Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233392e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233392e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          VFflPNZn+TxvZltg0a3h6FLGgL4FxP+l2kUYEH8jR8U=
Subject key identifier:   E9:AA:03:BB:B9:72:2D:C6:5C:74:65:09:30:92:51:0F:CA:CA:AC:B0
Certificate issuer:       /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial:       202CD04ABD888FDF203E27CC877FDE9A6D21ECDA
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233392e302f32342d3234203d3e203631393130.roa
Signing time:             Wed 03 Apr 2024 21:03:43 +0000
ROA not before:           Wed 03 Apr 2024 20:58:43 +0000
ROA not after:            Wed 02 Apr 2025 21:03:43 +0000
asID:                     61910
IP address blocks:        201.87.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 18:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2c:d0:4a:bd:88:8f:df:20:3e:27:cc:87:7f:de:9a:6d:21:ec:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
        Validity
            Not Before: Apr  3 20:58:43 2024 GMT
            Not After : Apr  2 21:03:43 2025 GMT
        Subject: CN=E9AA03BBB9722DC65C7465093092510FCACAACB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:3f:54:f9:1b:a1:4a:a9:cd:8c:85:f5:09:
                    8e:de:eb:5d:98:a6:94:26:ef:3c:af:7f:ed:03:2b:
                    e9:ec:31:a5:91:ef:cc:81:f1:d2:23:e1:e1:56:97:
                    9d:21:10:c6:3c:56:15:90:3b:2a:3a:12:d6:a5:38:
                    97:d8:e8:de:8d:22:2d:49:79:b1:c0:74:91:24:b3:
                    04:66:8a:b3:c7:fa:b4:f7:8b:71:bc:ef:8b:2d:c4:
                    6b:88:bb:62:88:82:51:7a:41:f8:8e:84:85:3b:e8:
                    15:9b:99:92:90:55:a4:32:74:f4:19:32:95:0e:1e:
                    99:d8:d2:82:b5:35:5f:3b:a9:2b:1d:14:e1:a0:e5:
                    3a:92:b5:2e:a3:c4:b0:e6:58:08:b3:1c:25:37:af:
                    46:f4:51:7e:dc:46:79:ca:c8:94:b9:49:54:b3:77:
                    39:73:57:0c:85:49:11:9d:3c:ad:e0:07:90:37:2e:
                    b3:99:b6:bc:6f:3d:9f:55:93:d5:90:51:11:df:cb:
                    08:30:e2:c6:59:4a:8f:40:7f:d2:21:2b:fc:0b:8f:
                    59:f5:28:6b:c0:40:9c:f3:87:96:29:8b:5d:52:2c:
                    f4:cd:48:b8:ed:f0:12:b3:64:3c:63:87:6d:76:c4:
                    47:cb:a2:5a:61:71:f4:f1:8f:38:fa:d8:d5:97:ac:
                    bf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AA:03:BB:B9:72:2D:C6:5C:74:65:09:30:92:51:0F:CA:CA:AC:B0
            X509v3 Authority Key Identifier:
                keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233392e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:f3:9a:3f:ed:1d:57:52:f6:bd:fe:0d:33:f0:b6:e3:d0:c2:
         f3:64:90:4d:e6:a3:c5:b2:48:43:06:4f:44:19:c7:42:4c:3b:
         8b:bb:8c:a8:1c:e0:6a:7f:da:c0:1f:52:48:c0:5b:ba:46:97:
         bd:e5:3b:ea:f4:c3:a3:49:1c:a0:29:55:e5:05:75:1c:1e:0c:
         32:4d:f4:c2:a3:0a:88:24:aa:36:36:e3:9e:14:1f:c6:a9:06:
         de:44:38:d0:3d:37:32:55:91:9b:be:ed:21:9c:a9:a9:36:44:
         51:ae:a4:37:0f:05:70:19:28:a0:15:ba:bc:00:86:21:3c:8d:
         7f:2c:b3:a4:43:44:7d:55:37:fa:36:aa:cd:ea:04:e7:a5:f1:
         3d:eb:5e:16:fa:5d:f1:de:0b:4c:32:49:9d:12:e5:d1:99:fa:
         61:3a:f8:94:43:80:c0:a8:1c:98:c9:06:15:a3:d8:f1:52:2b:
         92:93:6a:3f:6c:00:be:91:2a:b5:e1:5b:87:72:b9:cb:cf:2d:
         7f:d8:bd:9d:c0:3f:9f:de:db:fb:26:d9:93:12:1c:c6:d6:d0:
         72:2c:1b:1c:00:9f:d6:75:03:0b:98:0a:5e:98:6e:49:ce:d1:
         f4:6b:d7:85:f0:36:dd:61:03:5d:f7:25:5a:2f:0b:f3:2c:08:
         5e:1e:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:33 2024 by rpki-client on console-ams.rpki-client.org