Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233372e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233372e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          FAkoEikzKjGKC5fKHDONCfESZ7jCr0Q6SMeCC4XBu4E=
Subject key identifier:   6B:E6:FF:BE:B3:A2:F1:48:A7:61:28:29:62:41:06:45:E5:F1:10:A2
Certificate issuer:       /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial:       3058CBE15EB72A54A684F3AEA03A4B9157339C5D
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233372e302f32342d3234203d3e203631393130.roa
Signing time:             Wed 03 Apr 2024 21:03:44 +0000
ROA not before:           Wed 03 Apr 2024 20:58:44 +0000
ROA not after:            Wed 02 Apr 2025 21:03:44 +0000
asID:                     61910
IP address blocks:        201.87.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 18:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:58:cb:e1:5e:b7:2a:54:a6:84:f3:ae:a0:3a:4b:91:57:33:9c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
        Validity
            Not Before: Apr  3 20:58:44 2024 GMT
            Not After : Apr  2 21:03:44 2025 GMT
        Subject: CN=6BE6FFBEB3A2F148A761282962410645E5F110A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:38:a8:ef:56:54:8d:8d:85:00:c1:c0:a8:
                    ac:39:e9:4d:d9:ab:c3:e0:a4:3e:02:16:7a:ec:1b:
                    f9:44:7c:7b:70:4d:86:e9:e7:98:d8:d8:31:01:15:
                    d9:d9:79:af:d5:cd:0c:dc:85:02:e8:f5:46:a0:1f:
                    5e:22:0d:8f:a2:76:17:a5:58:ce:cb:e4:b8:3b:c5:
                    d1:56:d9:d6:01:e6:ac:07:6d:67:0d:4f:e9:48:2e:
                    85:df:d0:c1:6a:8e:f6:d3:fa:0b:ce:cd:2d:24:e8:
                    b1:25:eb:06:f3:9d:38:e7:9b:1f:84:5a:78:0f:4e:
                    6a:ce:6d:06:ea:c2:d8:e3:79:1e:5b:20:b3:c7:5b:
                    3a:bd:13:d3:94:bb:cc:aa:8d:e3:48:d2:c7:df:0f:
                    f4:47:fd:a7:1c:19:eb:66:de:fa:5d:6c:25:0a:a3:
                    9f:63:4e:78:be:81:85:8a:53:fa:5d:68:c9:aa:e5:
                    0d:4a:68:e1:5f:e9:cb:e1:8e:10:30:f1:d6:24:4c:
                    5f:81:15:0b:44:94:ed:98:7d:a9:a5:43:71:2f:20:
                    c6:46:b5:b2:58:85:c7:d2:89:b0:d3:20:82:32:bc:
                    ec:08:43:23:ec:07:e1:87:bb:47:38:39:f4:01:cc:
                    98:e8:68:30:b0:8b:2e:35:90:d3:ee:39:37:35:27:
                    c4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E6:FF:BE:B3:A2:F1:48:A7:61:28:29:62:41:06:45:E5:F1:10:A2
            X509v3 Authority Key Identifier:
                keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233372e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:76:e9:f3:2a:a9:33:d8:64:60:6a:00:99:7e:7d:5e:35:3a:
         a9:3d:1e:75:b7:b9:04:61:90:af:2b:dd:de:a6:ee:c2:d4:90:
         35:b6:be:e2:5d:2c:74:ee:b5:d5:ac:8f:b1:31:d4:64:31:47:
         82:d9:d8:a7:b2:47:45:ae:f5:7b:fa:f3:9c:63:5e:45:4e:03:
         ef:f2:d9:9e:86:af:62:d1:2b:05:53:18:50:de:f7:0e:44:dd:
         70:34:63:c8:7e:f1:28:0f:e2:20:6e:a1:e9:b2:67:7e:1a:c4:
         eb:63:12:14:cf:fa:5f:cc:3c:1b:3e:4f:04:fb:f8:a2:8f:3f:
         2f:ac:8c:6b:15:02:21:13:09:63:7e:cf:f5:20:50:2c:b5:38:
         7c:d5:63:35:d0:7f:cd:3b:18:08:2a:cd:7b:33:59:56:70:28:
         23:63:1a:99:00:99:ee:8f:0b:1f:71:79:d3:d1:8d:d8:6f:01:
         9b:28:72:f0:ec:70:f5:b4:3e:5a:21:99:76:f7:1d:fc:fc:7a:
         6a:0b:bc:d4:46:33:14:6c:c4:f2:c5:21:e3:b0:e9:48:27:6a:
         9f:73:30:53:88:29:42:05:0f:34:38:5a:bb:93:5e:e2:72:69:
         be:d0:83:2c:3d:58:9b:99:87:7d:b7:00:55:37:3a:d6:37:f6:
         11:46:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:33 2024 by rpki-client on console-ams.rpki-client.org