Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3230382e302f32332d3234203d3e203532383731.roa
File:                     3230312e3135372e3230382e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          oPKYF9hA6mu/z0GilcG8vRphsy9ouQyd7Ps6KvneE98=
Subject key identifier:   69:2A:D4:DF:13:74:14:86:BA:3C:E9:AF:59:95:07:CE:63:8C:2E:B8
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       49C0E1501879149A02B6CDDC641A208EC8896BD7
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3230382e302f32332d3234203d3e203532383731.roa
Signing time:             Tue 06 Dec 2022 11:40:05 +0000
ROA not before:           Tue 06 Dec 2022 11:35:05 +0000
ROA not after:            Tue 05 Dec 2023 11:40:05 +0000
asID:                     52871
IP address blocks:        201.157.208.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c0:e1:50:18:79:14:9a:02:b6:cd:dc:64:1a:20:8e:c8:89:6b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Dec  6 11:35:05 2022 GMT
            Not After : Dec  5 11:40:05 2023 GMT
        Subject: CN=692AD4DF13741486BA3CE9AF599507CE638C2EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:72:8f:be:72:bd:e5:a9:2f:46:d8:f8:a7:
                    b6:ef:1c:78:a8:e5:8f:df:db:27:81:1b:dd:d5:5b:
                    5b:e0:e6:2a:b8:94:11:83:79:c7:b1:7a:84:32:4a:
                    70:0a:f6:5c:67:ce:f7:c8:98:d2:93:09:95:b5:e4:
                    ec:8c:70:0e:56:7e:a7:da:0e:f3:78:28:6b:68:c0:
                    82:db:f6:c2:e1:ab:30:38:72:27:37:9b:29:58:1b:
                    c3:0c:9d:ed:60:77:2a:7f:2c:18:88:90:66:7e:50:
                    df:a3:6c:e8:8f:e3:c9:63:b5:ef:46:6b:f0:f9:8f:
                    37:9a:53:6f:88:0b:c2:23:84:e0:0c:a2:0c:0a:77:
                    d8:71:ee:7f:6e:0b:65:8e:38:8b:6a:d4:ff:8e:a0:
                    c2:21:4b:c4:8b:e0:52:91:57:d1:22:28:6f:99:88:
                    e1:92:f2:5e:93:b7:35:b6:66:e1:bf:86:ff:92:26:
                    db:2c:a6:38:2b:97:b1:ba:6c:d2:96:48:22:0c:1d:
                    08:d9:97:72:c5:99:d1:5e:31:0b:55:9c:d3:1c:8e:
                    a8:2e:d5:ce:d7:fa:7d:80:5c:64:21:dd:6d:10:e5:
                    7d:b9:46:1c:4d:9f:1d:85:c9:ab:b4:3e:b1:ac:5a:
                    40:c6:0e:45:df:2e:c7:ff:73:f6:53:6b:21:38:2f:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2A:D4:DF:13:74:14:86:BA:3C:E9:AF:59:95:07:CE:63:8C:2E:B8
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3230382e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:f2:27:07:3f:fc:82:bd:d0:f0:d5:84:0b:ad:c1:a4:b6:91:
         3c:7d:80:3a:c0:58:70:f9:43:d5:e3:1f:99:bc:98:6d:b7:c9:
         e1:69:de:46:57:19:99:8f:fb:58:09:00:9a:1b:a6:ab:ae:80:
         02:7c:72:55:d4:b7:11:7d:ba:2f:3a:f0:c8:b3:e7:70:35:12:
         38:e3:0c:60:a8:10:e8:e4:1d:e5:fe:6d:32:11:d2:96:5b:27:
         75:aa:48:e6:db:54:f3:24:c7:b4:75:ba:42:9e:21:da:18:e1:
         3b:a1:cc:08:99:15:6e:ca:e3:bc:47:86:8a:6f:36:6a:83:61:
         70:12:9d:4a:4c:2f:0b:65:e2:9a:50:7d:fe:6c:e5:5d:38:d0:
         8e:08:00:20:73:ad:8e:6f:5d:55:81:08:cd:51:19:a0:52:f8:
         33:74:57:bf:66:a6:7c:0b:3a:40:ad:f6:28:df:7c:6a:b4:3d:
         15:f3:1f:44:21:c0:1c:56:d7:ec:8a:f5:fb:1a:1f:a3:ce:6c:
         95:60:4f:77:62:ca:c5:f8:e9:62:49:ec:a4:32:a8:61:a5:f3:
         6f:f8:ce:1b:a0:a6:f5:6a:95:f9:b0:cc:0b:7d:c1:c9:75:08:
         6d:b3:33:f8:5f:fe:0e:84:e5:47:40:13:da:9a:16:8c:1e:ea:
         86:a5:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 16:56:59 2023 by rpki-client on console-ams.rpki-client.org