Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233332e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233332e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          t+YWj0rpmU4hWL4ZXiHiGvlXdRn/6FLmYZDhTAu/F2A=
Subject key identifier:   21:4C:5D:64:4C:6F:4F:34:CD:8F:A0:98:8D:93:3D:8C:24:E0:B5:AE
Certificate issuer:       /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial:       167ADC91F029D0F271656E20A4024CFACEEB2A87
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233332e302f32342d3234203d3e203631393130.roa
Signing time:             Wed 03 Apr 2024 21:03:44 +0000
ROA not before:           Wed 03 Apr 2024 20:58:44 +0000
ROA not after:            Wed 02 Apr 2025 21:03:44 +0000
asID:                     61910
IP address blocks:        201.87.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 18:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7a:dc:91:f0:29:d0:f2:71:65:6e:20:a4:02:4c:fa:ce:eb:2a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
        Validity
            Not Before: Apr  3 20:58:44 2024 GMT
            Not After : Apr  2 21:03:44 2025 GMT
        Subject: CN=214C5D644C6F4F34CD8FA0988D933D8C24E0B5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c8:44:7d:e2:d3:51:86:86:eb:c5:ea:38:04:
                    c0:d4:62:b5:be:ba:f2:3c:77:7b:51:b8:9b:4e:46:
                    10:7e:1b:66:c0:75:4d:56:4c:7a:2b:be:2d:fe:b3:
                    c1:e7:11:a9:ac:ae:3d:3f:63:0a:bd:d6:47:5e:b9:
                    6a:78:dd:e8:bb:93:df:54:c8:52:f6:0b:a4:3c:61:
                    c8:8f:f2:9c:5f:01:05:6d:9c:0f:75:af:d9:09:2f:
                    fb:dc:6f:ad:ab:03:83:ad:2c:a8:15:47:df:f8:b1:
                    d5:72:c7:fb:3d:53:89:1f:bb:0d:2a:97:0b:07:bb:
                    31:fa:89:8d:4b:41:84:57:49:6c:3a:be:78:dd:9d:
                    03:10:ef:b1:f2:04:d7:3d:ce:44:09:55:3a:74:22:
                    fd:db:1d:3c:44:e1:aa:5c:a0:5d:65:1d:32:2c:cf:
                    77:b7:cc:68:de:54:fc:7e:ea:20:b5:12:65:11:7b:
                    f7:c2:fd:18:32:2d:7d:1f:64:5a:62:e1:2c:81:1b:
                    80:f0:d4:73:ca:02:d1:e1:68:f2:95:fd:24:3c:0a:
                    c4:21:71:5e:7f:03:fc:d0:d0:3b:9b:4d:9a:f5:a7:
                    31:6b:0d:1a:1f:f2:f9:3b:c8:a9:27:00:7e:7f:58:
                    38:3e:fe:5c:78:8d:9e:59:c6:94:2e:c7:a1:b9:8d:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4C:5D:64:4C:6F:4F:34:CD:8F:A0:98:8D:93:3D:8C:24:E0:B5:AE
            X509v3 Authority Key Identifier:
                keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233332e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:3e:4f:fd:8b:bb:ac:8c:78:79:30:90:b7:e6:a7:ba:79:2e:
         42:f9:9f:19:2a:fa:bf:e8:3b:12:df:62:85:bf:be:14:8e:b0:
         af:d1:49:60:9b:ae:8f:ec:5f:1c:42:71:a8:04:19:60:1b:e7:
         97:cf:75:94:15:56:6a:ab:01:71:9b:5f:b4:89:fd:56:c3:8d:
         06:65:62:58:4b:a7:d6:45:79:ee:3c:01:a0:a9:ef:bc:cd:2a:
         73:2d:db:d5:1e:74:c8:be:1f:19:67:ea:d2:0e:af:a3:14:2f:
         a7:33:27:94:7b:af:42:98:2f:c6:b6:0f:22:2a:b8:da:f5:3b:
         fd:e8:3d:31:64:47:75:83:4d:61:6b:c4:44:d5:b2:2c:59:15:
         57:e4:ae:92:73:3f:49:1f:c6:5a:59:5b:44:84:a6:52:f7:90:
         66:56:15:1c:a3:b5:62:17:aa:33:1e:06:8e:97:28:d0:6d:64:
         50:5f:4f:1b:15:11:53:d3:10:fc:76:49:fb:6a:25:7e:c0:fb:
         af:76:0a:d1:12:8f:55:fd:c7:44:cc:12:77:ce:5d:97:97:b7:
         2f:8b:f9:05:6c:cb:98:47:09:b7:08:4f:70:0f:b3:7c:a3:eb:
         11:a1:77:c7:48:81:39:11:1e:47:d0:90:ff:e0:11:19:41:6a:
         0b:b8:c6:bb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFnrckfAp0PJxZW4gpAJM+s7rKocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFCMzM5QUUxRTIzNEJBQUIyNkQ0RkUxQ0Q1Q0JDMzRC
QTRBNUIxQTAeFw0yNDA0MDMyMDU4NDRaFw0yNTA0MDIyMTAzNDRaMDMxMTAvBgNV
BAMTKDIxNEM1RDY0NEM2RjRGMzRDRDhGQTA5ODhEOTMzRDhDMjRFMEI1QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdyER94tNRhobrxeo4BMDUYrW+
uvI8d3tRuJtORhB+G2bAdU1WTHorvi3+s8HnEamsrj0/Ywq91kdeuWp43ei7k99U
yFL2C6Q8YciP8pxfAQVtnA91r9kJL/vcb62rA4OtLKgVR9/4sdVyx/s9U4kfuw0q
lwsHuzH6iY1LQYRXSWw6vnjdnQMQ77HyBNc9zkQJVTp0Iv3bHTxE4apcoF1lHTIs
z3e3zGjeVPx+6iC1EmURe/fC/RgyLX0fZFpi4SyBG4Dw1HPKAtHhaPKV/SQ8CsQh
cV5/A/zQ0DubTZr1pzFrDRof8vk7yKknAH5/WDg+/lx4jZ5ZxpQux6G5jRqNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIUxdZExvTzTNj6CYjZM9jCTgta4wHwYDVR0j
BBgwFoAUwbM5rh4jS6qybU/hzVy8NLpKWxowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZvaDc5V1o1RmdHOVhTYjhyTXV1eEVTZXd6ZUhMb2t5aDNpVk0xeldr
aWsvMi9DMUIzMzlBRTFFMjM0QkFBQjI2RDRGRTFDRDVDQkMzNEJBNEE1QjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxQjMzOUFFMUUyMzRCQUFC
MjZENEZFMUNENUNCQzM0QkE0QTVCMUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jmb2g3OVdaNUZnRzlYU2I4ck11dXhFU2V3emVITG9reWgzaVZNMXpXa2lrLzIv
MzIzMDMxMmUzODM3MmUzMjMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzkzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyVfpMA0GCSqGSIb3DQEBCwUAA4IBAQCTPk/9i7us
jHh5MJC35qe6eS5C+Z8ZKvq/6DsS32KFv74UjrCv0Ulgm66P7F8cQnGoBBlgG+eX
z3WUFVZqqwFxm1+0if1Ww40GZWJYS6fWRXnuPAGgqe+8zSpzLdvVHnTIvh8ZZ+rS
Dq+jFC+nMyeUe69CmC/Gtg8iKrja9Tv96D0xZEd1g01ha8RE1bIsWRVX5K6Scz9J
H8ZaWVtEhKZS95BmVhUco7ViF6ozHgaOlyjQbWRQX08bFRFT0xD8dkn7aiV+wPuv
dgrREo9V/cdEzBJ3zl2Xl7cvi/kFbMuYRwm3CE9wD7N8o+sRoXfHSIE5ER5H0JD/
4BEZQWoLuMa7
-----END CERTIFICATE-----
Generated at Sun Sep 22 22:34:30 2024 by rpki-client on console-fra.rpki-client.org