Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233322e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233322e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          hSpfMkrkaEnu3eq/hdWsRcUjX+vtFB5md+1sGMMqeXQ=
Subject key identifier:   30:EB:BA:8F:23:66:E8:FE:93:85:D5:30:11:53:CD:9F:5F:3D:83:13
Certificate issuer:       /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial:       44B8C9442CA060FA60D8813B049932D7399FFAC2
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233322e302f32342d3234203d3e203631393130.roa
Signing time:             Wed 03 Apr 2024 21:03:44 +0000
ROA not before:           Wed 03 Apr 2024 20:58:44 +0000
ROA not after:            Wed 02 Apr 2025 21:03:44 +0000
asID:                     61910
IP address blocks:        201.87.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 18:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b8:c9:44:2c:a0:60:fa:60:d8:81:3b:04:99:32:d7:39:9f:fa:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
        Validity
            Not Before: Apr  3 20:58:44 2024 GMT
            Not After : Apr  2 21:03:44 2025 GMT
        Subject: CN=30EBBA8F2366E8FE9385D5301153CD9F5F3D8313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:9d:7b:49:76:af:e4:4a:54:89:fd:d4:dc:
                    37:71:97:09:b7:98:bc:b0:c2:23:02:54:b3:f6:59:
                    fb:f5:48:5d:59:d3:10:cc:a5:84:cf:1b:02:f8:79:
                    27:b2:4b:9c:3d:ad:2a:71:a2:c8:06:15:b6:ca:76:
                    fd:df:8c:20:95:2c:36:c5:d5:21:25:38:44:51:eb:
                    b1:e8:19:fe:41:e1:91:27:ab:f3:ee:ea:8b:85:b1:
                    49:8a:e7:e2:ce:89:2a:fe:ee:22:96:9c:d8:3c:e1:
                    b9:a0:ec:39:32:64:ba:d0:11:e4:06:15:8b:b5:db:
                    f7:f8:3b:bc:5d:66:a6:cd:e3:90:5c:e8:49:5d:17:
                    b1:bf:6f:16:a6:e5:9c:4f:02:2d:34:02:e8:4c:a6:
                    d1:f8:5b:8e:91:a3:69:aa:bc:64:86:56:53:56:07:
                    38:69:f6:c4:44:1c:44:86:21:c0:79:74:25:78:e9:
                    ee:75:74:6c:fe:f5:f2:a3:03:c4:65:0c:72:ae:96:
                    bd:61:a3:ce:67:e2:37:c6:b4:11:1b:c1:0c:9e:a1:
                    7e:05:16:1f:de:8d:af:d9:7b:f3:7c:e3:01:e4:97:
                    49:1c:85:33:a1:9e:f3:50:31:df:bb:7e:2c:91:ca:
                    ca:4d:7b:d1:bd:58:32:b5:19:35:c2:aa:4d:8c:ea:
                    8c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EB:BA:8F:23:66:E8:FE:93:85:D5:30:11:53:CD:9F:5F:3D:83:13
            X509v3 Authority Key Identifier:
                keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233322e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:09:c1:d6:35:a9:94:71:e6:f7:26:df:5d:c4:d1:4f:93:81:
         01:00:e8:9e:b6:8d:55:a2:55:1b:ae:74:58:3e:08:50:c2:04:
         f2:fe:0e:bf:70:65:2d:a6:02:82:ef:d1:e7:62:54:45:d2:f7:
         78:59:d5:4d:ea:21:f8:7c:c6:6e:4c:1c:05:47:49:48:33:15:
         36:fd:2b:d1:a6:9f:c9:ab:2e:4c:71:a5:73:35:e9:a0:cb:d6:
         cc:be:c4:fe:34:aa:91:e1:78:d2:ca:fa:1a:fc:4c:09:ca:86:
         4e:3d:71:02:7b:8f:a4:1d:82:7d:8c:a9:c6:22:b6:d0:df:5b:
         f1:4a:8a:95:bc:21:7c:40:8c:85:f0:87:08:73:ef:88:49:d6:
         22:0d:d7:1c:e6:4c:cb:0b:c7:f2:a0:60:72:a7:74:4e:51:04:
         95:4a:22:77:1e:c8:0b:7a:ce:ef:e9:cb:dc:15:98:e9:a3:ff:
         94:61:42:bc:27:c0:99:70:00:4e:d9:3d:d2:c5:89:3f:51:75:
         f3:96:be:b5:16:b1:8b:cf:ea:be:34:e5:a6:3a:a3:42:66:7c:
         72:4e:20:f7:bb:09:0f:92:2c:d4:f1:9a:da:06:e2:90:84:c6:
         af:88:e7:5b:7b:aa:d2:da:96:70:50:1c:43:12:75:53:d7:ad:
         d7:98:0d:d0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURLjJRCygYPpg2IE7BJky1zmf+sIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFCMzM5QUUxRTIzNEJBQUIyNkQ0RkUxQ0Q1Q0JDMzRC
QTRBNUIxQTAeFw0yNDA0MDMyMDU4NDRaFw0yNTA0MDIyMTAzNDRaMDMxMTAvBgNV
BAMTKDMwRUJCQThGMjM2NkU4RkU5Mzg1RDUzMDExNTNDRDlGNUYzRDgzMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6J17SXav5EpUif3U3Ddxlwm3
mLywwiMCVLP2Wfv1SF1Z0xDMpYTPGwL4eSeyS5w9rSpxosgGFbbKdv3fjCCVLDbF
1SElOERR67HoGf5B4ZEnq/Pu6ouFsUmK5+LOiSr+7iKWnNg84bmg7DkyZLrQEeQG
FYu12/f4O7xdZqbN45Bc6EldF7G/bxam5ZxPAi00AuhMptH4W46Ro2mqvGSGVlNW
Bzhp9sREHESGIcB5dCV46e51dGz+9fKjA8RlDHKulr1ho85n4jfGtBEbwQyeoX4F
Fh/eja/Ze/N84wHkl0kchTOhnvNQMd+7fiyRyspNe9G9WDK1GTXCqk2M6oxhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMOu6jyNm6P6ThdUwEVPNn189gxMwHwYDVR0j
BBgwFoAUwbM5rh4jS6qybU/hzVy8NLpKWxowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZvaDc5V1o1RmdHOVhTYjhyTXV1eEVTZXd6ZUhMb2t5aDNpVk0xeldr
aWsvMi9DMUIzMzlBRTFFMjM0QkFBQjI2RDRGRTFDRDVDQkMzNEJBNEE1QjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxQjMzOUFFMUUyMzRCQUFC
MjZENEZFMUNENUNCQzM0QkE0QTVCMUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jmb2g3OVdaNUZnRzlYU2I4ck11dXhFU2V3emVITG9reWgzaVZNMXpXa2lrLzIv
MzIzMDMxMmUzODM3MmUzMjMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzkzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyVfoMA0GCSqGSIb3DQEBCwUAA4IBAQCSCcHWNamU
ceb3Jt9dxNFPk4EBAOieto1VolUbrnRYPghQwgTy/g6/cGUtpgKC79HnYlRF0vd4
WdVN6iH4fMZuTBwFR0lIMxU2/SvRpp/Jqy5McaVzNemgy9bMvsT+NKqR4XjSyvoa
/EwJyoZOPXECe4+kHYJ9jKnGIrbQ31vxSoqVvCF8QIyF8IcIc++ISdYiDdcc5kzL
C8fyoGByp3ROUQSVSiJ3HsgLes7v6cvcFZjpo/+UYUK8J8CZcABO2T3SxYk/UXXz
lr61FrGLz+q+NOWmOqNCZnxyTiD3uwkPkizU8ZraBuKQhMaviOdbe6rS2pZwUBxD
EnVT163XmA3Q
-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:33 2024 by rpki-client on console-ams.rpki-client.org