Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32302e302f32322d3232203d3e20323636313433.roa
File:                     3136302e32302e32302e302f32322d3232203d3e20323636313433.roa (raw, json)
Hash identifier:          XVn3Mgi06RSu2CDcxlTUc1Ye2ogFg2OBzUI/jeVcea0=
Subject key identifier:   A9:4C:6F:C3:E5:C1:A9:63:C3:87:82:49:9C:0A:F1:8F:DD:2C:A6:FC
Certificate issuer:       /CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2
Certificate serial:       5B975B58564F695E21F3D9AAF8395604917AD411
Authority key identifier: B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32302e302f32322d3232203d3e20323636313433.roa
Signing time:             Wed 24 Apr 2024 18:40:14 +0000
ROA not before:           Wed 24 Apr 2024 18:35:14 +0000
ROA not after:            Wed 23 Apr 2025 18:40:14 +0000
asID:                     266143
IP address blocks:        160.20.20.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:97:5b:58:56:4f:69:5e:21:f3:d9:aa:f8:39:56:04:91:7a:d4:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2
        Validity
            Not Before: Apr 24 18:35:14 2024 GMT
            Not After : Apr 23 18:40:14 2025 GMT
        Subject: CN=A94C6FC3E5C1A963C38782499C0AF18FDD2CA6FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:68:54:08:d2:73:7b:cf:4b:03:4f:bb:c3:
                    70:b8:45:09:12:c6:0f:60:11:af:14:44:6f:d7:a5:
                    fd:96:3c:12:66:de:a5:11:c1:5a:4c:f4:0f:b5:57:
                    1e:55:3b:e3:92:e5:4c:2f:16:ad:19:ff:1a:d4:34:
                    15:8d:17:f2:8f:7f:9f:7e:c7:17:72:b9:d5:fd:0c:
                    33:ee:ff:92:70:a8:94:7a:1d:64:17:bd:e7:7e:8a:
                    86:44:bd:57:03:85:01:cb:1d:d0:78:bc:88:6d:43:
                    e5:0d:31:f2:56:d5:53:2e:c2:e2:29:0e:ab:50:53:
                    c4:8e:15:12:7e:28:35:9b:02:59:2c:89:44:28:3f:
                    34:90:6a:6e:63:0d:3c:49:56:d9:aa:ee:66:ce:37:
                    75:ee:fd:d3:79:50:bd:81:d0:d3:36:a2:d9:a6:c5:
                    f6:6b:47:07:8c:8c:49:3e:e7:5e:da:04:9b:61:37:
                    6f:d6:f8:84:5e:ba:77:59:55:e1:e0:48:28:e3:93:
                    42:90:42:45:32:f9:15:dc:a7:9b:61:09:0e:9e:02:
                    ab:f8:8a:bc:cc:e3:1e:29:ce:b8:0d:ba:05:6f:3b:
                    c4:0f:6d:03:1c:c3:70:d7:8e:37:4d:3d:08:68:97:
                    bc:56:e1:88:be:d7:6e:c3:46:ae:87:08:68:c5:63:
                    e9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4C:6F:C3:E5:C1:A9:63:C3:87:82:49:9C:0A:F1:8F:DD:2C:A6:FC
            X509v3 Authority Key Identifier:
                keyid:B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32302e302f32322d3232203d3e20323636313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:93:41:c1:b8:9c:9d:d6:0c:2a:0f:e4:b1:8a:29:bf:df:fe:
         32:00:a7:96:43:86:cf:af:db:d4:0a:40:c8:06:6c:6d:90:89:
         bf:e2:18:6b:13:26:cd:97:ab:a6:1e:55:6f:57:00:c7:41:3d:
         e4:c6:5d:9f:61:1f:39:95:42:13:b9:88:57:78:fe:42:41:4e:
         22:81:3e:83:0e:f7:81:31:ea:08:11:fb:4e:2f:06:dd:68:3a:
         f0:55:ce:a4:2a:65:02:eb:99:63:d8:8a:43:b4:00:b3:b0:df:
         86:74:a1:ab:9f:80:5b:75:1d:1a:10:b4:8c:c8:14:82:88:c4:
         bb:1e:85:e4:36:8f:2c:05:1e:42:50:7b:1d:02:dc:77:5d:52:
         a4:24:f2:b2:9a:54:a3:94:7c:47:e4:bf:13:4b:82:4b:f8:31:
         1d:c1:77:f9:43:0e:a5:a0:0c:c9:b3:48:44:9e:a0:41:80:20:
         d6:7a:89:dd:46:87:94:b7:26:2e:0d:49:ed:8b:6a:a5:68:85:
         35:b2:58:63:21:18:9e:79:16:c7:0d:78:d9:9a:e8:8d:aa:ce:
         b4:29:9b:db:46:31:69:c3:6c:80:0f:bd:41:04:73:4e:88:e5:
         76:7f:8f:d5:14:b0:99:81:ee:dc:ab:94:00:9c:f7:2c:63:a2:
         7c:84:00:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org