Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e38302e302f32302d3234203d3e203238363436.roa
File:                     3230312e37372e38302e302f32302d3234203d3e203238363436.roa (raw, json)
Hash identifier:          qlp669Pz/AyQc2YdmgFPnnaIweGJcmwyYIO5tauCM3Q=
Subject key identifier:   CC:40:8F:D2:D8:C8:D0:E7:7F:75:55:E8:7B:23:E9:73:DF:0E:D9:A3
Certificate issuer:       /CN=D33B838B6A42A35FB4291F4D13A1F247DFB53A22
Certificate serial:       2D8CC7C7869BD5C720E247898C22D08473095D85
Authority key identifier: D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e38302e302f32302d3234203d3e203238363436.roa
Signing time:             Fri 16 Feb 2024 17:02:45 +0000
ROA not before:           Fri 16 Feb 2024 16:57:45 +0000
ROA not after:            Fri 14 Feb 2025 17:02:45 +0000
asID:                     28646
IP address blocks:        201.77.80.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Feb 2024 18:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8c:c7:c7:86:9b:d5:c7:20:e2:47:89:8c:22:d0:84:73:09:5d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D33B838B6A42A35FB4291F4D13A1F247DFB53A22
        Validity
            Not Before: Feb 16 16:57:45 2024 GMT
            Not After : Feb 14 17:02:45 2025 GMT
        Subject: CN=CC408FD2D8C8D0E77F7555E87B23E973DF0ED9A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:c2:74:d6:bb:74:98:8a:ab:1b:24:16:a3:
                    cd:c4:38:3a:5e:f7:4d:7d:11:fb:29:da:a4:ce:4d:
                    dc:28:47:36:4e:c1:d8:91:4a:ac:e0:f8:ed:d3:c8:
                    ce:fe:8c:aa:27:f2:f1:ee:3f:62:2f:01:91:50:0d:
                    7b:30:18:00:b4:d9:aa:e6:15:81:bf:2e:86:ca:59:
                    2e:a6:3a:d5:d1:aa:83:1b:e6:9a:ec:ee:a5:f0:db:
                    87:97:78:95:8f:3a:27:b3:77:53:68:0c:87:35:ed:
                    7a:93:6f:8f:64:64:52:4e:b2:3e:62:fb:d9:00:fa:
                    db:54:e4:c5:b3:60:37:3d:7f:35:01:5f:1f:07:dd:
                    75:54:5e:34:5d:da:ce:b8:31:4f:62:d5:62:54:7e:
                    ae:a6:09:3d:cb:96:aa:05:ac:d3:5a:6d:d5:15:b8:
                    f1:e0:61:8f:46:8c:b4:c3:a9:b8:c0:e8:cd:fd:77:
                    48:c0:a4:34:72:05:a6:37:f3:1f:88:26:78:07:ed:
                    ba:74:53:a3:14:a5:39:15:5f:f2:82:00:fc:fe:76:
                    57:d2:58:6d:87:35:68:00:35:6e:13:81:b6:a7:69:
                    ff:ea:d9:b5:90:d8:fa:b2:19:f3:5e:da:32:ec:2a:
                    7f:64:08:8f:19:ef:08:c6:95:9c:a6:7b:a4:fd:4f:
                    44:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:40:8F:D2:D8:C8:D0:E7:7F:75:55:E8:7B:23:E9:73:DF:0E:D9:A3
            X509v3 Authority Key Identifier:
                keyid:D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e38302e302f32302d3234203d3e203238363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:b0:cc:94:ab:08:48:5c:d8:3d:bd:60:a3:f2:ea:11:2b:ab:
         e3:26:ec:ec:22:c4:27:67:11:b0:3e:e7:7f:ba:99:f4:39:24:
         e5:55:69:04:07:a1:f2:f3:e1:3e:a0:f0:c2:dc:33:63:2e:2f:
         bc:b8:70:f7:0e:80:23:45:5a:ac:2f:63:0d:a4:82:7a:bb:e4:
         e6:75:ac:04:43:0c:7a:bc:79:82:a1:ae:c5:2f:f0:4c:60:39:
         91:89:39:a9:2f:7d:b3:83:cd:1a:d4:03:e9:ed:af:cc:ed:b1:
         de:70:17:90:3f:df:3d:d7:82:3d:2a:c0:58:fb:61:92:48:d6:
         53:54:d8:cf:2d:bd:e1:3b:60:25:b2:46:80:16:ba:30:ed:10:
         21:29:80:3b:44:2b:1e:f1:79:81:9f:b3:cd:57:4b:54:d0:ff:
         99:3c:b8:2a:99:0c:e4:07:cb:8d:c7:c2:74:0e:22:b8:fb:88:
         2b:0a:77:aa:f7:c2:59:48:90:ed:2a:e1:93:15:38:25:cc:e6:
         b4:5a:61:fe:58:3f:b9:55:41:bd:79:36:88:f5:3c:38:0c:08:
         3b:1f:6b:fc:4d:c0:87:3e:b1:9d:1c:44:6f:06:79:7b:62:ea:
         13:6c:2c:50:e8:27:5c:e9:3e:0d:d9:df:14:b1:a3:93:12:f5:
         0d:7e:bc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 22:22:34 2024 by rpki-client on console-ams.rpki-client.org