Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3230302e3135392e3136302e302f32302d3233203d3e203238353834.roa
File:                     3230302e3135392e3136302e302f32302d3233203d3e203238353834.roa (raw, json)
Hash identifier:          Yl5VennMRVAD4WaA7lLQ3YpINdgKPIACfbMMhAMrFl4=
Subject key identifier:   C5:D7:4C:B0:22:7C:7B:BD:E3:F6:27:70:72:60:86:8D:AF:27:86:72
Certificate issuer:       /CN=31A0D65979DD9912F3B220BB4A873ED35729257C
Certificate serial:       3B21B3CA911160809AFBDE1E9D3592953D5ABA0B
Authority key identifier: 31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3230302e3135392e3136302e302f32302d3233203d3e203238353834.roa
Signing time:             Thu 13 Jun 2024 20:31:28 +0000
ROA not before:           Thu 13 Jun 2024 20:26:28 +0000
ROA not after:            Thu 12 Jun 2025 20:31:28 +0000
asID:                     28584
IP address blocks:        200.159.160.0/20 maxlen: 23

Validation:               Failed, certificate revoked on Thu 13 Jun 2024 22:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:21:b3:ca:91:11:60:80:9a:fb:de:1e:9d:35:92:95:3d:5a:ba:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31A0D65979DD9912F3B220BB4A873ED35729257C
        Validity
            Not Before: Jun 13 20:26:28 2024 GMT
            Not After : Jun 12 20:31:28 2025 GMT
        Subject: CN=C5D74CB0227C7BBDE3F627707260868DAF278672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:e8:33:9e:32:8c:15:84:68:fe:95:fc:ec:
                    c9:7e:02:c9:e0:b2:57:fd:8b:f8:62:94:ee:a5:1f:
                    22:98:c2:17:c4:3b:fb:4d:80:50:37:e1:b4:99:22:
                    f6:91:ad:15:55:4b:2e:d1:c6:df:d2:ad:97:56:bb:
                    6a:91:9a:f1:e6:f0:84:67:c1:f7:ac:a6:f0:70:38:
                    1d:da:fb:43:ae:5c:43:4a:36:03:5c:b1:9c:67:88:
                    69:80:15:7f:2d:27:0e:6f:f0:74:f0:b3:30:9a:f0:
                    d9:83:5f:28:45:45:c0:48:a1:e5:bb:b3:3f:ed:7e:
                    4a:43:96:ea:d9:0f:24:6d:0d:68:02:2b:72:4e:a5:
                    42:f1:5e:8a:17:59:02:cb:83:1b:91:c7:c2:d8:0c:
                    2b:4e:0c:cf:b6:33:6e:63:a6:e3:05:b2:c5:be:bd:
                    d2:dd:e0:de:e3:07:92:f9:47:c8:f0:ca:b3:4c:fe:
                    51:e2:08:07:05:8a:4b:ce:6e:d6:22:29:c9:10:a3:
                    06:20:14:70:ff:aa:2e:82:ad:57:ef:77:7d:84:85:
                    d4:9b:4a:bc:31:22:7a:cd:d6:6b:0e:a7:44:6e:f3:
                    eb:53:85:5c:b3:ab:0e:f7:3b:b0:14:7d:34:d0:98:
                    f9:ab:93:7e:fd:d0:4a:7f:bb:b5:97:ac:32:83:2f:
                    44:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D7:4C:B0:22:7C:7B:BD:E3:F6:27:70:72:60:86:8D:AF:27:86:72
            X509v3 Authority Key Identifier:
                keyid:31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3230302e3135392e3136302e302f32302d3233203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.159.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:50:ba:ef:7a:6c:f3:36:0c:91:c1:41:84:e7:8f:7a:c2:b9:
         4c:b0:b1:5c:1b:1b:b7:7f:e9:9b:26:2d:d6:24:cd:01:4b:ba:
         b2:b6:f1:8f:7e:a2:46:36:ef:7a:27:0c:0e:a2:0b:07:c5:a2:
         e2:2b:41:16:e9:02:92:96:77:e2:c1:a8:29:b2:92:35:6c:7a:
         16:05:8b:79:eb:51:4b:b0:e8:61:d8:74:4d:77:11:8a:49:8a:
         51:e0:e8:1f:f2:7c:17:dd:72:4f:06:08:d2:60:61:86:9c:f7:
         63:fb:b5:89:bd:e8:82:5c:72:71:23:52:9a:d7:57:5f:2c:7d:
         ca:42:74:5c:32:89:f6:92:cb:79:21:ba:1a:cc:a6:84:39:0e:
         e1:c7:d1:c0:f9:84:f1:d8:ae:40:8d:97:bf:b3:0e:c7:34:56:
         d3:49:04:de:ff:45:29:95:07:ef:e6:26:98:62:e9:e2:3c:bc:
         07:11:86:6d:f9:b2:49:73:ef:75:51:6a:64:be:b2:c6:0b:17:
         ff:9a:1c:6a:22:38:0b:12:a7:ed:37:9d:aa:90:b3:0f:d4:5c:
         d0:a4:c5:ce:28:39:6b:dd:76:8a:bf:0f:d2:81:9b:ac:5c:0d:
         73:ff:0b:27:5a:6c:af:fa:12:e8:cc:eb:85:62:cb:42:30:eb:
         d5:9a:e3:2d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOyGzypERYICa+94enTWSlT1augswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFBMEQ2NTk3OUREOTkxMkYzQjIyMEJCNEE4NzNFRDM1
NzI5MjU3QzAeFw0yNDA2MTMyMDI2MjhaFw0yNTA2MTIyMDMxMjhaMDMxMTAvBgNV
BAMTKEM1RDc0Q0IwMjI3QzdCQkRFM0Y2Mjc3MDcyNjA4NjhEQUYyNzg2NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUugznjKMFYRo/pX87Ml+Asng
slf9i/hilO6lHyKYwhfEO/tNgFA34bSZIvaRrRVVSy7Rxt/SrZdWu2qRmvHm8IRn
wfespvBwOB3a+0OuXENKNgNcsZxniGmAFX8tJw5v8HTwszCa8NmDXyhFRcBIoeW7
sz/tfkpDlurZDyRtDWgCK3JOpULxXooXWQLLgxuRx8LYDCtODM+2M25jpuMFssW+
vdLd4N7jB5L5R8jwyrNM/lHiCAcFikvObtYiKckQowYgFHD/qi6CrVfvd32EhdSb
SrwxInrN1msOp0Ru8+tThVyzqw73O7AUfTTQmPmrk3790Ep/u7WXrDKDL0SXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxddMsCJ8e73j9idwcmCGja8nhnIwHwYDVR0j
BBgwFoAUMaDWWXndmRLzsiC7Soc+01cpJXwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFtVWMycnQ4RVVTbkRRb1JyWWdnUVJNNExWbW5kM2dmTnRVc2dwMVhR
a1AvMS8zMUEwRDY1OTc5REQ5OTEyRjNCMjIwQkI0QTg3M0VEMzU3MjkyNTdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQTBENjU5NzlERDk5MTJG
M0IyMjBCQjRBODczRUQzNTcyOTI1N0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBbVVjMnJ0OEVVU25EUW9ScllnZ1FSTTRMVm1uZDNnZk50VXNncDFYUWtQLzEv
MzIzMDMwMmUzMTM1MzkyZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzMyMDNkM2UyMDMy
MzgzNTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATIn6AwDQYJKoZIhvcNAQELBQADggEBACZQuu96
bPM2DJHBQYTnj3rCuUywsVwbG7d/6ZsmLdYkzQFLurK28Y9+okY273onDA6iCwfF
ouIrQRbpApKWd+LBqCmykjVsehYFi3nrUUuw6GHYdE13EYpJilHg6B/yfBfdck8G
CNJgYYac92P7tYm96IJccnEjUprXV18sfcpCdFwyifaSy3khuhrMpoQ5DuHH0cD5
hPHYrkCNl7+zDsc0VtNJBN7/RSmVB+/mJphi6eI8vAcRhm35sklz73VRamS+ssYL
F/+aHGoiOAsSp+03naqQsw/UXNCkxc4oOWvddoq/D9KBm6xcDXP/CydabK/6EujM
64Viy0Iw69Wa4y0=
-----END CERTIFICATE-----
Generated at Thu Jun 13 23:45:04 2024 by rpki-client on console-fra.rpki-client.org