Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31322e302f32322d3232203d3e203631393336.roa
File:                     3230312e3135382e31322e302f32322d3232203d3e203631393336.roa (raw, json)
Hash identifier:          GqP6zDwU+6wvLT8ZxE4qPjnJfkXDXbMvdsJqCz5fu18=
Subject key identifier:   CC:F0:2E:51:5B:88:6C:A3:D5:F1:68:42:47:60:19:FB:1F:A7:CB:53
Certificate issuer:       /CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
Certificate serial:       2C03EDBD9F68DB854CE085F8FF687523A798EE6E
Authority key identifier: 8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31322e302f32322d3232203d3e203631393336.roa
Signing time:             Thu 18 Apr 2024 14:38:51 +0000
ROA not before:           Thu 18 Apr 2024 14:33:51 +0000
ROA not after:            Thu 17 Apr 2025 14:38:51 +0000
asID:                     61936
IP address blocks:        201.158.12.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:03:ed:bd:9f:68:db:85:4c:e0:85:f8:ff:68:75:23:a7:98:ee:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
        Validity
            Not Before: Apr 18 14:33:51 2024 GMT
            Not After : Apr 17 14:38:51 2025 GMT
        Subject: CN=CCF02E515B886CA3D5F16842476019FB1FA7CB53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:a6:ec:13:04:65:cd:b0:65:ef:a0:b1:f6:
                    77:5b:7a:30:6f:c6:8d:ae:ab:dc:72:7b:13:bb:14:
                    5d:dc:39:50:de:7c:bc:d2:c3:e9:d1:45:a8:91:f2:
                    74:6c:e5:8e:ba:6c:e7:e8:b1:c7:75:48:92:ca:7e:
                    2b:52:c4:ba:ad:8e:f6:a9:0e:5f:bd:12:49:14:cc:
                    d2:51:2e:da:ef:78:f4:d9:18:d6:73:c3:37:15:e6:
                    fb:64:39:1a:88:44:a2:22:50:b1:2a:52:85:b0:c4:
                    12:ad:6e:d6:fc:0f:3d:e3:3e:56:8f:bd:7f:4c:9c:
                    d4:64:51:d0:dc:06:40:91:dd:0e:21:af:a4:89:9a:
                    e6:19:be:a7:9c:19:e0:2e:bd:d5:d3:24:d8:26:2b:
                    d8:00:e2:40:dd:36:47:dd:ee:7e:83:cb:4a:41:e0:
                    4d:e1:6c:fb:92:87:43:56:df:e6:61:f4:de:bf:24:
                    b8:41:96:6d:42:be:2a:a2:5e:89:c5:4c:75:e7:4b:
                    73:fd:cf:7f:e1:d3:07:89:90:e3:e9:ec:6d:3c:02:
                    8a:01:05:e4:45:14:63:3b:35:6e:5b:4f:d4:22:0e:
                    40:d4:8a:07:dc:88:5a:65:13:4a:aa:ef:fa:51:d6:
                    47:bf:00:30:f5:a2:8c:8c:90:37:31:ef:51:3c:f6:
                    f9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F0:2E:51:5B:88:6C:A3:D5:F1:68:42:47:60:19:FB:1F:A7:CB:53
            X509v3 Authority Key Identifier:
                keyid:8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31322e302f32322d3232203d3e203631393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:5d:e6:bb:36:ad:59:78:f4:55:72:d9:e2:1d:be:c2:d6:d4:
         b6:7a:d1:4b:d9:4d:4c:0f:0b:0e:cb:37:83:b8:a7:8a:4e:65:
         3d:de:42:a1:ae:d8:ff:08:f9:49:93:7a:58:e3:15:d6:fc:73:
         2f:a6:0b:20:ab:90:8d:b5:5a:87:eb:ee:2a:20:ec:c0:0b:38:
         99:a9:9d:8a:e1:42:10:66:70:a0:f9:0a:48:4c:54:1b:4c:c3:
         b1:7f:4c:13:0b:b1:30:5e:3c:91:17:0b:9a:b1:a7:a5:25:74:
         cf:7b:a2:68:e3:0c:4a:9b:9a:eb:75:cd:7d:66:51:6b:a1:d7:
         b7:47:02:c2:86:77:03:11:15:03:e9:31:d4:59:5c:c9:de:11:
         71:77:b0:fb:ac:16:bd:d2:3f:9b:f8:ab:7a:ae:04:aa:9f:77:
         66:54:7b:7f:13:c2:6b:71:3f:5f:d6:15:5e:ae:f0:58:e4:b1:
         b2:c3:24:35:ad:7e:e7:1c:45:fb:f2:9c:38:44:b1:d6:3b:3d:
         26:e4:c4:a1:89:bb:a5:ce:04:cb:39:45:51:23:0d:c7:f5:1c:
         1e:7f:74:7c:96:0d:40:47:33:0a:e7:0a:58:cf:58:d9:cd:0d:
         c9:3c:93:79:2d:20:66:25:c3:5a:f2:93:3f:34:77:5c:66:1e:
         e8:5b:48:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org