Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3133312e3139362e3137302e302f32342d3234203d3e20323635393135.roa
File:                     3133312e3139362e3137302e302f32342d3234203d3e20323635393135.roa (raw, json)
Hash identifier:          9oAvEIukpB7Ee5zttXECB0iqlw2SWGcLXpLX9VN5ilM=
Subject key identifier:   8C:03:64:6F:83:6D:0F:68:9F:89:E9:30:E4:5E:36:58:14:2E:29:36
Certificate issuer:       /CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
Certificate serial:       01BA4FECC619BDC033E64063178897710348EC6D
Authority key identifier: 3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3133312e3139362e3137302e302f32342d3234203d3e20323635393135.roa
Signing time:             Thu 18 Jul 2024 21:22:39 +0000
ROA not before:           Thu 18 Jul 2024 21:17:39 +0000
ROA not after:            Thu 17 Jul 2025 21:22:39 +0000
asID:                     265915
IP address blocks:        131.196.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Dec 2024 20:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ba:4f:ec:c6:19:bd:c0:33:e6:40:63:17:88:97:71:03:48:ec:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
        Validity
            Not Before: Jul 18 21:17:39 2024 GMT
            Not After : Jul 17 21:22:39 2025 GMT
        Subject: CN=8C03646F836D0F689F89E930E45E3658142E2936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d1:70:68:df:0d:0e:de:42:98:7d:33:4c:eb:
                    11:05:5a:f4:a4:89:f7:7e:cc:af:6c:30:b1:cb:3f:
                    9a:07:ba:e7:7d:48:fb:5b:45:4a:2e:00:2a:47:38:
                    9b:4d:60:e3:27:d8:6e:ca:5a:ff:dd:8b:8f:a8:fa:
                    ba:f2:fa:df:2c:4e:d9:01:52:70:23:8a:8f:4e:64:
                    03:19:05:8a:dd:6a:d7:eb:c1:f0:47:23:e0:24:c9:
                    87:ac:c5:cd:e0:2f:41:8c:f0:70:96:70:88:d7:c1:
                    fd:36:a3:6f:f3:35:e2:1f:18:42:1f:1b:fb:ad:0c:
                    57:24:28:f9:75:8e:db:ad:77:dc:40:cf:9f:9f:15:
                    5e:4e:01:d0:01:45:2a:c1:b5:73:89:34:d9:93:be:
                    52:61:05:51:d1:11:3d:a2:1a:3e:f6:f7:5f:b8:ad:
                    48:52:a3:5c:05:51:34:7b:ee:74:00:17:5f:f3:2e:
                    9c:4b:21:39:f9:bd:e8:f8:f1:4d:87:c3:97:68:d3:
                    c6:ba:c8:b0:9a:3e:0b:c6:72:7b:a1:d1:09:28:6a:
                    17:bf:f1:74:9d:2d:41:f4:e9:37:25:89:34:a2:4e:
                    19:58:6f:11:40:60:5a:d8:54:36:40:eb:1b:86:c5:
                    fe:de:e8:4a:f1:32:80:92:28:dc:ff:93:72:b0:d8:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:03:64:6F:83:6D:0F:68:9F:89:E9:30:E4:5E:36:58:14:2E:29:36
            X509v3 Authority Key Identifier:
                keyid:3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3133312e3139362e3137302e302f32342d3234203d3e20323635393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:78:bc:b3:c0:3b:b0:22:3a:15:3f:f3:22:2b:60:76:22:97:
         8f:ad:20:f9:e8:f3:1b:0d:7e:9c:bc:f5:56:0a:82:0a:fa:ba:
         59:b8:92:4d:79:1f:01:5a:73:8b:0d:3b:bd:a6:27:ea:6f:d6:
         f2:a4:30:b2:5e:cb:8c:fd:47:43:c8:77:50:61:c9:25:c8:8d:
         38:1c:1c:4c:f0:03:85:bb:64:ab:15:96:e1:dd:37:7c:3f:21:
         4c:6d:8f:25:6b:9a:d0:29:47:b9:94:97:59:73:f7:f4:4c:72:
         ef:73:16:d6:7a:f5:23:d8:89:2e:b7:b2:09:7e:5f:f1:14:5e:
         83:44:31:bb:65:5f:6c:7b:cd:aa:4f:eb:a2:e7:64:7f:50:38:
         11:b1:00:d4:01:80:47:7d:d2:25:a9:aa:ef:de:3f:19:e8:73:
         30:d2:54:1c:64:b9:47:a7:e5:06:c5:58:f5:4c:11:64:d8:25:
         9f:65:4d:19:d1:78:6b:f4:b0:4d:a7:73:a4:8a:82:7b:e3:fa:
         4f:36:45:f6:55:62:cb:42:e1:b5:35:0f:6d:4e:13:0c:42:3c:
         4d:6b:ff:21:1d:fe:63:95:a1:61:03:3a:e9:de:75:8b:5e:fb:
         1b:40:20:76:c4:42:59:f1:51:a2:68:c2:bf:e1:e0:98:89:06:
         98:64:bd:b5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAbpP7MYZvcAz5kBjF4iXcQNI7G0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JEQ0JGNzNBOUZEMDJERTU1QURDOTA3N0IyMTZFMjhF
QzY0NTkyQTAeFw0yNDA3MTgyMTE3MzlaFw0yNTA3MTcyMTIyMzlaMDMxMTAvBgNV
BAMTKDhDMDM2NDZGODM2RDBGNjg5Rjg5RTkzMEU0NUUzNjU4MTQyRTI5MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk0XBo3w0O3kKYfTNM6xEFWvSk
ifd+zK9sMLHLP5oHuud9SPtbRUouACpHOJtNYOMn2G7KWv/di4+o+rry+t8sTtkB
UnAjio9OZAMZBYrdatfrwfBHI+AkyYesxc3gL0GM8HCWcIjXwf02o2/zNeIfGEIf
G/utDFckKPl1jtutd9xAz5+fFV5OAdABRSrBtXOJNNmTvlJhBVHRET2iGj7291+4
rUhSo1wFUTR77nQAF1/zLpxLITn5vej48U2Hw5do08a6yLCaPgvGcnuh0Qkoahe/
8XSdLUH06TcliTSiThlYbxFAYFrYVDZA6xuGxf7e6ErxMoCSKNz/k3Kw2OMFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjANkb4NtD2ifiekw5F42WBQuKTYwHwYDVR0j
BBgwFoAUO9y/c6n9At5VrckHeyFuKOxkWSowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUI5VVRHZVhFRGFSSkVMWkJucGJTbnBBQmpXaXZ5NkNLWHdOV0V5YzdM
a1EvMC8zQkRDQkY3M0E5RkQwMkRFNTVBREM5MDc3QjIxNkUyOEVDNjQ1OTJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCRENCRjczQTlGRDAyREU1
NUFEQzkwNzdCMjE2RTI4RUM2NDU5MkEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FCOVVUR2VYRURhUkpFTFpCbnBiU25wQUJqV2l2eTZDS1h3TldFeWM3TGtRLzAv
MzEzMzMxMmUzMTM5MzYyZTMxMzczMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM5MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPEqjANBgkqhkiG9w0BAQsFAAOCAQEAk3i8
s8A7sCI6FT/zIitgdiKXj60g+ejzGw1+nLz1VgqCCvq6WbiSTXkfAVpziw07vaYn
6m/W8qQwsl7LjP1HQ8h3UGHJJciNOBwcTPADhbtkqxWW4d03fD8hTG2PJWua0ClH
uZSXWXP39Exy73MW1nr1I9iJLreyCX5f8RReg0Qxu2VfbHvNqk/roudkf1A4EbEA
1AGAR33SJamq794/GehzMNJUHGS5R6flBsVY9UwRZNgln2VNGdF4a/SwTadzpIqC
e+P6TzZF9lViy0LhtTUPbU4TDEI8TWv/IR3+Y5WhYQM66d51i177G0AgdsRCWfFR
omjCv+HgmIkGmGS9tQ==
-----END CERTIFICATE-----
Generated at Wed Dec 4 22:47:26 2024 by rpki-client on console.sobornost.net