Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32302e302f32342d3234203d3e20323636313433.roa
File:                     3136302e32302e32302e302f32342d3234203d3e20323636313433.roa (raw, json)
Hash identifier:          ejPgymGHeJf+Qwda0asPzIOl1h2GnYZ0Cz4CAtU25v0=
Subject key identifier:   32:38:36:C4:A4:B1:4E:76:D0:2B:0C:7E:E6:04:45:17:7F:E8:82:9C
Certificate issuer:       /CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2
Certificate serial:       6DA0115D9DA743E4880CB1DE1A7893D321BAC618
Authority key identifier: B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32302e302f32342d3234203d3e20323636313433.roa
Signing time:             Fri 26 Apr 2024 13:49:23 +0000
ROA not before:           Fri 26 Apr 2024 13:44:23 +0000
ROA not after:            Fri 25 Apr 2025 13:49:23 +0000
asID:                     266143
IP address blocks:        160.20.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a0:11:5d:9d:a7:43:e4:88:0c:b1:de:1a:78:93:d3:21:ba:c6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2
        Validity
            Not Before: Apr 26 13:44:23 2024 GMT
            Not After : Apr 25 13:49:23 2025 GMT
        Subject: CN=323836C4A4B14E76D02B0C7EE60445177FE8829C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:55:01:dd:8c:8f:26:85:74:87:f5:ac:dd:
                    56:e3:60:a2:c5:18:f1:0e:07:ed:c7:05:3a:d9:c1:
                    74:b0:8a:d0:52:a6:bf:5a:e8:9e:4c:28:0d:57:ce:
                    25:3c:8e:6a:5d:8d:cd:13:57:14:ca:8e:0d:df:80:
                    1b:0c:56:6e:6d:cf:2e:c3:58:51:2a:a7:9b:d8:1f:
                    b9:b0:7a:e0:85:de:d2:e4:e1:0a:d0:4f:5f:8d:02:
                    24:ba:da:a1:93:08:e1:51:ef:12:40:dd:15:e6:44:
                    3c:aa:31:e4:6a:59:03:ff:0f:b3:0b:1b:d3:9c:3f:
                    07:83:03:dc:80:76:07:83:a0:42:6c:77:6b:ee:56:
                    c7:83:9d:a3:51:fb:04:da:88:33:5c:2d:7f:70:66:
                    e8:d3:53:1b:d3:77:ff:ef:75:eb:f9:87:1c:da:de:
                    dd:ad:ee:e6:bb:71:74:77:30:60:9a:40:ee:e6:f8:
                    51:e0:5c:3a:90:cb:d2:42:49:78:02:e3:08:13:bd:
                    0c:1f:69:8d:8e:c4:32:31:d4:0d:ec:e7:e4:42:17:
                    7c:52:82:af:44:a7:f6:45:33:c4:3b:83:da:21:9b:
                    e5:ea:26:ab:54:79:d0:ae:4f:1d:c1:2b:5f:e9:17:
                    1d:2f:f7:41:bf:11:b4:41:4e:a8:b5:14:13:ae:39:
                    79:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:38:36:C4:A4:B1:4E:76:D0:2B:0C:7E:E6:04:45:17:7F:E8:82:9C
            X509v3 Authority Key Identifier:
                keyid:B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32302e302f32342d3234203d3e20323636313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:9c:29:0e:db:fe:6c:b7:24:ec:0d:43:a4:51:cc:f9:be:5f:
         82:e8:61:f5:36:5b:4e:88:dc:88:1e:82:10:3f:42:55:0f:60:
         c6:b9:69:d2:f2:70:50:97:cb:6e:ed:c2:6c:95:93:6b:a2:be:
         f6:d8:c0:93:9f:4e:1a:bc:b3:51:25:89:6c:14:51:01:6a:47:
         0a:55:24:79:f1:3d:14:61:f0:80:61:0c:c2:2f:0e:dd:2c:42:
         61:b5:a0:d9:5d:a0:2f:b9:7d:f6:cd:5d:d7:85:17:e7:a6:03:
         29:5a:60:e6:15:b2:95:9e:40:8f:d5:b8:e8:ac:8c:d0:fa:5a:
         fe:cf:0c:d2:47:f2:0f:1b:52:4b:c1:e2:a4:9c:cf:72:8c:cf:
         53:e1:00:5e:f9:e0:84:27:43:aa:4d:67:66:34:a1:5b:60:74:
         47:ab:f5:b2:4e:0d:83:74:4a:a4:28:2a:c8:2a:63:69:e9:f7:
         7d:08:11:ee:a0:b5:9a:4b:d9:70:c1:b6:b1:57:78:40:6d:f1:
         13:b7:2d:55:98:75:ad:13:de:99:bf:55:5f:f5:7e:c7:a6:46:
         94:a6:81:9c:17:9a:08:ef:43:93:2c:90:5f:4b:58:52:56:a7:
         33:28:d0:56:b2:9e:02:c0:9d:01:fc:59:f3:61:2c:c6:5e:9c:
         e9:a6:c8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org