Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e382e302f32322d3232203d3e203631393336.roa
File:                     3230312e3135382e382e302f32322d3232203d3e203631393336.roa (raw, json)
Hash identifier:          wub2QKV1qvjZ0MOtIR+qKKGdNxFUCW2yfBh+7GW5hlg=
Subject key identifier:   1F:A4:D9:C9:7B:60:45:ED:3E:20:27:47:3F:18:41:61:B1:93:AF:6F
Certificate issuer:       /CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
Certificate serial:       34C6F67651C8A81AA20EFB6A1E79D0DA8B2A99F1
Authority key identifier: 8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e382e302f32322d3232203d3e203631393336.roa
Signing time:             Thu 18 Apr 2024 14:38:37 +0000
ROA not before:           Thu 18 Apr 2024 14:33:37 +0000
ROA not after:            Thu 17 Apr 2025 14:38:37 +0000
asID:                     61936
IP address blocks:        201.158.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c6:f6:76:51:c8:a8:1a:a2:0e:fb:6a:1e:79:d0:da:8b:2a:99:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
        Validity
            Not Before: Apr 18 14:33:37 2024 GMT
            Not After : Apr 17 14:38:37 2025 GMT
        Subject: CN=1FA4D9C97B6045ED3E2027473F184161B193AF6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c9:ae:38:1c:74:b6:ab:dc:0e:80:c6:84:56:
                    a9:0d:39:9c:c1:4a:e1:84:ff:b9:db:e5:b8:2c:45:
                    b0:58:cd:e1:8b:01:81:5c:6d:24:8c:21:65:c5:c1:
                    ff:eb:a1:ad:d9:5c:89:0a:e8:f8:50:6f:70:11:1c:
                    f6:52:d2:7e:7f:0e:3b:8b:25:98:75:3f:2a:1d:1a:
                    cf:0d:e5:61:5a:34:08:ac:a6:73:fd:1f:64:2e:58:
                    3d:93:39:36:72:20:54:cf:a7:45:28:e9:06:4c:a7:
                    99:e7:b7:a7:0b:d6:1f:0e:bc:7b:de:44:46:5e:cc:
                    95:26:a9:38:08:a1:46:76:75:33:92:a4:85:33:e6:
                    db:50:fd:68:f0:5d:f5:5b:32:b6:3e:c2:3c:b8:4c:
                    b8:a3:43:91:62:95:71:e9:d0:8b:a8:7e:f6:ef:81:
                    71:16:0e:b0:22:47:04:4f:ac:cc:d7:b8:1d:f0:bd:
                    40:92:30:cd:3f:b6:d9:28:2b:8a:19:5b:e9:4d:c6:
                    1d:60:9a:18:0e:83:48:04:5c:66:5d:9f:63:e5:db:
                    5a:f8:9f:57:7c:32:cc:c6:05:c6:bc:4f:43:7a:db:
                    dc:49:e6:d5:29:10:0a:08:cc:dd:f7:2a:b8:b4:44:
                    db:16:5b:8d:50:6d:ac:5c:f8:b6:0b:a2:ca:f0:07:
                    f6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A4:D9:C9:7B:60:45:ED:3E:20:27:47:3F:18:41:61:B1:93:AF:6F
            X509v3 Authority Key Identifier:
                keyid:8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e382e302f32322d3232203d3e203631393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:b7:7c:20:a9:08:4e:02:32:26:39:a3:fb:42:e3:a4:d0:d0:
         e8:af:b9:06:5f:8d:c7:91:7e:9c:e1:98:79:8a:45:73:ca:92:
         96:06:6a:0b:2f:86:d2:c1:9c:4e:9f:07:5c:36:f9:34:18:94:
         be:c2:f9:86:59:cb:bc:0f:bb:26:b1:ce:63:7d:69:f8:8b:2d:
         87:0b:ea:7f:8c:cc:22:7c:42:68:cd:59:3b:00:ee:8b:b2:e6:
         f4:7d:c8:fe:c2:fb:66:1d:f4:1c:7b:ca:f4:96:e9:d2:7f:60:
         d6:b7:b5:30:16:eb:7d:5b:e5:80:d5:55:cf:34:be:9d:a5:8b:
         8e:e1:84:af:73:a1:d9:a6:48:d6:62:1d:a9:eb:0e:96:19:4d:
         14:34:d7:91:f7:2c:78:e6:45:23:96:05:ef:ed:8d:da:23:38:
         87:a7:a2:82:b9:0b:42:45:0c:4a:e4:bd:3f:0f:11:29:b9:5f:
         1c:48:a2:49:67:a4:0b:77:12:2c:93:1b:8e:6d:8d:59:f3:8e:
         f8:78:3f:8e:82:74:30:1c:21:07:70:63:8b:e8:36:af:b0:ea:
         8d:57:2a:d6:70:78:ed:37:f5:04:de:55:44:6d:11:04:a1:e2:
         bc:76:38:2c:6e:22:e4:65:52:a9:ed:de:fa:90:45:a6:e2:de:
         1c:80:79:d0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNMb2dlHIqBqiDvtqHnnQ2osqmfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQwMzA2QzIzRkY1NjRBRjU0Qjc5RDhGOThEMERDRERD
OTMwQjIxRjAeFw0yNDA0MTgxNDMzMzdaFw0yNTA0MTcxNDM4MzdaMDMxMTAvBgNV
BAMTKDFGQTREOUM5N0I2MDQ1RUQzRTIwMjc0NzNGMTg0MTYxQjE5M0FGNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWya44HHS2q9wOgMaEVqkNOZzB
SuGE/7nb5bgsRbBYzeGLAYFcbSSMIWXFwf/roa3ZXIkK6PhQb3ARHPZS0n5/DjuL
JZh1PyodGs8N5WFaNAispnP9H2QuWD2TOTZyIFTPp0Uo6QZMp5nnt6cL1h8OvHve
REZezJUmqTgIoUZ2dTOSpIUz5ttQ/WjwXfVbMrY+wjy4TLijQ5FilXHp0Iuofvbv
gXEWDrAiRwRPrMzXuB3wvUCSMM0/ttkoK4oZW+lNxh1gmhgOg0gEXGZdn2Pl21r4
n1d8MszGBca8T0N629xJ5tUpEAoIzN33Kri0RNsWW41Qbaxc+LYLosrwB/bRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUH6TZyXtgRe0+ICdHPxhBYbGTr28wHwYDVR0j
BBgwFoAUjQMGwj/1ZK9Ut52PmNDc3ckwsh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkNYdkZVWXY4NDdNOEtOQUhGREppb3VUcUpCdDJWUU5xbUVOVHFNeFhG
TU4vMC84RDAzMDZDMjNGRjU2NEFGNTRCNzlEOEY5OEQwRENEREM5MzBCMjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEMDMwNkMyM0ZGNTY0QUY1
NEI3OUQ4Rjk4RDBEQ0REQzkzMEIyMUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pDWHZGVVl2ODQ3TThLTkFIRkRKaW91VHFKQnQyVlFOcW1FTlRxTXhYRk1OLzAv
MzIzMDMxMmUzMTM1MzgyZTM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMTM5
MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAsmeCDANBgkqhkiG9w0BAQsFAAOCAQEAg7d8IKkITgIy
Jjmj+0LjpNDQ6K+5Bl+Nx5F+nOGYeYpFc8qSlgZqCy+G0sGcTp8HXDb5NBiUvsL5
hlnLvA+7JrHOY31p+Isthwvqf4zMInxCaM1ZOwDui7Lm9H3I/sL7Zh30HHvK9Jbp
0n9g1re1MBbrfVvlgNVVzzS+naWLjuGEr3Oh2aZI1mIdqesOlhlNFDTXkfcseOZF
I5YF7+2N2iM4h6eigrkLQkUMSuS9Pw8RKblfHEiiSWekC3cSLJMbjm2NWfOO+Hg/
joJ0MBwhB3Bji+g2r7DqjVcq1nB47Tf1BN5VRG0RBKHivHY4LG4i5GVSqe3e+pBF
puLeHIB50A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org