Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233382e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233382e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          nlUqF80OmcgQV8/2VOHhO76yP3rErnurHVsA2qAWnBE=
Subject key identifier:   96:00:21:4C:F4:84:29:DD:B6:1B:53:52:EB:8A:82:18:10:43:23:62
Certificate issuer:       /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial:       3557FD65055BEC0C92FDDB8AF3008497443DC2C7
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233382e302f32342d3234203d3e203631393130.roa
Signing time:             Wed 03 Apr 2024 21:03:43 +0000
ROA not before:           Wed 03 Apr 2024 20:58:43 +0000
ROA not after:            Wed 02 Apr 2025 21:03:43 +0000
asID:                     61910
IP address blocks:        201.87.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 18:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:57:fd:65:05:5b:ec:0c:92:fd:db:8a:f3:00:84:97:44:3d:c2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
        Validity
            Not Before: Apr  3 20:58:43 2024 GMT
            Not After : Apr  2 21:03:43 2025 GMT
        Subject: CN=9600214CF48429DDB61B5352EB8A821810432362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:54:c3:99:e2:fd:f3:7a:72:32:7a:b8:7d:
                    ab:95:58:17:9a:63:ed:82:2b:f1:67:63:f4:fe:98:
                    d2:3d:49:1a:74:4c:5e:d2:35:a9:fe:4e:dc:dd:3e:
                    ff:fb:7e:3e:0c:3f:eb:18:2a:2a:0b:05:a5:56:f7:
                    e5:bd:bc:22:bf:86:13:81:94:aa:7c:3e:7a:e2:8d:
                    3d:a9:90:4b:15:a2:38:4e:83:fc:79:9d:76:dd:4d:
                    f9:72:a7:5a:63:5d:d4:06:88:84:8e:bd:c1:75:6a:
                    c7:f3:0a:42:c0:32:c2:a9:3b:e3:33:df:45:6b:88:
                    d9:29:87:95:09:e7:ae:e0:68:b0:94:78:fc:5e:38:
                    5e:0c:e1:66:e5:f2:66:07:56:29:47:10:89:ba:c5:
                    ee:2e:20:00:2c:ca:ed:d5:18:ad:e8:a5:cb:76:ff:
                    ac:7b:19:e7:7a:14:14:d2:a4:dd:bb:3e:2f:79:fe:
                    ec:ce:31:90:9b:f4:ca:ed:0f:35:5f:fe:2c:73:6a:
                    b1:f2:7b:da:b9:cf:5c:fd:e8:24:8f:33:61:c0:50:
                    44:79:7d:78:d8:94:da:82:41:f1:6d:48:cb:94:c1:
                    6b:a4:95:f6:6d:03:04:41:83:99:a8:62:89:6c:b1:
                    70:3c:9c:f5:db:34:a2:1f:a6:21:cc:16:43:52:91:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:00:21:4C:F4:84:29:DD:B6:1B:53:52:EB:8A:82:18:10:43:23:62
            X509v3 Authority Key Identifier:
                keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233382e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:88:fb:2a:36:14:81:51:1d:eb:5e:80:87:00:df:97:65:bb:
         da:53:87:46:35:7e:a1:85:6d:47:64:69:81:85:24:c3:c0:2b:
         5b:19:7a:82:ed:93:25:0b:8e:f7:af:1c:93:70:6c:65:ae:f7:
         45:ed:fc:a8:03:6c:db:54:bc:42:61:29:1f:73:da:67:03:dd:
         87:23:b3:e8:68:53:33:10:84:49:ed:53:57:b5:aa:ae:26:a8:
         1a:b1:88:9b:13:89:2a:cf:d8:b0:e4:90:48:46:9f:ce:b4:a3:
         fa:bb:c0:f5:63:64:bb:55:ed:d5:b5:2c:58:23:d5:b4:68:b3:
         cc:07:0a:83:23:58:c5:1d:98:37:29:2b:17:7a:7f:87:24:05:
         7e:36:71:5b:50:7d:0d:3b:fa:a1:1b:b4:b7:4e:a9:4e:5b:e7:
         84:0a:44:84:38:e6:45:a7:d7:fe:22:53:31:64:10:35:7f:55:
         d2:0d:1d:ed:58:10:bc:33:af:2f:be:6c:46:55:21:a6:15:ca:
         5e:39:98:1b:f2:34:0d:e5:f7:4c:0d:58:fc:57:27:df:a0:b2:
         81:2e:9d:3b:a3:4a:c7:b8:e2:a7:49:25:4a:bf:39:3f:08:fa:
         ae:8d:76:34:1a:c6:2d:f2:11:20:38:ae:31:b0:9f:34:2d:d3:
         83:1b:29:3f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNVf9ZQVb7AyS/duK8wCEl0Q9wscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFCMzM5QUUxRTIzNEJBQUIyNkQ0RkUxQ0Q1Q0JDMzRC
QTRBNUIxQTAeFw0yNDA0MDMyMDU4NDNaFw0yNTA0MDIyMTAzNDNaMDMxMTAvBgNV
BAMTKDk2MDAyMTRDRjQ4NDI5RERCNjFCNTM1MkVCOEE4MjE4MTA0MzIzNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrelTDmeL983pyMnq4fauVWBea
Y+2CK/FnY/T+mNI9SRp0TF7SNan+TtzdPv/7fj4MP+sYKioLBaVW9+W9vCK/hhOB
lKp8PnrijT2pkEsVojhOg/x5nXbdTflyp1pjXdQGiISOvcF1asfzCkLAMsKpO+Mz
30VriNkph5UJ567gaLCUePxeOF4M4Wbl8mYHVilHEIm6xe4uIAAsyu3VGK3opct2
/6x7Ged6FBTSpN27Pi95/uzOMZCb9MrtDzVf/ixzarHye9q5z1z96CSPM2HAUER5
fXjYlNqCQfFtSMuUwWuklfZtAwRBg5moYolssXA8nPXbNKIfpiHMFkNSkUJzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlgAhTPSEKd22G1NS64qCGBBDI2IwHwYDVR0j
BBgwFoAUwbM5rh4jS6qybU/hzVy8NLpKWxowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZvaDc5V1o1RmdHOVhTYjhyTXV1eEVTZXd6ZUhMb2t5aDNpVk0xeldr
aWsvMi9DMUIzMzlBRTFFMjM0QkFBQjI2RDRGRTFDRDVDQkMzNEJBNEE1QjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxQjMzOUFFMUUyMzRCQUFC
MjZENEZFMUNENUNCQzM0QkE0QTVCMUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jmb2g3OVdaNUZnRzlYU2I4ck11dXhFU2V3emVITG9reWgzaVZNMXpXa2lrLzIv
MzIzMDMxMmUzODM3MmUzMjMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzkzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyVfuMA0GCSqGSIb3DQEBCwUAA4IBAQBhiPsqNhSB
UR3rXoCHAN+XZbvaU4dGNX6hhW1HZGmBhSTDwCtbGXqC7ZMlC473rxyTcGxlrvdF
7fyoA2zbVLxCYSkfc9pnA92HI7PoaFMzEIRJ7VNXtaquJqgasYibE4kqz9iw5JBI
Rp/OtKP6u8D1Y2S7Ve3VtSxYI9W0aLPMBwqDI1jFHZg3KSsXen+HJAV+NnFbUH0N
O/qhG7S3TqlOW+eECkSEOOZFp9f+IlMxZBA1f1XSDR3tWBC8M68vvmxGVSGmFcpe
OZgb8jQN5fdMDVj8VyffoLKBLp07o0rHuOKnSSVKvzk/CPqujXY0GsYt8hEgOK4x
sJ80LdODGyk/
-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:33 2024 by rpki-client on console-ams.rpki-client.org