Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134342e302f32322d3232203d3e20323639303733.roa
File:                     3230312e3135302e3134342e302f32322d3232203d3e20323639303733.roa (raw, json)
Hash identifier:          EtjwvPs7GsEwFIkO5+DTc9Y4sQ2zpUShCTXV5g0nb7w=
Subject key identifier:   6B:D5:A6:DF:B9:BD:D4:1A:21:99:6C:FC:21:93:1C:4E:02:DB:82:3F
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       579830A8091E57CA6C0EBBB7FBAF4BC943C97926
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134342e302f32322d3232203d3e20323639303733.roa
Signing time:             Tue 22 Oct 2024 14:21:49 +0000
ROA not before:           Tue 22 Oct 2024 14:16:49 +0000
ROA not after:            Tue 21 Oct 2025 14:21:49 +0000
asID:                     269073
IP address blocks:        201.150.144.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 21:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:98:30:a8:09:1e:57:ca:6c:0e:bb:b7:fb:af:4b:c9:43:c9:79:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Oct 22 14:16:49 2024 GMT
            Not After : Oct 21 14:21:49 2025 GMT
        Subject: CN=6BD5A6DFB9BDD41A21996CFC21931C4E02DB823F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:85:7f:0b:12:ff:4a:09:d3:8a:15:a0:9b:3d:
                    dd:f0:99:33:59:bd:75:f9:42:dd:9c:ef:ee:c4:c5:
                    d3:a1:a0:9c:db:2a:1a:f3:ac:4b:f1:0e:ae:c4:d3:
                    ba:04:51:43:7c:e0:1f:26:0f:af:61:b2:d9:af:53:
                    59:29:f6:9f:47:89:dd:67:97:3c:4a:62:20:4e:39:
                    65:7a:a0:bb:79:71:cf:8e:27:82:25:9c:0e:84:83:
                    27:f4:02:1a:fe:b4:dc:0d:2b:b9:af:74:24:f6:22:
                    eb:55:bb:16:a3:be:e2:9d:a6:43:af:cf:7f:8a:60:
                    4e:b2:4c:9c:0c:c5:71:59:6c:98:08:43:05:b5:bb:
                    43:b4:40:bc:5a:ea:eb:08:0e:e4:f5:c8:1e:b6:68:
                    fa:41:3d:29:98:47:38:f9:05:c8:22:3b:3b:4b:c4:
                    80:ef:8e:e7:32:2b:54:d7:59:53:0b:8f:6c:40:9d:
                    01:6e:99:24:d9:f5:a6:71:6b:60:09:34:d6:dd:1c:
                    2b:43:f4:d4:d1:57:02:68:78:aa:78:7c:ea:8d:42:
                    fe:d3:bc:29:22:af:cb:2a:b1:13:cb:67:b7:0f:65:
                    1d:28:0b:19:71:c0:4d:99:80:17:01:16:ea:86:89:
                    9b:e9:27:71:2c:d6:ab:f9:f0:9e:6c:26:f5:24:ed:
                    52:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D5:A6:DF:B9:BD:D4:1A:21:99:6C:FC:21:93:1C:4E:02:DB:82:3F
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134342e302f32322d3232203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:f4:3d:c7:9b:e9:54:51:4b:9c:47:21:3a:40:7a:9f:d4:72:
         fa:d1:e2:55:14:b1:b5:31:99:ea:b6:48:89:db:17:82:b4:cf:
         e0:b4:16:a6:7a:37:f2:3b:a1:98:3b:35:f9:4a:e5:77:38:99:
         ea:db:27:13:3f:bd:74:ce:ec:fb:f3:1e:41:04:68:a1:5d:a8:
         8c:70:32:cb:23:a4:96:48:cc:e9:9e:f1:14:23:f1:62:2f:b9:
         b7:8a:0d:c4:5e:d1:fc:34:61:ac:9a:54:dd:df:b7:8a:08:bb:
         c4:33:5e:a9:15:8c:d9:f8:4b:17:b0:f3:8c:50:38:89:12:03:
         08:a8:e5:a1:4c:45:eb:f8:a1:a2:d5:1c:84:99:f4:6c:23:a7:
         a6:c1:d4:35:45:16:89:1f:64:8e:31:b1:07:38:e0:e1:d0:9c:
         20:75:2b:7c:46:9b:d2:0f:e7:04:71:f8:76:aa:ab:08:9b:aa:
         56:95:50:05:c8:c0:2b:81:8d:e6:26:f9:e3:4c:80:9f:23:de:
         d9:86:d8:31:ae:a8:a7:6c:1a:77:86:9c:f5:b9:80:01:e2:3e:
         25:4b:3b:54:d6:37:b9:4a:89:b7:41:f7:ea:02:23:b8:9e:0d:
         a0:51:82:eb:fd:51:ba:68:0d:61:a2:1a:6e:d6:0f:6f:99:47:
         91:9e:1f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 00:01:31 2024 by rpki-client on console-fra.rpki-client.org