Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233362e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233362e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          zS0pmmPSkQ5/oI50W7H7K8+UOD2JFcXkbJAg6+pMUI4=
Subject key identifier:   3F:47:72:05:B7:34:91:D8:3E:BC:80:2A:52:BC:BE:FD:ED:65:26:9A
Certificate issuer:       /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial:       3DE5E2C5BCEDC3C5F723393502A248E83121FBB2
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233362e302f32342d3234203d3e203631393130.roa
Signing time:             Wed 03 Apr 2024 21:03:43 +0000
ROA not before:           Wed 03 Apr 2024 20:58:43 +0000
ROA not after:            Wed 02 Apr 2025 21:03:43 +0000
asID:                     61910
IP address blocks:        201.87.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 18:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e5:e2:c5:bc:ed:c3:c5:f7:23:39:35:02:a2:48:e8:31:21:fb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
        Validity
            Not Before: Apr  3 20:58:43 2024 GMT
            Not After : Apr  2 21:03:43 2025 GMT
        Subject: CN=3F477205B73491D83EBC802A52BCBEFDED65269A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:70:c5:f8:9a:2f:1d:cb:b7:45:0e:42:93:
                    92:8a:e6:e5:fc:50:d9:a4:6d:c1:ad:98:7b:38:65:
                    ba:9a:fd:a5:0d:b5:22:bd:79:de:50:07:a6:8e:50:
                    e9:51:f2:b6:30:3c:5a:e7:8a:07:ee:74:14:ad:8b:
                    4d:c7:63:36:d1:bc:97:f5:cc:7e:6d:42:18:1f:27:
                    cc:33:76:a5:ec:fe:f9:7f:e9:75:a7:b1:8d:40:f9:
                    de:e4:97:df:e4:95:73:c3:9d:94:aa:26:83:ae:e2:
                    33:3a:c8:4c:47:f5:99:9a:ef:e7:a5:9d:0e:5f:b8:
                    f9:f7:e6:7b:0c:41:2d:64:d4:f1:33:9f:48:73:e4:
                    5c:a2:1a:4a:f4:7f:35:cf:2a:67:1a:1d:2f:c0:d9:
                    9b:ca:0d:49:56:d0:b6:b4:cd:78:d8:91:86:7f:b2:
                    b2:be:94:f2:4c:3a:e8:ea:8b:3b:3e:bb:fb:af:8c:
                    70:6b:ed:50:ab:ce:80:ed:a4:4d:16:e3:e6:86:0d:
                    c5:69:07:79:f6:ed:5f:20:88:7b:d9:5a:c6:65:7a:
                    b0:3f:ee:53:89:a3:c7:36:72:57:6f:5e:86:bd:5d:
                    5e:89:60:c1:31:a8:94:a3:e3:83:20:a9:d6:57:95:
                    14:96:76:78:4a:6e:8c:8f:5c:f0:b2:af:62:e2:68:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:47:72:05:B7:34:91:D8:3E:BC:80:2A:52:BC:BE:FD:ED:65:26:9A
            X509v3 Authority Key Identifier:
                keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233362e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:94:64:96:38:47:da:fa:f0:0a:27:15:36:ad:df:82:d0:2e:
         bd:00:5e:73:3a:5f:ca:52:67:d8:9c:f0:b4:a9:2b:41:d5:c4:
         e8:34:1f:c8:47:b8:2d:23:37:52:fc:97:30:29:a4:4f:78:fd:
         5f:7e:f3:0a:b7:c3:63:4e:e9:b6:00:b7:25:d1:85:5f:6f:c6:
         38:b9:66:a2:38:b5:0d:73:3f:6e:79:30:75:82:81:4b:fa:62:
         72:f8:d1:17:7e:28:69:96:0a:91:5d:3a:1c:ba:8a:74:d7:c6:
         a4:2d:c2:a0:d9:49:bf:d2:36:c8:e4:23:46:d4:c4:cc:10:3c:
         9e:19:66:8c:bd:52:46:de:ed:ca:3e:39:ad:cd:6b:65:77:a7:
         ff:f8:f4:63:64:1b:1d:46:14:f0:b1:a3:c5:9a:c2:af:5a:b2:
         9f:d3:7c:85:03:0e:d1:b0:87:2d:fc:46:88:b7:0d:86:4b:84:
         88:da:50:34:bf:36:06:d4:e6:14:03:c7:00:f0:2c:ea:d5:d2:
         7c:12:0b:41:c5:da:aa:78:90:34:2f:e4:aa:1b:7f:a1:b8:12:
         90:d7:81:14:35:ad:88:78:bf:f9:94:c1:94:14:9f:60:e8:85:
         b8:c9:d7:3f:cf:ab:9b:ff:7b:9d:14:54:6e:4a:53:3e:43:15:
         cc:2f:20:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:33 2024 by rpki-client on console-ams.rpki-client.org