Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137382e302f32332d3233203d3e20323731343636.roa
File:                     3230312e34392e3137382e302f32332d3233203d3e20323731343636.roa (raw, json)
Hash identifier:          Cbw051dZliEh5MBB0p/HxRcc8xK1DEpBZi7Uu2qEKx8=
Subject key identifier:   C2:F3:6D:08:24:AC:40:2B:FC:CE:63:40:B9:A6:A1:83:B1:59:F5:41
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       3AA3EE84092F6748B553507F29FEA1C5DF197A5F
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137382e302f32332d3233203d3e20323731343636.roa
Signing time:             Wed 10 Apr 2024 12:45:26 +0000
ROA not before:           Wed 10 Apr 2024 12:40:26 +0000
ROA not after:            Wed 09 Apr 2025 12:45:26 +0000
asID:                     271466
IP address blocks:        201.49.178.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 05 Jul 2024 15:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a3:ee:84:09:2f:67:48:b5:53:50:7f:29:fe:a1:c5:df:19:7a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Apr 10 12:40:26 2024 GMT
            Not After : Apr  9 12:45:26 2025 GMT
        Subject: CN=C2F36D0824AC402BFCCE6340B9A6A183B159F541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:90:c3:5a:34:ea:96:7e:bb:72:c8:53:31:f7:
                    e3:1f:c3:5b:3e:c1:60:d1:d2:c3:1d:eb:51:c5:cf:
                    da:19:c5:e3:81:a5:ba:83:36:04:07:15:77:64:74:
                    e5:33:4d:31:e2:da:a6:70:1f:5d:2a:3a:e1:d2:fd:
                    30:d6:0d:ef:b0:04:89:8a:e1:30:b5:12:1a:96:31:
                    ce:1f:05:e1:79:56:86:a4:cb:fb:0e:02:a7:7b:81:
                    4b:46:2f:23:98:02:e5:71:d1:c3:36:d7:cd:a8:a4:
                    eb:47:31:9b:de:b6:56:80:33:1e:42:7d:75:77:00:
                    5e:b5:a9:45:92:81:07:7d:43:38:7f:97:91:d4:0e:
                    d8:32:00:e6:1b:c3:cf:f6:e3:f7:4d:a0:cb:cb:11:
                    02:5e:68:89:56:a3:18:63:de:78:17:b8:3c:2e:fb:
                    25:86:b5:c2:8d:07:c3:f7:42:1f:2c:24:21:68:c8:
                    3c:87:7c:df:b5:41:f1:75:da:8a:b6:66:c1:51:6a:
                    5f:01:f5:a4:49:17:a7:52:5d:5d:ef:fd:1b:95:ed:
                    64:51:9c:24:59:b2:25:d4:a0:50:f2:27:4a:d3:79:
                    14:96:06:6d:f7:9d:f5:4e:80:f0:a8:6d:b5:fb:05:
                    eb:31:9a:23:5f:74:96:bc:83:d1:69:88:aa:8e:a4:
                    14:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F3:6D:08:24:AC:40:2B:FC:CE:63:40:B9:A6:A1:83:B1:59:F5:41
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137382e302f32332d3233203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:fe:43:02:85:d5:02:33:7a:bf:60:0a:56:4f:d8:06:4f:ce:
         95:04:b8:c6:28:6c:93:ee:f2:44:bb:69:3e:e2:8c:5b:dc:d0:
         1b:b0:81:0f:dc:1d:5a:3c:0d:a6:47:86:d3:26:dc:ad:dd:02:
         ac:e3:bf:d5:eb:26:0c:31:46:d3:a4:53:08:93:b8:45:18:7f:
         ae:c3:e3:6b:a8:ff:c9:a7:02:87:33:17:21:3b:e8:27:41:82:
         18:b7:b9:5e:46:d0:19:07:9d:42:e5:f4:ae:c6:d9:e8:83:c1:
         90:3a:12:2a:f8:f9:3a:6f:95:b6:c1:0c:dc:ae:4f:1a:1e:2a:
         cb:47:27:4e:15:9f:f7:51:67:70:2f:e2:17:52:da:dd:d5:c3:
         29:46:b5:cb:db:f3:e1:f9:85:d9:ca:49:47:42:08:f3:62:e4:
         b5:06:81:72:32:40:27:1e:68:d6:54:43:6d:96:cd:ba:ad:2f:
         48:9d:a7:d7:ff:49:d0:b9:78:c7:8f:9f:1b:6e:12:73:e4:d1:
         d5:9c:d5:eb:63:94:40:5f:f6:2a:24:9e:d0:da:0d:ba:29:c2:
         0c:a7:16:23:ff:d9:2e:a7:5e:9f:e7:f2:a8:57:f5:6c:51:a5:
         ee:78:bf:85:53:3b:99:5e:af:d9:c9:93:12:fe:00:b7:3c:08:
         ab:c6:23:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOqPuhAkvZ0i1U1B/Kf6hxd8Zel8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThDODJGQzQ1MDAzRkVCMDBEQjkyOEU2QUY0MTlFNTc3
MjE5MzNFQzAeFw0yNDA0MTAxMjQwMjZaFw0yNTA0MDkxMjQ1MjZaMDMxMTAvBgNV
BAMTKEMyRjM2RDA4MjRBQzQwMkJGQ0NFNjM0MEI5QTZBMTgzQjE1OUY1NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDukMNaNOqWfrtyyFMx9+Mfw1s+
wWDR0sMd61HFz9oZxeOBpbqDNgQHFXdkdOUzTTHi2qZwH10qOuHS/TDWDe+wBImK
4TC1EhqWMc4fBeF5Voaky/sOAqd7gUtGLyOYAuVx0cM2182opOtHMZvetlaAMx5C
fXV3AF61qUWSgQd9Qzh/l5HUDtgyAOYbw8/24/dNoMvLEQJeaIlWoxhj3ngXuDwu
+yWGtcKNB8P3Qh8sJCFoyDyHfN+1QfF12oq2ZsFRal8B9aRJF6dSXV3v/RuV7WRR
nCRZsiXUoFDyJ0rTeRSWBm33nfVOgPCobbX7BesxmiNfdJa8g9FpiKqOpBRtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwvNtCCSsQCv8zmNAuaahg7FZ9UEwHwYDVR0j
BBgwFoAU6MgvxFAD/rANuSjmr0GeV3IZM+wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdFUnNYOXhrakMzNFRYeWpSekNITFZrS2dGaXhLb0pDQlplVExFSnFU
ZWovMS9FOEM4MkZDNDUwMDNGRUIwMERCOTI4RTZBRjQxOUU1NzcyMTkzM0VDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4QzgyRkM0NTAwM0ZFQjAw
REI5MjhFNkFGNDE5RTU3NzIxOTMzRUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHRVJzWDl4a2pDMzRUWHlqUnpDSExWa0tnRml4S29KQ0JaZVRMRUpxVGVqLzEv
MzIzMDMxMmUzNDM5MmUzMTM3MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzNDM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJMbIwDQYJKoZIhvcNAQELBQADggEBAD/+QwKF
1QIzer9gClZP2AZPzpUEuMYobJPu8kS7aT7ijFvc0BuwgQ/cHVo8DaZHhtMm3K3d
Aqzjv9XrJgwxRtOkUwiTuEUYf67D42uo/8mnAoczFyE76CdBghi3uV5G0BkHnULl
9K7G2eiDwZA6Eir4+TpvlbbBDNyuTxoeKstHJ04Vn/dRZ3Av4hdS2t3VwylGtcvb
8+H5hdnKSUdCCPNi5LUGgXIyQCceaNZUQ22WzbqtL0idp9f/SdC5eMePnxtuEnPk
0dWc1etjlEBf9iokntDaDbopwgynFiP/2S6nXp/n8qhX9WxRpe54v4VTO5ler9nJ
kxL+ALc8CKvGI9o=
-----END CERTIFICATE-----
Generated at Fri Jul 5 17:06:19 2024 by rpki-client on console-ams.rpki-client.org