Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e39352e3234302e302f32302d3230203d3e20323632373733.roa
File:                     3138372e39352e3234302e302f32302d3230203d3e20323632373733.roa (raw, json)
Hash identifier:          dBTB8n/A1n4jH5vqumziEPDn/Ix/oak3MIIMdOoeLQM=
Subject key identifier:   9A:8C:71:6B:70:91:3F:0F:ED:0C:55:71:E9:9E:61:73:F0:9D:B3:FD
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       3246102F4FFBF2D87856BFE9BEF267607F171F30
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e39352e3234302e302f32302d3230203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:21 +0000
ROA not before:           Wed 14 Aug 2024 12:03:21 +0000
ROA not after:            Wed 13 Aug 2025 12:08:21 +0000
asID:                     262773
IP address blocks:        187.95.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:46:10:2f:4f:fb:f2:d8:78:56:bf:e9:be:f2:67:60:7f:17:1f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:21 2024 GMT
            Not After : Aug 13 12:08:21 2025 GMT
        Subject: CN=9A8C716B70913F0FED0C5571E99E6173F09DB3FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:cb:16:80:63:2c:0d:74:37:8a:b4:ab:ea:
                    70:7f:11:cb:b1:79:e3:99:41:68:1c:8d:b3:50:0e:
                    63:1b:5d:ad:54:62:33:d7:b7:ed:bb:92:8d:65:b6:
                    97:61:69:b6:86:9f:3e:c0:c0:b9:b8:1e:77:db:14:
                    5a:d2:54:90:39:ca:2a:1d:37:0a:15:d8:bd:f4:25:
                    88:30:1e:35:74:05:3f:db:d1:88:1f:f2:cc:c2:07:
                    05:54:58:18:c1:2b:89:df:25:d3:b9:77:a2:fb:74:
                    fb:4d:ff:0b:4e:8d:84:65:f4:00:6a:1d:00:1d:d1:
                    e5:d7:73:c1:69:fd:3c:dc:20:89:79:85:df:0c:29:
                    f6:7f:dd:9a:99:be:c4:2d:b3:29:eb:b6:0d:0b:2f:
                    9a:e6:d4:4c:16:dd:f0:b8:a6:b6:d4:fe:63:ac:e8:
                    ea:5c:fa:16:66:b5:88:54:e2:e1:b6:0d:4b:9a:c2:
                    8d:f6:09:05:4a:70:c1:14:61:7f:71:74:53:79:f6:
                    b6:74:dd:05:7e:73:ac:a1:5f:66:83:bd:bc:3c:05:
                    52:96:a7:e3:b8:0f:45:de:26:9e:e9:19:47:2d:9b:
                    08:e0:d4:c5:67:32:4c:8d:42:e6:63:78:e5:c2:ae:
                    e3:56:2e:70:83:6a:ae:aa:c5:1d:e0:71:eb:73:c0:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8C:71:6B:70:91:3F:0F:ED:0C:55:71:E9:9E:61:73:F0:9D:B3:FD
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e39352e3234302e302f32302d3230203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:07:a9:df:37:3a:bc:b7:e0:3b:3f:b3:14:71:f6:ca:77:cc:
         37:aa:bd:00:ba:ef:2a:f0:09:34:5f:2a:8f:53:03:09:77:f9:
         27:cd:26:31:af:12:40:5c:f8:4c:3b:fb:63:3a:75:cd:70:f3:
         5c:b6:0f:52:88:36:4e:c0:d4:20:2c:9e:95:9f:9d:a3:67:dd:
         5a:ec:2a:d0:e7:91:31:0c:ce:b6:5a:37:b1:68:6c:0d:2c:86:
         68:75:47:89:e2:aa:23:ec:97:b1:d1:d4:a0:fb:b3:2c:cc:9e:
         a9:92:ab:14:f2:fd:a7:08:3a:d1:a1:7a:4e:d2:1a:d0:52:50:
         72:a7:32:25:81:72:60:89:0c:db:c2:bf:6c:a6:13:68:09:5c:
         e6:71:02:e3:35:00:e3:f7:95:e6:23:58:72:81:36:3f:6d:43:
         d6:26:f3:cf:99:63:52:3b:91:b3:3c:88:af:86:c4:0f:34:6a:
         55:a4:a1:f5:77:51:9d:30:23:5a:ca:fc:7b:6b:ec:89:00:93:
         11:1c:a9:f7:c0:a2:58:19:da:a5:27:dc:a9:a9:be:cc:46:83:
         33:4a:3b:45:43:6f:8d:a1:5d:a9:65:7f:88:91:a4:9b:e2:b9:
         61:ce:74:e9:87:3e:eb:5a:13:d6:8e:9d:86:59:87:be:46:d3:
         c7:b1:51:dc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMkYQL0/78th4Vr/pvvJnYH8XHzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA4MTQxMjAzMjFaFw0yNTA4MTMxMjA4MjFaMDMxMTAvBgNV
BAMTKDlBOEM3MTZCNzA5MTNGMEZFRDBDNTU3MUU5OUU2MTczRjA5REIzRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfN8sWgGMsDXQ3irSr6nB/Ecux
eeOZQWgcjbNQDmMbXa1UYjPXt+27ko1ltpdhabaGnz7AwLm4HnfbFFrSVJA5yiod
NwoV2L30JYgwHjV0BT/b0Ygf8szCBwVUWBjBK4nfJdO5d6L7dPtN/wtOjYRl9ABq
HQAd0eXXc8Fp/TzcIIl5hd8MKfZ/3ZqZvsQtsynrtg0LL5rm1EwW3fC4prbU/mOs
6Opc+hZmtYhU4uG2DUuawo32CQVKcMEUYX9xdFN59rZ03QV+c6yhX2aDvbw8BVKW
p+O4D0XeJp7pGUctmwjg1MVnMkyNQuZjeOXCruNWLnCDaq6qxR3gcetzwIlbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmoxxa3CRPw/tDFVx6Z5hc/Cds/0wHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzODM3MmUzOTM1MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7X/AwDQYJKoZIhvcNAQELBQADggEBAJgHqd83
Ory34Ds/sxRx9sp3zDeqvQC67yrwCTRfKo9TAwl3+SfNJjGvEkBc+Ew7+2M6dc1w
81y2D1KINk7A1CAsnpWfnaNn3VrsKtDnkTEMzrZaN7FobA0shmh1R4niqiPsl7HR
1KD7syzMnqmSqxTy/acIOtGhek7SGtBSUHKnMiWBcmCJDNvCv2ymE2gJXOZxAuM1
AOP3leYjWHKBNj9tQ9Ym88+ZY1I7kbM8iK+GxA80alWkofV3UZ0wI1rK/Htr7IkA
kxEcqffAolgZ2qUn3KmpvsxGgzNKO0VDb42hXallf4iRpJviuWHOdOmHPutaE9aO
nYZZh75G08exUdw=
-----END CERTIFICATE-----