Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32322d3232203d3e20323730343633.roa
File:                     3230302e38312e34382e302f32322d3232203d3e20323730343633.roa (raw, json)
Hash identifier:          XnFAV7uO1Al9pOD0QYI2apJAu8d/9Ds8BidlEilZ+hg=
Subject key identifier:   65:74:1C:46:0C:28:4D:E5:5D:06:24:C3:11:4C:15:7C:CB:6D:1F:44
Certificate issuer:       /CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
Certificate serial:       6BA3D20393C9884B5106D6FBC405DA3C9E1D412A
Authority key identifier: B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32322d3232203d3e20323730343633.roa
Signing time:             Thu 18 Apr 2024 13:43:02 +0000
ROA not before:           Thu 18 Apr 2024 13:38:02 +0000
ROA not after:            Thu 17 Apr 2025 13:43:02 +0000
asID:                     270463
IP address blocks:        200.81.48.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 22 May 2024 17:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a3:d2:03:93:c9:88:4b:51:06:d6:fb:c4:05:da:3c:9e:1d:41:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
        Validity
            Not Before: Apr 18 13:38:02 2024 GMT
            Not After : Apr 17 13:43:02 2025 GMT
        Subject: CN=65741C460C284DE55D0624C3114C157CCB6D1F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:06:d1:e6:9e:d5:76:ad:60:2e:6f:a0:29:
                    fe:9c:98:e5:07:28:1b:8c:3e:25:c2:2b:aa:8c:44:
                    1d:ae:c7:c3:5b:9f:a1:71:86:81:2c:09:2d:70:09:
                    68:1d:aa:f6:82:a7:41:da:2b:60:be:61:63:d8:ec:
                    31:af:53:4b:1f:63:8f:fb:8e:9c:9e:3a:b4:bf:2d:
                    30:f0:54:13:a0:b7:05:46:9d:5a:f3:67:f8:7a:96:
                    b0:d3:7e:e2:23:2b:eb:3a:12:fd:c0:fa:69:89:10:
                    c7:4b:20:a8:3e:a3:82:23:aa:31:26:b7:bf:ba:d7:
                    b3:3e:f1:d8:11:1b:51:e0:17:f4:2c:1e:33:c0:ce:
                    91:aa:7c:67:11:07:a5:f0:28:d6:a1:ec:0e:41:d2:
                    84:a9:46:d4:09:c1:cb:0e:da:bd:e6:7b:97:7f:c2:
                    af:86:f7:f3:3f:e7:b5:4e:e4:cf:7d:af:ec:84:f9:
                    06:b6:0f:f6:85:74:f5:af:3a:40:8c:8c:48:54:4a:
                    6a:21:df:e6:94:82:1d:66:4d:98:16:21:2d:9a:2a:
                    50:a6:96:b9:61:f1:a7:b0:f6:7b:b2:84:5a:dc:68:
                    4a:37:c1:f3:15:02:07:cb:90:fd:e6:61:2c:e2:fd:
                    5a:43:53:75:ce:fd:91:c0:ab:ac:ec:0f:26:00:1d:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:74:1C:46:0C:28:4D:E5:5D:06:24:C3:11:4C:15:7C:CB:6D:1F:44
            X509v3 Authority Key Identifier:
                keyid:B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32322d3232203d3e20323730343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:c2:4c:bb:54:c4:63:e7:f4:1f:c0:c1:82:e8:e9:df:82:25:
         e4:e7:b8:33:e6:ee:f7:23:cf:3f:18:83:eb:4a:cc:ac:11:f6:
         96:21:71:3f:ec:03:84:2c:f3:a0:cc:d1:8e:e8:b0:cd:a3:30:
         e6:d2:48:69:5e:01:96:e9:2a:9e:88:55:61:94:0f:3e:a7:fa:
         83:ba:fc:4f:d3:a8:b2:4d:6e:a1:af:1e:ad:7f:0d:7d:ac:b1:
         8b:18:c9:1f:41:92:1b:94:84:01:17:da:d4:37:14:bf:f1:cc:
         4d:bd:21:8c:5f:33:f7:c8:f5:d7:f5:47:dc:de:ab:76:e4:8b:
         f1:6f:94:07:6d:2e:31:e5:d2:96:ab:7c:a6:87:0e:a3:a5:34:
         d7:73:16:d7:ec:08:53:99:9a:11:38:7a:cf:bb:6d:22:eb:e4:
         11:68:ca:d4:d5:fe:32:5c:0f:b6:84:44:2b:61:d0:f0:9d:00:
         3f:eb:c9:7d:68:dc:af:35:84:db:96:98:4d:1a:db:79:af:8a:
         14:51:b5:b1:1b:07:6b:93:4b:1d:48:35:b0:81:ce:03:ad:4f:
         ab:b9:45:84:0d:e5:bc:79:84:14:a0:6c:cb:aa:3f:21:91:87:
         bf:bc:50:f3:69:37:64:be:e5:12:2f:0f:81:63:f7:4a:11:71:
         71:3e:81:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 22:19:57 2024 by rpki-client on console-ams.rpki-client.org