Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32322d3233203d3e20323633343231.roa
File:                     3136382e3139352e3232302e302f32322d3233203d3e20323633343231.roa (raw, json)
Hash identifier:          g0Q0zOnok/A2RFLpYMpXo2T1QXCiEA/bw/QNB4/qA0k=
Subject key identifier:   6A:4E:B5:6B:C7:5E:AF:28:09:6F:80:C3:8A:D1:48:FB:32:AA:AD:69
Certificate issuer:       /CN=A0FF9A83436226FF19D020B34271420BD55D7D05
Certificate serial:       7BFDDCFEE252B9B736EAB3CA040A020DEB1FD0BF
Authority key identifier: A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32322d3233203d3e20323633343231.roa
Signing time:             Tue 10 Sep 2024 13:56:10 +0000
ROA not before:           Tue 10 Sep 2024 13:51:10 +0000
ROA not after:            Tue 09 Sep 2025 13:56:10 +0000
asID:                     263421
IP address blocks:        168.195.220.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 15:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fd:dc:fe:e2:52:b9:b7:36:ea:b3:ca:04:0a:02:0d:eb:1f:d0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0FF9A83436226FF19D020B34271420BD55D7D05
        Validity
            Not Before: Sep 10 13:51:10 2024 GMT
            Not After : Sep  9 13:56:10 2025 GMT
        Subject: CN=6A4EB56BC75EAF28096F80C38AD148FB32AAAD69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:a5:e5:bd:ca:2e:7c:39:3b:dd:48:d0:14:
                    61:9d:cd:70:60:2c:49:65:7f:02:82:c3:82:d1:0a:
                    88:f9:35:09:50:53:ce:61:96:bc:31:a3:95:92:ef:
                    80:c5:c8:8b:0a:7a:a9:6c:39:11:a5:ab:ec:64:fd:
                    22:b2:0f:5e:68:72:ef:1e:63:13:7b:43:b3:15:df:
                    3a:7e:99:3b:64:bf:0c:d5:e3:f9:a6:c2:5d:6f:39:
                    81:91:2d:54:21:8d:25:2e:2f:2b:81:ba:0e:38:3a:
                    03:77:e8:51:14:3f:01:ef:36:76:e7:cb:ed:77:76:
                    4b:76:ab:24:83:3f:dc:94:ba:9c:5b:24:e3:03:32:
                    eb:db:62:99:9c:5c:c9:f5:70:0e:ad:f7:57:f0:1f:
                    46:8f:66:c3:fd:f9:8c:cf:f1:52:93:a4:8b:3d:62:
                    0d:29:b6:a6:42:29:ae:17:e1:6a:1c:4e:d3:41:c4:
                    f7:1c:29:c6:4e:83:f9:d9:a2:53:1a:af:5d:e3:c9:
                    ca:58:15:8a:ec:48:61:5c:a4:b4:07:29:ce:af:65:
                    c0:31:df:e5:a9:f9:7c:5c:2b:c1:f9:7c:ff:a4:28:
                    50:5f:52:04:f2:84:14:ca:bd:4d:53:21:8d:63:b4:
                    bf:76:0e:d1:05:c1:88:e5:81:61:26:5f:7d:60:f7:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4E:B5:6B:C7:5E:AF:28:09:6F:80:C3:8A:D1:48:FB:32:AA:AD:69
            X509v3 Authority Key Identifier:
                keyid:A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/A0FF9A83436226FF19D020B34271420BD55D7D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32322d3233203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:61:e3:06:4a:89:47:34:7d:66:71:cd:13:e0:74:8f:80:12:
         79:70:05:9b:30:01:64:d1:2d:7b:6c:f0:41:38:d2:27:c1:bc:
         71:b4:b0:63:b7:73:75:7b:94:81:a9:72:6d:dc:51:dc:ad:8b:
         f9:59:69:ca:b8:d1:87:e1:59:7a:95:b9:dd:e5:53:c5:72:12:
         f4:a9:d6:3d:5f:ba:cd:c3:9b:fe:b5:5f:7d:12:28:2b:61:47:
         f3:ff:30:cb:cf:f0:de:3c:38:26:b1:a8:37:a4:64:79:58:13:
         dd:ae:f0:b6:37:d2:d9:0b:75:d3:2e:2b:44:d7:b2:56:cf:5e:
         e2:40:b3:ff:d2:a5:ff:b1:c9:8a:8a:19:b6:4c:c8:57:eb:1e:
         65:51:c2:15:93:5b:4c:f5:02:af:55:04:65:ac:2d:c1:7c:b5:
         5f:3a:38:19:56:51:c3:4b:5e:db:7f:e8:ca:ac:76:02:93:ec:
         c8:97:24:05:61:32:54:1a:5f:6b:72:52:8a:d3:61:01:1c:6a:
         99:ed:52:9e:e2:13:57:9f:b9:14:cc:7c:d3:36:c9:c1:cf:48:
         27:e9:7b:fc:9e:31:81:83:2c:db:05:df:55:27:79:27:c6:8f:
         99:02:dc:f1:b1:03:7d:4e:ad:d1:a7:b2:97:10:98:8e:20:9f:
         f0:2c:36:ee
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUe/3c/uJSubc26rPKBAoCDesf0L8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBGRjlBODM0MzYyMjZGRjE5RDAyMEIzNDI3MTQyMEJE
NTVEN0QwNTAeFw0yNDA5MTAxMzUxMTBaFw0yNTA5MDkxMzU2MTBaMDMxMTAvBgNV
BAMTKDZBNEVCNTZCQzc1RUFGMjgwOTZGODBDMzhBRDE0OEZCMzJBQUFENjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoYqXlvcoufDk73UjQFGGdzXBg
LEllfwKCw4LRCoj5NQlQU85hlrwxo5WS74DFyIsKeqlsORGlq+xk/SKyD15ocu8e
YxN7Q7MV3zp+mTtkvwzV4/mmwl1vOYGRLVQhjSUuLyuBug44OgN36FEUPwHvNnbn
y+13dkt2qySDP9yUupxbJOMDMuvbYpmcXMn1cA6t91fwH0aPZsP9+YzP8VKTpIs9
Yg0ptqZCKa4X4WocTtNBxPccKcZOg/nZolMar13jycpYFYrsSGFcpLQHKc6vZcAx
3+Wp+XxcK8H5fP+kKFBfUgTyhBTKvU1TIY1jtL92DtEFwYjlgWEmX31g9/IPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUak61a8derygJb4DDitFI+zKqrWkwHwYDVR0j
BBgwFoAUoP+ag0NiJv8Z0CCzQnFCC9VdfQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm53VUhwdTZyV0xCcXB6ZEZXWFZ2VUFFbUZZWHZ4N2FuU0x0V2hxamdM
eUYvMC9BMEZGOUE4MzQzNjIyNkZGMTlEMDIwQjM0MjcxNDIwQkQ1NUQ3RDA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwRkY5QTgzNDM2MjI2RkYx
OUQwMjBCMzQyNzE0MjBCRDU1RDdEMDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jud1VIcHU2cldMQnFwemRGV1hWdlVBRW1GWVh2eDdhblNMdFdocWpnTHlGLzAv
MzEzNjM4MmUzMTM5MzUyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMy
MzYzMzM0MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjD3DANBgkqhkiG9w0BAQsFAAOCAQEAGmHj
BkqJRzR9ZnHNE+B0j4ASeXAFmzABZNEte2zwQTjSJ8G8cbSwY7dzdXuUgalybdxR
3K2L+VlpyrjRh+FZepW53eVTxXIS9KnWPV+6zcOb/rVffRIoK2FH8/8wy8/w3jw4
JrGoN6RkeVgT3a7wtjfS2Qt10y4rRNeyVs9e4kCz/9Kl/7HJiooZtkzIV+seZVHC
FZNbTPUCr1UEZawtwXy1Xzo4GVZRw0te23/oyqx2ApPsyJckBWEyVBpfa3JSitNh
ARxqme1SnuITV5+5FMx80zbJwc9IJ+l7/J4xgYMs2wXfVSd5J8aPmQLc8bEDfU6t
0aeylxCYjiCf8Cw27g==
-----END CERTIFICATE-----
Generated at Tue Sep 10 17:30:57 2024 by rpki-client on console-fra.rpki-client.org