Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230392e302f32342d3234203d3e203238333436.roa
File:                     3230312e3135372e3230392e302f32342d3234203d3e203238333436.roa (raw, json)
Hash identifier:          XmYlr4uVfFb7VUZgaL2QWqHP6rTqLaya70YUGOJHFdo=
Subject key identifier:   9F:FC:26:F8:5D:2B:47:7E:F5:82:CE:D0:28:2C:DD:57:AF:7E:58:91
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       57E34558D2B78035E0A7F5149F2B36C0CA9E9B3D
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230392e302f32342d3234203d3e203238333436.roa
Signing time:             Wed 03 Apr 2024 23:12:22 +0000
ROA not before:           Wed 03 Apr 2024 23:07:22 +0000
ROA not after:            Wed 02 Apr 2025 23:12:22 +0000
asID:                     28346
IP address blocks:        201.157.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 15:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e3:45:58:d2:b7:80:35:e0:a7:f5:14:9f:2b:36:c0:ca:9e:9b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:22 2024 GMT
            Not After : Apr  2 23:12:22 2025 GMT
        Subject: CN=9FFC26F85D2B477EF582CED0282CDD57AF7E5891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:d1:bc:2a:8e:05:63:e2:de:d7:3c:d8:46:
                    50:c5:76:e6:e0:cc:db:d4:c7:f5:c0:75:f3:36:b5:
                    2a:fa:12:60:c3:48:b5:8d:52:61:e0:5e:13:86:de:
                    7c:03:7d:4d:f5:85:ae:1c:a2:0d:21:05:51:32:d1:
                    40:16:a3:b4:de:55:fe:7b:bc:26:a6:6e:e8:4c:24:
                    17:d5:7b:79:d5:cd:88:3b:3b:46:4c:1f:f6:99:64:
                    64:1f:a3:39:9b:c5:95:39:d6:93:bf:76:a0:c2:53:
                    2f:bb:51:12:4b:7f:92:6c:bb:62:ed:7b:cf:7e:51:
                    ac:0c:fd:98:fd:25:95:e7:38:20:37:30:1c:fa:e0:
                    00:9b:e8:87:0c:fa:0b:29:09:0f:99:51:2c:1c:e0:
                    66:bf:dd:79:45:ee:21:5f:f5:c4:bc:e8:b0:dc:29:
                    03:6c:49:33:82:95:83:70:65:48:98:03:41:09:0f:
                    78:ba:08:9f:cd:af:14:5b:ce:17:6f:a3:4d:45:6f:
                    af:99:04:2c:e3:4a:b3:ab:97:14:85:78:d9:f1:c7:
                    13:dc:ab:4c:9a:cb:3b:bb:06:62:70:b0:82:6c:59:
                    ce:a1:c9:12:eb:cc:70:a8:24:e3:e9:00:c3:d1:37:
                    26:a7:ee:3d:43:f2:a4:1b:fe:d7:26:79:66:58:7b:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FC:26:F8:5D:2B:47:7E:F5:82:CE:D0:28:2C:DD:57:AF:7E:58:91
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230392e302f32342d3234203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:5b:0a:d8:52:c1:28:41:1c:99:a8:ab:45:86:0e:e4:b9:2c:
         f0:a4:45:92:c5:0c:d0:3e:6d:f9:31:59:3e:46:8f:db:56:6d:
         ad:1f:1a:86:80:63:32:2a:b3:00:ab:a4:91:ea:f1:04:23:78:
         5e:9a:06:59:7b:e0:e8:10:57:77:fc:5b:12:ea:81:56:36:2e:
         30:20:9b:37:fb:21:f6:62:94:2e:9a:21:25:30:1c:61:0a:22:
         11:0c:6c:a1:8d:dd:3b:c4:73:84:4b:ab:34:fa:8d:81:e5:a4:
         76:36:d2:0d:d5:26:8f:98:4a:a7:c2:e1:ee:d7:c4:02:9e:9f:
         be:37:c7:67:dc:0b:f5:91:01:75:01:65:67:6c:78:9d:ab:b1:
         37:f0:8d:85:3f:d7:98:79:2d:8c:18:e9:12:00:e0:e3:65:28:
         be:e6:1a:e7:6e:4b:3e:b6:6c:63:cd:d0:ba:3d:46:98:54:7a:
         6d:95:51:9c:3a:4e:80:e9:f5:0b:cc:6f:c9:d5:2c:10:73:00:
         0a:cf:54:74:b8:fb:33:aa:af:32:0f:92:fc:4d:d6:65:37:8f:
         f8:09:0b:13:c9:76:96:52:17:f3:76:ef:d1:a5:e1:4a:1a:2d:
         b8:98:95:9c:70:70:5b:93:2e:28:f2:0e:49:e7:2a:34:82:49:
         3f:ce:c3:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV+NFWNK3gDXgp/UUnys2wMqemz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1QUQ3NjJGOTkwRjI2NjA4N0Y0NkI1QzIyRTlFQTlF
Mjg4QkY4RTAeFw0yNDA0MDMyMzA3MjJaFw0yNTA0MDIyMzEyMjJaMDMxMTAvBgNV
BAMTKDlGRkMyNkY4NUQyQjQ3N0VGNTgyQ0VEMDI4MkNERDU3QUY3RTU4OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcOtG8Ko4FY+Le1zzYRlDFdubg
zNvUx/XAdfM2tSr6EmDDSLWNUmHgXhOG3nwDfU31ha4cog0hBVEy0UAWo7TeVf57
vCambuhMJBfVe3nVzYg7O0ZMH/aZZGQfozmbxZU51pO/dqDCUy+7URJLf5Jsu2Lt
e89+UawM/Zj9JZXnOCA3MBz64ACb6IcM+gspCQ+ZUSwc4Ga/3XlF7iFf9cS86LDc
KQNsSTOClYNwZUiYA0EJD3i6CJ/NrxRbzhdvo01Fb6+ZBCzjSrOrlxSFeNnxxxPc
q0yayzu7BmJwsIJsWc6hyRLrzHCoJOPpAMPRNyan7j1D8qQb/tcmeWZYexAPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUn/wm+F0rR371gs7QKCzdV69+WJEwHwYDVR0j
BBgwFoAU01rXYvmQ8mYIf0a1wi6eqeKIv44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQzTnVzSEVzWDN1c1BVNWhocnExOVhiWWpTZmh5dHJaYTVnTUdHcGJ6
TUcvMS9EMzVBRDc2MkY5OTBGMjY2MDg3RjQ2QjVDMjJFOUVBOUUyODhCRjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNUFENzYyRjk5MEYyNjYw
ODdGNDZCNUMyMkU5RUE5RTI4OEJGOEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUM051c0hFc1gzdXNQVTVoaHJxMTlYYllqU2ZoeXRyWmE1Z01HR3Biek1HLzEv
MzIzMDMxMmUzMTM1MzcyZTMyMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJndEwDQYJKoZIhvcNAQELBQADggEBAJVbCthS
wShBHJmoq0WGDuS5LPCkRZLFDNA+bfkxWT5Gj9tWba0fGoaAYzIqswCrpJHq8QQj
eF6aBll74OgQV3f8WxLqgVY2LjAgmzf7IfZilC6aISUwHGEKIhEMbKGN3TvEc4RL
qzT6jYHlpHY20g3VJo+YSqfC4e7XxAKen743x2fcC/WRAXUBZWdseJ2rsTfwjYU/
15h5LYwY6RIA4ONlKL7mGuduSz62bGPN0Lo9RphUem2VUZw6ToDp9QvMb8nVLBBz
AArPVHS4+zOqrzIPkvxN1mU3j/gJCxPJdpZSF/N279Gl4UoaLbiYlZxwcFuTLijy
DknnKjSCST/Ow/0=
-----END CERTIFICATE-----
Generated at Fri Aug 23 20:10:35 2024 by rpki-client on console-ams.rpki-client.org