Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          QvjnX42GFG9UOsY+Q/GoM1OoEsT03oehpEA88Z3tVr8=
Subject key identifier:   CB:64:5A:37:91:B0:F9:6F:0B:EA:75:A8:6A:E2:88:58:58:2A:D7:F8
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       751970E63E00C6BFFFC74A851ECFA531C5AF00CF
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
Signing time:             Mon 14 Oct 2024 15:21:11 +0000
ROA not before:           Mon 14 Oct 2024 15:16:11 +0000
ROA not after:            Mon 13 Oct 2025 15:21:11 +0000
asID:                     263518
IP address blocks:        191.243.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 10:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:19:70:e6:3e:00:c6:bf:ff:c7:4a:85:1e:cf:a5:31:c5:af:00:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Oct 14 15:16:11 2024 GMT
            Not After : Oct 13 15:21:11 2025 GMT
        Subject: CN=CB645A3791B0F96F0BEA75A86AE28858582AD7F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:c8:ef:ef:f8:60:0e:a7:98:20:7a:fb:8d:
                    65:06:91:16:c0:81:7e:0b:5b:c8:ef:62:6c:29:8b:
                    56:aa:79:50:37:66:f1:80:93:aa:92:35:75:08:a0:
                    d3:99:0f:ce:94:31:30:ee:8a:c3:1e:fc:96:a9:95:
                    4d:ab:24:af:c3:e1:7d:20:79:f7:a1:36:7f:f2:92:
                    a3:3c:67:2c:0f:88:5a:62:81:b8:02:89:9f:51:c1:
                    c4:29:a3:f9:44:31:16:5e:72:41:06:a3:d5:a4:ea:
                    81:c3:ea:e3:d3:fb:ba:e8:5c:3a:80:f7:82:ea:a7:
                    6f:cc:de:10:b0:58:6d:da:85:25:7b:79:83:50:7b:
                    33:74:0c:ab:c8:45:64:b6:ef:3a:22:cc:70:01:28:
                    d1:ae:15:13:aa:6c:18:3a:05:a3:86:cf:a6:ac:1d:
                    f1:4b:74:59:f9:36:cf:59:e2:fe:d3:18:9f:e9:75:
                    29:2c:5f:5c:bf:34:22:c5:c7:e8:b9:7b:a4:ff:f1:
                    8b:72:d1:91:ce:2c:92:6d:de:05:56:20:e7:9a:e4:
                    3a:89:a4:76:69:8d:12:12:f7:8e:e0:c5:6f:06:f1:
                    5a:2b:71:ca:b8:05:e3:a5:15:32:91:92:c3:c8:34:
                    37:f5:3b:9f:7d:df:21:b6:8b:ec:bf:f2:f0:66:c0:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:64:5A:37:91:B0:F9:6F:0B:EA:75:A8:6A:E2:88:58:58:2A:D7:F8
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:f1:d5:22:d4:26:8c:59:09:7b:95:27:91:bb:84:8e:7c:93:
         18:2c:18:bf:00:a8:52:f8:f6:b0:80:07:94:f8:80:dc:8e:57:
         f0:18:5e:bb:d0:7d:55:43:f9:6d:ef:c3:dd:0e:15:77:16:a5:
         d0:af:89:91:30:a7:a7:fa:66:ea:45:1f:a9:e1:55:50:06:ef:
         08:ae:41:4e:c2:6e:3b:4e:e3:05:23:a3:09:89:01:f4:ff:8d:
         6c:67:e3:88:6f:a0:2f:d4:54:ed:28:5c:62:c3:0b:2a:f2:b1:
         01:b9:e5:7b:3f:32:5f:27:b8:ae:cd:e8:37:9f:56:8c:c4:62:
         f4:1e:92:07:e5:c1:8d:d0:40:48:84:9e:d4:ca:d0:b6:87:eb:
         d9:2d:79:0a:31:0e:93:8b:c1:85:c6:bf:a0:57:85:6f:4c:52:
         41:c2:5f:06:aa:de:90:6e:42:ff:7e:7c:b7:c0:29:05:ba:c2:
         50:f9:41:ec:16:a9:13:ae:4b:b2:60:bc:14:b4:05:e6:14:1f:
         bb:83:6c:62:a0:41:3a:4b:74:5e:3f:de:ac:cb:f4:d3:8e:f1:
         b0:11:df:99:e6:92:6c:a0:5c:9d:b0:b5:0a:ce:0d:95:bf:f6:
         d4:cc:77:07:67:f9:88:db:3e:d9:29:7d:6a:00:ec:e5:b0:7b:
         a5:88:51:01
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdRlw5j4Axr//x0qFHs+lMcWvAM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNDEwMTQxNTE2MTFaFw0yNTEwMTMxNTIxMTFaMDMxMTAvBgNV
BAMTKENCNjQ1QTM3OTFCMEY5NkYwQkVBNzVBODZBRTI4ODU4NTgyQUQ3RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvccjv7/hgDqeYIHr7jWUGkRbA
gX4LW8jvYmwpi1aqeVA3ZvGAk6qSNXUIoNOZD86UMTDuisMe/JaplU2rJK/D4X0g
efehNn/ykqM8ZywPiFpigbgCiZ9RwcQpo/lEMRZeckEGo9Wk6oHD6uPT+7roXDqA
94Lqp2/M3hCwWG3ahSV7eYNQezN0DKvIRWS27zoizHABKNGuFROqbBg6BaOGz6as
HfFLdFn5Ns9Z4v7TGJ/pdSksX1y/NCLFx+i5e6T/8Yty0ZHOLJJt3gVWIOea5DqJ
pHZpjRIS947gxW8G8Vorccq4BeOlFTKRksPINDf1O5993yG2i+y/8vBmwC35AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUy2RaN5Gw+W8L6nWoauKIWFgq1/gwHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzEzOTMxMmUzMjM0MzMyZTMyMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/z1zANBgkqhkiG9w0BAQsFAAOCAQEAWPHV
ItQmjFkJe5UnkbuEjnyTGCwYvwCoUvj2sIAHlPiA3I5X8Bheu9B9VUP5be/D3Q4V
dxal0K+JkTCnp/pm6kUfqeFVUAbvCK5BTsJuO07jBSOjCYkB9P+NbGfjiG+gL9RU
7ShcYsMLKvKxAbnlez8yXye4rs3oN59WjMRi9B6SB+XBjdBASISe1MrQtofr2S15
CjEOk4vBhca/oFeFb0xSQcJfBqrekG5C/358t8ApBbrCUPlB7BapE65LsmC8FLQF
5hQfu4NsYqBBOkt0Xj/erMv0047xsBHfmeaSbKBcnbC1Cs4Nlb/21Mx3B2f5iNs+
2Sl9agDs5bB7pYhRAQ==
-----END CERTIFICATE-----
Generated at Tue Nov 5 13:26:32 2024 by rpki-client on console-fra.rpki-client.org