Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32322d3232203d3e20323633343231.roa
File:                     3136382e3139352e3232302e302f32322d3232203d3e20323633343231.roa (raw, json)
Hash identifier:          1lWcogVK2ZS8+uQ75b07ElCDodntXr1kRLcBybFmvfg=
Subject key identifier:   E4:97:EF:CA:A4:81:9C:E0:71:90:D0:12:94:23:7B:C9:34:31:5A:40
Certificate issuer:       /CN=A0FF9A83436226FF19D020B34271420BD55D7D05
Certificate serial:       7F24B6EAB2B7B857A5AFAA1AD0A0DEB40FE3AE67
Authority key identifier: A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32322d3232203d3e20323633343231.roa
Signing time:             Thu 25 Jul 2024 01:01:29 +0000
ROA not before:           Thu 25 Jul 2024 00:56:29 +0000
ROA not after:            Thu 24 Jul 2025 01:01:29 +0000
asID:                     263421
IP address blocks:        168.195.220.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 13:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:24:b6:ea:b2:b7:b8:57:a5:af:aa:1a:d0:a0:de:b4:0f:e3:ae:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0FF9A83436226FF19D020B34271420BD55D7D05
        Validity
            Not Before: Jul 25 00:56:29 2024 GMT
            Not After : Jul 24 01:01:29 2025 GMT
        Subject: CN=E497EFCAA4819CE07190D01294237BC934315A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:51:33:55:0e:ae:3b:d0:34:ec:eb:66:a8:
                    71:a7:bd:3d:e2:ab:55:8f:b8:02:75:0d:4f:1f:72:
                    27:41:66:bb:a4:0e:0f:02:f9:c2:63:0c:48:4e:f9:
                    a9:05:ac:e0:e0:e7:d2:58:ff:2f:9d:6e:b8:1c:e3:
                    14:98:df:50:ae:a6:65:0a:14:32:3b:12:ba:73:82:
                    5b:e9:c0:ae:e9:02:15:97:e0:86:08:01:b4:8b:bd:
                    50:25:e2:9f:9a:38:33:1a:b3:b8:5b:da:de:fa:5b:
                    d8:af:98:d5:40:af:b9:dc:79:fe:63:9d:ab:c1:0d:
                    f1:7d:a9:a9:60:65:08:df:20:22:87:50:3b:99:85:
                    34:b1:f0:b3:90:4d:98:52:b0:ca:0c:42:8b:9a:7b:
                    04:49:18:73:81:70:74:e2:6b:35:f6:a6:08:f1:b7:
                    5f:8f:0e:bc:3c:7a:6a:9e:eb:17:39:1e:2a:87:c0:
                    2d:36:14:57:25:d3:74:67:2d:5d:7f:49:84:a3:70:
                    3d:48:eb:c6:8b:55:9a:6d:8d:db:08:66:92:7b:bb:
                    47:c7:01:22:d5:4c:e5:4d:ba:f6:de:e8:d6:85:d4:
                    88:6e:e5:41:75:2c:3e:7c:14:9b:9c:bb:44:c7:5e:
                    dd:45:68:59:cc:10:96:30:c0:a8:4d:13:30:c5:49:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:97:EF:CA:A4:81:9C:E0:71:90:D0:12:94:23:7B:C9:34:31:5A:40
            X509v3 Authority Key Identifier:
                keyid:A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/A0FF9A83436226FF19D020B34271420BD55D7D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32322d3232203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:9c:08:4f:81:3b:20:e0:31:db:12:53:b4:77:0a:57:24:4b:
         e5:2e:13:82:fd:bd:88:72:de:ec:2d:26:05:e7:e1:53:a9:90:
         2f:de:fc:29:e4:68:be:5d:23:2c:1d:25:7a:dd:a4:61:29:41:
         6d:6c:c3:26:47:b3:33:6c:d9:ea:a5:54:b8:d5:38:dd:17:c8:
         13:29:7b:76:2a:60:05:f3:00:e4:53:f3:b7:81:e8:26:f2:5e:
         17:72:ca:e1:d2:55:65:00:b3:6b:25:ad:37:0f:68:22:ca:6b:
         56:a7:52:61:12:ff:2e:a6:e1:53:3f:93:0e:30:db:58:4f:84:
         82:e5:f4:20:fe:5e:61:eb:6c:e4:c6:bc:00:fe:c9:df:02:21:
         34:8e:df:e4:c5:43:f0:96:b5:40:b1:e2:9f:8c:b3:d7:c2:bb:
         1c:5d:0c:b8:f3:d8:80:7a:be:b9:99:c1:be:14:ac:00:ec:c1:
         04:03:c5:59:b7:de:3d:8a:e9:a3:68:db:1b:8b:61:52:6e:5b:
         2e:a2:77:54:1e:0b:e7:f1:ff:15:90:be:2e:f6:71:b8:35:b3:
         6d:28:a1:df:b7:d1:83:6c:f1:ea:73:93:3a:5e:de:0e:cf:5e:
         a3:9e:c6:de:fd:9c:ac:bd:02:94:cc:56:57:b4:0a:00:76:e3:
         50:55:08:50
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfyS26rK3uFelr6oa0KDetA/jrmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBGRjlBODM0MzYyMjZGRjE5RDAyMEIzNDI3MTQyMEJE
NTVEN0QwNTAeFw0yNDA3MjUwMDU2MjlaFw0yNTA3MjQwMTAxMjlaMDMxMTAvBgNV
BAMTKEU0OTdFRkNBQTQ4MTlDRTA3MTkwRDAxMjk0MjM3QkM5MzQzMTVBNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBFEzVQ6uO9A07OtmqHGnvT3i
q1WPuAJ1DU8fcidBZrukDg8C+cJjDEhO+akFrODg59JY/y+dbrgc4xSY31CupmUK
FDI7ErpzglvpwK7pAhWX4IYIAbSLvVAl4p+aODMas7hb2t76W9ivmNVAr7ncef5j
navBDfF9qalgZQjfICKHUDuZhTSx8LOQTZhSsMoMQouaewRJGHOBcHTiazX2pgjx
t1+PDrw8emqe6xc5HiqHwC02FFcl03RnLV1/SYSjcD1I68aLVZptjdsIZpJ7u0fH
ASLVTOVNuvbe6NaF1Ihu5UF1LD58FJucu0THXt1FaFnMEJYwwKhNEzDFSUPtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5JfvyqSBnOBxkNASlCN7yTQxWkAwHwYDVR0j
BBgwFoAUoP+ag0NiJv8Z0CCzQnFCC9VdfQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm53VUhwdTZyV0xCcXB6ZEZXWFZ2VUFFbUZZWHZ4N2FuU0x0V2hxamdM
eUYvMC9BMEZGOUE4MzQzNjIyNkZGMTlEMDIwQjM0MjcxNDIwQkQ1NUQ3RDA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwRkY5QTgzNDM2MjI2RkYx
OUQwMjBCMzQyNzE0MjBCRDU1RDdEMDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jud1VIcHU2cldMQnFwemRGV1hWdlVBRW1GWVh2eDdhblNMdFdocWpnTHlGLzAv
MzEzNjM4MmUzMTM5MzUyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM0MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjD3DANBgkqhkiG9w0BAQsFAAOCAQEAhpwI
T4E7IOAx2xJTtHcKVyRL5S4Tgv29iHLe7C0mBefhU6mQL978KeRovl0jLB0let2k
YSlBbWzDJkezM2zZ6qVUuNU43RfIEyl7dipgBfMA5FPzt4HoJvJeF3LK4dJVZQCz
ayWtNw9oIsprVqdSYRL/LqbhUz+TDjDbWE+EguX0IP5eYets5Ma8AP7J3wIhNI7f
5MVD8Ja1QLHin4yz18K7HF0MuPPYgHq+uZnBvhSsAOzBBAPFWbfePYrpo2jbG4th
Um5bLqJ3VB4L5/H/FZC+LvZxuDWzbSih37fRg2zx6nOTOl7eDs9eo57G3v2crL0C
lMxWV7QKAHbjUFUIUA==
-----END CERTIFICATE-----
Generated at Tue Sep 10 16:22:55 2024 by rpki-client on console-fra.rpki-client.org