Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e31332e302f32342d3234203d3e20323634303936.roa
File:                     3230312e37372e31332e302f32342d3234203d3e20323634303936.roa (raw, json)
Hash identifier:          /wzKAF62qkcs8fCO5OR/I7OSeaG+oAl8lG3s3bU9u2Y=
Subject key identifier:   55:39:01:D8:A1:8E:82:C1:A9:92:A3:D9:12:A7:CD:96:6B:8A:C1:ED
Certificate issuer:       /CN=BD9063ADADF748EEA58A242F1668AF322657ABD1
Certificate serial:       0EA2D5ADC47037088BCAC5F8B90A55496C5E4465
Authority key identifier: BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e31332e302f32342d3234203d3e20323634303936.roa
Signing time:             Fri 28 Jul 2023 20:00:01 +0000
ROA not before:           Fri 28 Jul 2023 19:55:01 +0000
ROA not after:            Fri 26 Jul 2024 20:00:01 +0000
asID:                     264096
IP address blocks:        201.77.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a2:d5:ad:c4:70:37:08:8b:ca:c5:f8:b9:0a:55:49:6c:5e:44:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9063ADADF748EEA58A242F1668AF322657ABD1
        Validity
            Not Before: Jul 28 19:55:01 2023 GMT
            Not After : Jul 26 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:1f:e2:35:4b:e0:e4:b3:5c:fa:c6:1a:52:
                    e3:62:eb:9b:15:18:11:4f:97:0e:28:77:a8:ee:a0:
                    aa:91:0f:21:93:ce:37:0f:0a:ec:26:45:b4:ea:06:
                    12:60:e8:ae:8d:24:e7:b4:e5:17:14:3a:be:2f:c4:
                    59:8e:ab:25:a3:63:83:ce:cf:1d:19:e9:db:3d:bd:
                    64:1a:28:91:ed:d2:94:f3:73:3b:c0:5b:cd:e5:69:
                    59:81:27:7f:eb:2b:86:3e:ef:3b:57:3d:c3:1b:cd:
                    51:63:bd:89:cc:fa:95:77:71:2d:34:55:9c:85:f3:
                    41:44:15:f9:09:83:cb:a6:73:78:76:4b:c1:80:d0:
                    28:3f:7c:00:ec:6b:81:08:85:0e:6d:c1:43:29:63:
                    3d:3b:34:7b:c5:b5:20:e8:0e:0f:ee:5c:06:bc:ee:
                    b5:cb:ba:04:3d:19:c9:09:05:53:78:0c:27:a5:e9:
                    c4:13:54:39:30:66:a3:55:7d:10:b0:0c:f5:8b:93:
                    b9:9a:07:a9:c1:c9:df:4d:d2:80:72:6f:9e:00:2a:
                    5a:4e:f2:4e:3f:9b:29:e2:33:75:63:01:d3:65:68:
                    8c:3b:5e:af:2f:72:92:c5:1e:5a:fd:60:9d:62:6c:
                    e2:0d:1b:ad:16:bf:3a:c1:16:1f:91:0a:a2:31:93:
                    8e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:39:01:D8:A1:8E:82:C1:A9:92:A3:D9:12:A7:CD:96:6B:8A:C1:ED
            X509v3 Authority Key Identifier:
                keyid:BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e31332e302f32342d3234203d3e20323634303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:96:0d:90:c0:8a:8b:fd:fa:db:e9:5b:21:b4:9d:ca:2f:6d:
         e0:19:8a:a4:ba:f2:c5:9a:0d:cf:31:18:fd:91:15:bd:87:ae:
         d1:d0:eb:33:15:43:12:9d:f2:fa:1b:c9:f2:a5:11:18:f1:33:
         2e:92:fd:53:79:63:1d:0c:a7:09:72:7e:a9:46:6d:16:eb:8c:
         77:4b:67:34:46:8a:b5:3a:90:0f:35:c3:af:1c:cf:c7:59:35:
         61:bf:90:00:24:71:ce:56:4b:65:d8:5a:2e:cf:02:b8:3c:48:
         eb:88:06:36:96:6c:80:42:b7:74:e4:f3:6c:5e:31:d7:2f:70:
         46:42:a7:30:75:06:0f:83:41:bb:5b:64:0a:66:3f:cb:22:04:
         ad:ee:b6:25:6c:04:af:08:fd:01:06:fb:64:d5:e9:0b:68:55:
         50:c2:50:c9:e5:0e:27:65:d7:6a:2f:e0:1f:89:c4:e4:8e:47:
         35:bb:83:24:a9:d9:78:3f:54:97:68:4a:e8:a5:74:68:5e:d5:
         c2:52:73:74:ee:a7:8e:17:97:07:32:c2:82:10:77:34:90:04:
         26:b4:16:f4:24:de:39:53:fc:bd:7c:3e:4e:e8:a2:87:4c:ee:
         36:e9:c6:c5:22:e7:e1:05:ed:db:58:62:5f:f9:70:f4:0c:6e:
         cb:9c:90:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 20:41:45 2023 by rpki-client on console-ams.rpki-client.org