Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3230302e3135392e3137362e302f32302d3233203d3e203238353834.roa
File:                     3230302e3135392e3137362e302f32302d3233203d3e203238353834.roa (raw, json)
Hash identifier:          v8g4iPSpM9OefhdX6lUyukgsMXo/NSQNbjmFUBqz9Pk=
Subject key identifier:   BC:FC:80:90:C1:97:3C:57:89:21:B5:C2:CB:21:5F:DA:9A:EF:37:5B
Certificate issuer:       /CN=31A0D65979DD9912F3B220BB4A873ED35729257C
Certificate serial:       7922E3ED5E66354DFBEC5F3CBE3F57D7C1648A2E
Authority key identifier: 31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3230302e3135392e3137362e302f32302d3233203d3e203238353834.roa
Signing time:             Thu 13 Jun 2024 20:32:54 +0000
ROA not before:           Thu 13 Jun 2024 20:27:54 +0000
ROA not after:            Thu 12 Jun 2025 20:32:54 +0000
asID:                     28584
IP address blocks:        200.159.176.0/20 maxlen: 23

Validation:               Failed, certificate revoked on Thu 13 Jun 2024 22:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:22:e3:ed:5e:66:35:4d:fb:ec:5f:3c:be:3f:57:d7:c1:64:8a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31A0D65979DD9912F3B220BB4A873ED35729257C
        Validity
            Not Before: Jun 13 20:27:54 2024 GMT
            Not After : Jun 12 20:32:54 2025 GMT
        Subject: CN=BCFC8090C1973C578921B5C2CB215FDA9AEF375B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fd:7e:72:80:7d:4f:20:6e:b6:80:ce:2d:38:
                    1b:6a:f5:38:c9:10:ac:13:23:67:1d:03:f7:25:ab:
                    7f:b9:80:02:70:f1:ce:69:0a:41:cd:4a:6a:6d:ea:
                    f2:b2:53:20:81:c2:2e:c6:7d:f5:86:d1:88:12:ca:
                    44:d9:fb:e4:60:61:dd:5d:ec:8f:24:43:ca:b0:9e:
                    e5:cb:95:1c:6c:32:98:44:ca:c4:26:c6:28:f7:97:
                    1a:e9:b3:b5:79:79:ca:a6:ec:d7:7d:7b:32:bf:65:
                    d0:7b:ec:0b:45:d4:20:88:87:c3:0d:bf:97:18:e7:
                    3f:7d:aa:b9:5a:d9:a3:d3:46:14:00:50:13:a9:98:
                    58:44:2e:2f:ce:d1:84:a3:9c:ad:a7:dd:6b:2d:2c:
                    1b:11:76:e4:d1:60:c4:50:34:4c:09:91:d2:58:05:
                    b8:e2:cc:59:43:4a:8c:09:8e:2f:2c:8b:02:b1:9f:
                    bc:f4:cb:ff:b6:2c:6a:69:dc:d6:84:65:ef:a7:b9:
                    ed:a7:27:c2:ef:e9:22:0e:e1:a5:59:d4:c5:50:e2:
                    a6:72:52:7f:b2:5f:53:d5:88:31:e2:85:22:ba:53:
                    94:64:8d:78:03:90:3d:ee:f8:b5:a5:97:86:fd:a6:
                    5e:b7:81:70:fc:f8:ed:c9:e0:ff:93:11:44:13:8f:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FC:80:90:C1:97:3C:57:89:21:B5:C2:CB:21:5F:DA:9A:EF:37:5B
            X509v3 Authority Key Identifier:
                keyid:31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3230302e3135392e3137362e302f32302d3233203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.159.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:94:18:6e:bc:e5:0a:74:01:5a:f2:28:19:cf:7e:ec:d0:2a:
         b1:da:05:24:fd:8b:88:31:65:83:26:75:eb:eb:4e:0f:d5:8e:
         df:44:53:c3:cf:1e:af:2a:9b:4d:0b:f8:90:70:ec:5a:45:ec:
         0d:42:49:7d:9e:50:0c:02:79:e9:59:1c:c1:e7:f5:da:bf:f0:
         fc:c4:12:d5:dc:42:d2:85:7d:8b:0a:13:74:5c:d5:52:21:db:
         32:4b:c6:d4:70:f4:d9:98:a5:30:4b:f5:81:9d:cc:03:d8:cc:
         b1:a0:0c:54:07:2d:f5:bb:c4:16:c6:66:5a:d4:3d:1b:f7:78:
         6e:04:d7:f5:a7:55:0d:32:89:24:65:3c:40:20:9b:8a:53:de:
         41:c1:e7:cb:b6:29:55:0b:da:ff:7c:f6:03:de:ec:7d:85:eb:
         11:aa:58:c5:4e:f0:ef:1d:65:d9:33:de:b2:0b:e2:20:8f:f7:
         2a:1c:a8:c2:30:a7:a1:a2:98:e8:66:d2:bd:1d:f0:fb:00:59:
         2f:00:eb:62:7b:91:7d:6b:7c:2a:68:1c:74:15:76:5b:ce:1d:
         f1:05:86:7f:7a:29:8e:cd:a8:e9:d7:15:6e:50:50:c0:0b:9d:
         e7:a6:30:28:e9:a5:f8:2d:e2:7c:a7:fd:52:87:d0:39:73:d2:
         2a:6c:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 23:45:04 2024 by rpki-client on console-fra.rpki-client.org