Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3233362e302f32332d3234203d3e203532383731.roa
File:                     3230312e3135372e3233362e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          Roah0sAXmob92GPV2Z55W101WfMBMT3pOpyBQlCUdeY=
Subject key identifier:   92:3D:61:7D:B5:6D:9E:E6:82:12:63:41:E4:B9:6C:5A:77:49:C3:5F
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       2277A4F72C324E409B6F1D5106CD3949A342863E
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3233362e302f32332d3234203d3e203532383731.roa
Signing time:             Tue 06 Dec 2022 11:43:42 +0000
ROA not before:           Tue 06 Dec 2022 11:38:42 +0000
ROA not after:            Tue 05 Dec 2023 11:43:42 +0000
asID:                     52871
IP address blocks:        201.157.236.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:77:a4:f7:2c:32:4e:40:9b:6f:1d:51:06:cd:39:49:a3:42:86:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Dec  6 11:38:42 2022 GMT
            Not After : Dec  5 11:43:42 2023 GMT
        Subject: CN=923D617DB56D9EE682126341E4B96C5A7749C35F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:2a:81:37:ae:96:11:8b:7b:c8:e5:3a:d5:
                    43:04:f1:15:ee:f1:36:e4:6a:06:b6:c8:3f:7f:7c:
                    8d:d3:58:7e:0e:65:d4:5a:b9:b1:e9:ab:ae:b3:8d:
                    76:7d:79:7f:2c:86:f1:4a:9f:cb:48:ee:e6:ec:ea:
                    da:4e:56:92:cc:b3:6f:63:b2:e3:0d:dd:35:bd:7a:
                    a6:fc:44:84:56:d3:ae:8b:5d:d1:3e:ea:cb:4b:cb:
                    d6:a3:56:5d:c2:3f:5a:e8:ee:20:44:a2:ce:e0:d8:
                    79:81:88:26:41:54:b1:38:a7:a7:90:c0:b4:f4:63:
                    50:c0:e3:1e:b2:44:ce:63:c5:f1:d0:3e:b5:5f:00:
                    de:27:19:61:36:b8:88:07:e8:00:29:e2:25:6a:b2:
                    2f:54:3d:43:37:8c:0d:ac:4b:6d:f5:e9:79:85:37:
                    58:04:fe:db:98:3f:f9:76:50:d3:c6:d6:0c:22:dc:
                    7d:f5:bb:58:c5:7c:75:f1:5f:80:56:c9:f2:b6:2c:
                    1d:05:e0:2d:27:d2:7b:2c:c2:3d:c1:0a:37:93:d9:
                    a8:8a:5b:49:14:86:d7:b3:a5:77:55:6c:50:e1:ae:
                    6a:e2:63:c5:91:6c:26:0b:72:e8:55:e4:32:3b:d4:
                    d0:aa:2b:b4:d2:55:05:56:ee:db:6c:86:74:3c:86:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3D:61:7D:B5:6D:9E:E6:82:12:63:41:E4:B9:6C:5A:77:49:C3:5F
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3233362e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:4f:00:a6:3a:bb:e2:ec:4a:fa:fb:f0:ac:39:ee:4e:13:7a:
         bb:c8:d5:38:60:c5:16:8f:7f:b4:ff:fc:13:a4:e7:b8:10:c4:
         40:44:00:21:5a:1d:b5:66:f1:8d:83:e0:57:c4:87:7a:9c:26:
         dd:bf:b4:79:4e:da:ec:20:d0:39:4f:0b:82:da:ad:4a:16:57:
         69:db:61:41:b1:b5:13:f5:bc:87:30:c1:88:3c:8b:fd:08:b2:
         a9:b9:c0:aa:83:4b:34:91:51:40:87:1d:2c:65:88:4b:76:84:
         49:ce:45:5d:18:c6:2b:64:52:6a:26:68:3b:d0:b0:88:07:06:
         d5:06:87:96:26:fb:7e:2b:12:56:28:47:63:1e:bf:41:6b:a0:
         60:7a:e9:da:f8:f2:1d:00:7a:02:66:74:b8:a3:46:f6:5a:f3:
         91:d4:19:13:5b:60:13:d4:00:98:24:de:59:3f:ed:26:be:8a:
         df:4d:60:2e:5a:71:79:a3:47:a2:40:c9:c6:b4:87:f6:98:77:
         44:5a:a4:dd:a0:99:17:78:01:1e:79:2f:f8:ae:6f:67:e3:39:
         7a:5f:f3:99:8c:7e:a1:a5:9c:61:5c:62:11:45:79:9e:a2:e0:
         49:a3:28:2e:4e:61:1e:ab:5f:15:cd:92:b5:9a:e8:02:aa:1f:
         08:bb:49:27
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUInek9ywyTkCbbx1RBs05SaNChj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJCNzY2QUY0RDcxQjZBNEM3MzA2QzMxNzlFNDA3RjQy
MDQ3RTRCODAeFw0yMjEyMDYxMTM4NDJaFw0yMzEyMDUxMTQzNDJaMDMxMTAvBgNV
BAMTKDkyM0Q2MTdEQjU2RDlFRTY4MjEyNjM0MUU0Qjk2QzVBNzc0OUMzNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UiqBN66WEYt7yOU61UME8RXu
8Tbkaga2yD9/fI3TWH4OZdRaubHpq66zjXZ9eX8shvFKn8tI7ubs6tpOVpLMs29j
suMN3TW9eqb8RIRW066LXdE+6stLy9ajVl3CP1ro7iBEos7g2HmBiCZBVLE4p6eQ
wLT0Y1DA4x6yRM5jxfHQPrVfAN4nGWE2uIgH6AAp4iVqsi9UPUM3jA2sS2316XmF
N1gE/tuYP/l2UNPG1gwi3H31u1jFfHXxX4BWyfK2LB0F4C0n0nsswj3BCjeT2aiK
W0kUhtezpXdVbFDhrmriY8WRbCYLcuhV5DI71NCqK7TSVQVW7ttshnQ8hittAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkj1hfbVtnuaCEmNB5LlsWndJw18wHwYDVR0j
BBgwFoAUgrdmr01xtqTHMGwxeeQH9CBH5LgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQzTnVzSEVzWDN1c1BVNWhocnExOVhiWWpTZmh5dHJaYTVnTUdHcGJ6
TUcvMC84MkI3NjZBRjRENzFCNkE0QzczMDZDMzE3OUU0MDdGNDIwNDdFNEI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgyQjc2NkFGNEQ3MUI2QTRD
NzMwNkMzMTc5RTQwN0Y0MjA0N0U0QjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUM051c0hFc1gzdXNQVTVoaHJxMTlYYllqU2ZoeXRyWmE1Z01HR3Biek1HLzAv
MzIzMDMxMmUzMTM1MzcyZTMyMzMzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM1
MzIzODM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJnewwDQYJKoZIhvcNAQELBQADggEBAI1PAKY6
u+LsSvr78Kw57k4TervI1ThgxRaPf7T//BOk57gQxEBEACFaHbVm8Y2D4FfEh3qc
Jt2/tHlO2uwg0DlPC4LarUoWV2nbYUGxtRP1vIcwwYg8i/0Isqm5wKqDSzSRUUCH
HSxliEt2hEnORV0YxitkUmomaDvQsIgHBtUGh5Ym+34rElYoR2Mev0FroGB66dr4
8h0AegJmdLijRvZa85HUGRNbYBPUAJgk3lk/7Sa+it9NYC5acXmjR6JAyca0h/aY
d0RapN2gmRd4AR55L/iub2fjOXpf85mMfqGlnGFcYhFFeZ6i4EmjKC5OYR6rXxXN
krWa6AKqHwi7SSc=
-----END CERTIFICATE-----
Generated at Thu Oct 26 16:56:59 2023 by rpki-client on console-ams.rpki-client.org