Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3230312e3135382e32342e302f32312d3231203d3e20323632373733.roa
File:                     3230312e3135382e32342e302f32312d3231203d3e20323632373733.roa (raw, json)
Hash identifier:          GyZZ4x5MqkeLuPgIdhSn6i0IYPRcHrbuy89+9c2p0Eg=
Subject key identifier:   70:94:16:37:38:5B:8B:8D:82:BB:ED:3D:BB:61:47:57:D1:E5:F4:81
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       31C1E4423AB5C13729BBAC87344179DD819CCA5E
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3230312e3135382e32342e302f32312d3231203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:21 +0000
ROA not before:           Wed 14 Aug 2024 12:03:21 +0000
ROA not after:            Wed 13 Aug 2025 12:08:21 +0000
asID:                     262773
IP address blocks:        201.158.24.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c1:e4:42:3a:b5:c1:37:29:bb:ac:87:34:41:79:dd:81:9c:ca:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:21 2024 GMT
            Not After : Aug 13 12:08:21 2025 GMT
        Subject: CN=70941637385B8B8D82BBED3DBB614757D1E5F481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:94:18:dc:0c:2d:8f:87:1e:0a:c1:60:7c:
                    97:f5:7e:63:33:19:38:76:76:4e:8a:e9:6a:5e:da:
                    ab:59:a2:87:87:b6:f8:1a:e0:01:5b:59:27:c7:e3:
                    72:c8:9e:91:82:1d:ea:5e:14:01:70:7c:53:67:f8:
                    c7:0f:db:a3:c1:53:df:e8:9f:88:80:60:ab:88:76:
                    86:40:14:53:dd:0d:34:6b:4d:fe:f3:dc:7a:f7:42:
                    e3:4b:6e:74:cb:ad:e4:9b:f5:27:64:58:4d:b3:b0:
                    b0:8e:89:68:0b:7b:fa:cc:83:24:96:24:03:d5:63:
                    21:63:ca:3b:5d:b6:a3:20:b7:bd:d6:06:a2:42:ad:
                    3a:c1:b3:38:35:e6:16:e4:bd:02:98:0c:6f:c6:f5:
                    35:88:91:02:ca:d1:ca:25:4d:38:25:b4:60:10:52:
                    18:05:b1:55:0d:39:a8:66:30:da:89:6d:98:e6:71:
                    fa:a7:6d:24:0b:f4:12:10:7e:f5:7e:f7:05:82:c5:
                    64:52:f9:20:d1:0b:a3:53:49:ad:80:fa:be:64:bc:
                    c1:05:a7:28:35:5c:2a:6a:5e:ee:3a:38:5c:56:28:
                    68:b4:2c:e9:f4:47:15:a6:65:19:99:9b:ba:79:04:
                    24:33:36:37:0e:5d:69:6a:82:b2:74:2a:b0:0c:14:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:94:16:37:38:5B:8B:8D:82:BB:ED:3D:BB:61:47:57:D1:E5:F4:81
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3230312e3135382e32342e302f32312d3231203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:3f:cf:54:c7:fb:51:6e:a3:f9:a9:93:c8:f8:fe:44:ac:b8:
         1e:fb:03:7f:0a:54:c8:81:81:f2:3d:2c:f5:2e:98:6c:3f:f8:
         b4:17:4e:c1:7c:04:6b:33:05:d9:fe:34:0e:d2:53:6a:f1:39:
         37:91:fb:be:b6:c4:b5:70:b9:e8:63:28:00:a0:05:9e:e8:21:
         50:14:69:da:5d:8b:cc:0e:a5:4f:43:a8:82:18:e0:e2:a0:d7:
         7d:6e:99:40:4b:2c:da:4b:46:de:1d:b1:69:7c:90:c9:6c:21:
         9c:13:24:94:ab:97:1f:f2:43:21:e6:ab:8f:48:88:ec:8f:9b:
         f6:d3:76:12:78:eb:fe:0b:dc:04:2d:40:43:9e:a7:ec:ba:47:
         bb:d5:30:27:69:53:f6:f0:8d:c8:a3:7f:58:ac:36:8c:21:71:
         ed:1a:7e:1b:be:fd:cd:47:14:3d:0a:6c:d1:53:4d:6b:d7:f2:
         77:c8:e5:a7:60:1d:3c:8d:4d:a4:22:62:91:17:69:04:da:87:
         12:9e:b5:53:91:0e:b7:c5:58:c7:89:e6:61:2b:4b:61:3b:af:
         c1:24:15:f1:a0:e0:ac:63:8d:95:b5:73:60:59:44:59:8c:f3:
         2b:b1:ce:26:ac:bf:f5:3c:f2:2e:a8:4b:49:6e:1d:d6:ae:27:
         cc:a8:3a:e9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMcHkQjq1wTcpu6yHNEF53YGcyl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA4MTQxMjAzMjFaFw0yNTA4MTMxMjA4MjFaMDMxMTAvBgNV
BAMTKDcwOTQxNjM3Mzg1QjhCOEQ4MkJCRUQzREJCNjE0NzU3RDFFNUY0ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+I5QY3Awtj4ceCsFgfJf1fmMz
GTh2dk6K6Wpe2qtZooeHtvga4AFbWSfH43LInpGCHepeFAFwfFNn+McP26PBU9/o
n4iAYKuIdoZAFFPdDTRrTf7z3Hr3QuNLbnTLreSb9SdkWE2zsLCOiWgLe/rMgySW
JAPVYyFjyjtdtqMgt73WBqJCrTrBszg15hbkvQKYDG/G9TWIkQLK0colTTgltGAQ
UhgFsVUNOahmMNqJbZjmcfqnbSQL9BIQfvV+9wWCxWRS+SDRC6NTSa2A+r5kvMEF
pyg1XCpqXu46OFxWKGi0LOn0RxWmZRmZm7p5BCQzNjcOXWlqgrJ0KrAMFPs3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcJQWNzhbi42Cu+09u2FHV9Hl9IEwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzIzMDMxMmUzMTM1MzgyZTMyMzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPJnhgwDQYJKoZIhvcNAQELBQADggEBAE0/z1TH
+1Fuo/mpk8j4/kSsuB77A38KVMiBgfI9LPUumGw/+LQXTsF8BGszBdn+NA7SU2rx
OTeR+762xLVwuehjKACgBZ7oIVAUadpdi8wOpU9DqIIY4OKg131umUBLLNpLRt4d
sWl8kMlsIZwTJJSrlx/yQyHmq49IiOyPm/bTdhJ46/4L3AQtQEOep+y6R7vVMCdp
U/bwjcijf1isNowhce0afhu+/c1HFD0KbNFTTWvX8nfI5adgHTyNTaQiYpEXaQTa
hxKetVORDrfFWMeJ5mErS2E7r8EkFfGg4KxjjZW1c2BZRFmM8yuxziasv/U88i6o
S0luHdauJ8yoOuk=
-----END CERTIFICATE-----
Generated at Mon Sep 9 18:03:29 2024 by rpki-client on console-fra.rpki-client.org