Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/3136382e3139342e3232322e302f32342d3234203d3e20323635343132.roa
File:                     3136382e3139342e3232322e302f32342d3234203d3e20323635343132.roa (raw, json)
Hash identifier:          Hc6cJXQkQDg/5R9HX73/Q+aWsPCqGuv5OxG8kCqCBlo=
Subject key identifier:   0E:F8:34:DC:E4:FE:0E:19:77:EF:88:65:EB:E1:33:2A:A5:A1:7E:72
Certificate issuer:       /CN=F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6
Certificate serial:       4289752039DEEAC7176071B49EC9C269A14A6260
Authority key identifier: F5:32:C3:FA:CC:86:AB:1E:10:18:2A:73:1C:EE:5C:6E:32:C7:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/3136382e3139342e3232322e302f32342d3234203d3e20323635343132.roa
Signing time:             Wed 24 Apr 2024 20:08:47 +0000
ROA not before:           Wed 24 Apr 2024 20:03:47 +0000
ROA not after:            Wed 23 Apr 2025 20:08:47 +0000
asID:                     265412
IP address blocks:        168.194.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:89:75:20:39:de:ea:c7:17:60:71:b4:9e:c9:c2:69:a1:4a:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6
        Validity
            Not Before: Apr 24 20:03:47 2024 GMT
            Not After : Apr 23 20:08:47 2025 GMT
        Subject: CN=0EF834DCE4FE0E1977EF8865EBE1332AA5A17E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:9a:ec:11:e2:3c:33:1e:6b:e3:93:36:84:
                    3d:74:f5:74:e6:00:ab:9f:4e:70:27:69:da:d8:ee:
                    44:29:ba:31:8f:b5:6e:76:36:05:db:bb:83:44:98:
                    d1:00:1b:fb:7c:39:a8:20:f9:56:ed:db:1e:39:8a:
                    d8:d7:83:41:08:66:81:c3:49:5d:fc:d0:12:83:78:
                    0a:e1:99:79:42:8a:ad:39:1f:5a:29:ee:dd:7c:27:
                    8c:e2:74:aa:c3:1e:c8:62:74:51:52:e2:a4:bd:fa:
                    75:f9:9c:96:e7:54:cb:99:9c:29:cc:cb:77:72:08:
                    26:af:1c:6d:dd:c3:b1:2c:ce:1b:bc:1a:cf:aa:7e:
                    71:0d:b1:1a:23:af:cf:c3:13:80:ef:65:3f:5a:0c:
                    da:4a:ab:86:54:0e:21:4e:d1:44:f5:09:17:da:52:
                    dc:32:60:74:f7:36:26:99:90:16:6c:af:06:fa:0d:
                    08:46:3f:25:ff:42:37:4b:30:15:bb:4d:92:e8:b5:
                    84:6d:88:ec:e1:58:a5:51:e2:3c:94:53:03:4a:4b:
                    b9:aa:e1:40:1e:fa:a6:34:d6:ae:82:87:28:53:68:
                    fc:7d:11:74:31:01:88:df:44:ce:53:52:50:b8:2d:
                    67:dd:04:25:7a:87:33:cc:87:a4:30:fc:43:85:d3:
                    eb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F8:34:DC:E4:FE:0E:19:77:EF:88:65:EB:E1:33:2A:A5:A1:7E:72
            X509v3 Authority Key Identifier:
                keyid:F5:32:C3:FA:CC:86:AB:1E:10:18:2A:73:1C:EE:5C:6E:32:C7:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F532C3FACC86AB1E10182A731CEE5C6E32C7B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/3136382e3139342e3232322e302f32342d3234203d3e20323635343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:c1:a2:3e:72:98:d5:77:4b:9a:6e:e2:1e:00:e6:93:ee:86:
         4a:ff:7c:1f:75:74:e6:1d:e1:80:94:e4:7c:50:77:8a:4b:ed:
         2a:f3:5e:8b:e5:36:65:56:f1:f0:93:26:c4:e2:c2:1b:0a:e2:
         3a:39:4b:fa:f5:93:fa:4c:8c:e0:d9:6f:8f:43:f5:48:47:e3:
         03:0a:bc:5d:a6:6e:ff:87:cf:25:b5:bb:4f:4c:79:e9:d0:1c:
         d9:c0:8e:0c:cb:f0:2c:b4:dd:c2:aa:3e:b3:c5:d2:99:68:b3:
         81:6f:12:40:83:6c:4b:43:81:09:2f:62:0a:c2:9f:19:b3:0e:
         68:dc:22:2e:63:b8:38:de:11:f7:24:13:23:fb:02:bf:38:74:
         3f:ec:00:04:5e:5d:f0:7b:f0:9d:bc:db:a0:79:2f:05:ef:f7:
         38:3c:87:df:b0:87:75:88:2e:d1:e8:05:d8:75:4b:91:8a:ad:
         36:af:08:2e:64:b3:83:0b:ce:d1:3e:e9:49:05:01:ce:28:3f:
         a4:8f:38:5e:b6:9f:ee:7e:0e:25:ac:d8:e8:5b:ff:38:ad:7d:
         c2:4e:c3:ac:ad:fb:9d:86:8e:66:d2:61:a5:a5:27:5a:92:ed:
         d3:1d:43:0f:e7:89:75:38:51:66:50:68:0e:b5:18:88:48:47:
         d0:4c:86:c5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQol1IDne6scXYHG0nsnCaaFKYmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUzMkMzRkFDQzg2QUIxRTEwMTgyQTczMUNFRTVDNkUz
MkM3QjNBNjAeFw0yNDA0MjQyMDAzNDdaFw0yNTA0MjMyMDA4NDdaMDMxMTAvBgNV
BAMTKDBFRjgzNERDRTRGRTBFMTk3N0VGODg2NUVCRTEzMzJBQTVBMTdFNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2JrsEeI8Mx5r45M2hD109XTm
AKufTnAnadrY7kQpujGPtW52NgXbu4NEmNEAG/t8Oagg+Vbt2x45itjXg0EIZoHD
SV380BKDeArhmXlCiq05H1op7t18J4zidKrDHshidFFS4qS9+nX5nJbnVMuZnCnM
y3dyCCavHG3dw7Eszhu8Gs+qfnENsRojr8/DE4DvZT9aDNpKq4ZUDiFO0UT1CRfa
UtwyYHT3NiaZkBZsrwb6DQhGPyX/QjdLMBW7TZLotYRtiOzhWKVR4jyUUwNKS7mq
4UAe+qY01q6ChyhTaPx9EXQxAYjfRM5TUlC4LWfdBCV6hzPMh6Qw/EOF0+u3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDvg03OT+Dhl374hl6+EzKqWhfnIwHwYDVR0j
BBgwFoAU9TLD+syGqx4QGCpzHO5cbjLHs6YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm1UczdSYng2Tm01Sm9zZldKWnp1WXV1cUhvZzR0R0d6R2J2SmExWnV4
OFgvMC9GNTMyQzNGQUNDODZBQjFFMTAxODJBNzMxQ0VFNUM2RTMyQzdCM0E2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1MzJDM0ZBQ0M4NkFCMUUx
MDE4MkE3MzFDRUU1QzZFMzJDN0IzQTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JtVHM3UmJ4Nk5tNUpvc2ZXSlp6dVl1dXFIb2c0dEdHekdidkphMVp1eDhYLzAv
MzEzNjM4MmUzMTM5MzQyZTMyMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjC3jANBgkqhkiG9w0BAQsFAAOCAQEAR8Gi
PnKY1XdLmm7iHgDmk+6GSv98H3V05h3hgJTkfFB3ikvtKvNei+U2ZVbx8JMmxOLC
GwriOjlL+vWT+kyM4Nlvj0P1SEfjAwq8XaZu/4fPJbW7T0x56dAc2cCODMvwLLTd
wqo+s8XSmWizgW8SQINsS0OBCS9iCsKfGbMOaNwiLmO4ON4R9yQTI/sCvzh0P+wA
BF5d8HvwnbzboHkvBe/3ODyH37CHdYgu0egF2HVLkYqtNq8ILmSzgwvO0T7pSQUB
zig/pI84Xraf7n4OJazY6Fv/OK19wk7DrK37nYaOZtJhpaUnWpLt0x1DD+eJdThR
ZlBoDrUYiEhH0EyGxQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org