342d3234203d3e20323635323930.roa (raw, json)
Hash identifier:          r/yVZKAcFgSTnYqGlr10Zs9P4e0mEpuQLWkrcu+LYkY=
Subject key identifier:   9B:F2:D7:02:E7:75:A5:84:C8:42:32:09:14:3D:01:05:EF:50:2F:25
Certificate issuer:       /CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
Certificate serial:       057214232C219178B52F5086D46C0FF01CA05660
Authority key identifier: D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/3136382e39302e3230342e302f32342d3234203d3e20323635323930.roa
Signing time:             Wed 24 Apr 2024 12:06:36 +0000
ROA not before:           Wed 24 Apr 2024 12:01:36 +0000
ROA not after:            Wed 23 Apr 2025 12:06:36 +0000
asID:                     265290
IP address blocks:        168.90.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 May 2024 11:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:72:14:23:2c:21:91:78:b5:2f:50:86:d4:6c:0f:f0:1c:a0:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
        Validity
            Not Before: Apr 24 12:01:36 2024 GMT
            Not After : Apr 23 12:06:36 2025 GMT
        Subject: CN=9BF2D702E775A584C8423209143D0105EF502F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e1:d7:9d:fc:0e:d9:a5:f9:c6:55:0d:dd:04:
                    6f:d2:1a:67:13:b9:b2:38:de:1d:84:d0:a8:1e:2d:
                    96:a5:5e:4f:a7:37:48:b7:08:04:11:57:ca:ba:cf:
                    37:50:99:34:28:15:0c:f7:be:1f:7e:0a:17:c3:1e:
                    49:11:53:ec:25:75:7e:bc:69:cf:59:2b:50:8b:b9:
                    92:b8:ef:33:98:01:25:9f:95:3f:eb:61:8c:fe:0b:
                    e0:58:9b:fe:59:44:7b:4f:df:ba:10:6a:86:a2:aa:
                    52:56:3a:06:d7:72:05:57:48:57:73:77:b3:8e:f2:
                    c7:27:93:6e:11:e7:48:16:d5:ea:5e:4a:bf:06:dc:
                    6e:08:7c:d8:0e:fa:02:1d:46:a2:d1:83:2f:c2:f4:
                    0c:d8:d7:a6:f7:f8:b7:fb:e4:05:a3:ec:0e:0f:f3:
                    ad:6b:f8:19:b4:b7:13:62:2e:0a:13:86:27:b9:9b:
                    4a:84:a7:44:41:6a:9f:ef:a0:e0:49:6f:d5:0f:c5:
                    92:a8:43:0f:f6:03:32:65:33:69:dc:7a:23:90:21:
                    85:b2:c2:f3:42:22:7b:ad:ef:bc:89:4b:d4:89:e0:
                    95:d2:bf:e5:a6:c9:ba:19:2c:3f:3e:7c:7e:2f:bf:
                    76:af:86:46:d4:15:1b:de:96:1d:62:d3:98:ca:ea:
                    8a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F2:D7:02:E7:75:A5:84:C8:42:32:09:14:3D:01:05:EF:50:2F:25
            X509v3 Authority Key Identifier:
                keyid:D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/3136382e39302e3230342e302f32342d3234203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:fb:bb:b0:50:e5:1a:bb:b7:a4:e1:fb:2e:4a:aa:82:b8:64:
         6d:cb:05:25:68:7c:59:32:83:d4:7f:a1:e6:4a:df:b1:f4:7a:
         5d:3e:bd:35:58:b2:eb:52:4c:3b:c6:65:8a:d6:c9:e2:58:a2:
         93:8c:17:06:4b:c3:c1:9a:5c:33:d8:c4:6c:7a:03:09:22:ce:
         7f:78:9c:8d:a1:4f:6e:af:5b:19:64:f3:96:42:bf:5b:50:9d:
         3d:8e:f0:04:76:61:11:6c:42:e8:af:be:9b:6f:a0:26:d7:cb:
         8e:83:be:c0:83:66:da:03:0a:d4:c3:04:b2:4e:8c:a3:63:1f:
         66:6c:51:f1:69:8a:e8:30:c1:41:f3:98:47:a3:70:51:57:a2:
         32:7a:1f:0f:5b:7c:cd:3f:9c:56:65:81:a9:63:33:2a:ac:cf:
         31:fd:a7:1c:9f:a3:78:b3:e2:f7:63:2b:08:69:c8:91:3b:7f:
         44:d6:30:db:9d:12:02:79:76:14:26:fc:d2:18:9f:f8:42:b8:
         79:3b:db:26:f9:12:d5:be:2e:b6:16:14:66:ff:a4:ef:6d:65:
         bb:c0:da:26:5e:45:e5:e9:6a:a5:51:15:3c:72:0f:55:af:86:
         25:ba:ac:13:e1:45:f8:44:e4:32:e5:9a:2c:f0:fb:29:5f:72:
         61:39:91:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBXIUIywhkXi1L1CG1GwP8BygVmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDczQjZFQjlCOTcyRDVGM0I3MzUzQTMyQkJGMTFDQURC
NjIwN0QzODAeFw0yNDA0MjQxMjAxMzZaFw0yNTA0MjMxMjA2MzZaMDMxMTAvBgNV
BAMTKDlCRjJENzAyRTc3NUE1ODRDODQyMzIwOTE0M0QwMTA1RUY1MDJGMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4ded/A7ZpfnGVQ3dBG/SGmcT
ubI43h2E0KgeLZalXk+nN0i3CAQRV8q6zzdQmTQoFQz3vh9+ChfDHkkRU+wldX68
ac9ZK1CLuZK47zOYASWflT/rYYz+C+BYm/5ZRHtP37oQaoaiqlJWOgbXcgVXSFdz
d7OO8scnk24R50gW1epeSr8G3G4IfNgO+gIdRqLRgy/C9AzY16b3+Lf75AWj7A4P
861r+Bm0txNiLgoThie5m0qEp0RBap/voOBJb9UPxZKoQw/2AzJlM2nceiOQIYWy
wvNCInut77yJS9SJ4JXSv+WmyboZLD8+fH4vv3avhkbUFRvelh1i05jK6oqLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUm/LXAud1pYTIQjIJFD0BBe9QLyUwHwYDVR0j
BBgwFoAU1ztuubly1fO3NToyu/EcrbYgfTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVluWFFHM1pXRVJqbW50Z3lIWDdSQXAxSHhRY24zSmhERDV2VXpSWVRS
UUsvMi9ENzNCNkVCOUI5NzJENUYzQjczNTNBMzJCQkYxMUNBREI2MjA3RDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3M0I2RUI5Qjk3MkQ1RjNC
NzM1M0EzMkJCRjExQ0FEQjYyMDdEMzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZblhRRzNaV0VSam1udGd5SFg3UkFwMUh4UWNuM0poREQ1dlV6UllUUlFLLzIv
MzEzNjM4MmUzOTMwMmUzMjMwMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMjM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoWswwDQYJKoZIhvcNAQELBQADggEBAMr7u7BQ
5Rq7t6Th+y5KqoK4ZG3LBSVofFkyg9R/oeZK37H0el0+vTVYsutSTDvGZYrWyeJY
opOMFwZLw8GaXDPYxGx6Awkizn94nI2hT26vWxlk85ZCv1tQnT2O8AR2YRFsQuiv
vptvoCbXy46DvsCDZtoDCtTDBLJOjKNjH2ZsUfFpiugwwUHzmEejcFFXojJ6Hw9b
fM0/nFZlgaljMyqszzH9pxyfo3iz4vdjKwhpyJE7f0TWMNudEgJ5dhQm/NIYn/hC
uHk72yb5EtW+LrYWFGb/pO9tZbvA2iZeReXpaqVRFTxyD1WvhiW6rBPhRfhE5DLl
mizw+ylfcmE5kfg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org