Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235312e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3235312e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          JZNkZc2s0kZ8BkI9ArQe/Sd6sxA3/oKisJ6PyqmHixw=
Subject key identifier:   67:24:5B:BB:60:03:4C:88:0D:E6:32:00:1A:FB:14:83:2C:F2:FF:F7
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       4AE5D10A0BFB0240DFE2543872CD6F3AFE663590
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235312e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:23 +0000
ROA not before:           Wed 03 Apr 2024 23:07:23 +0000
ROA not after:            Wed 02 Apr 2025 23:12:23 +0000
asID:                     52871
IP address blocks:        201.157.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 15:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e5:d1:0a:0b:fb:02:40:df:e2:54:38:72:cd:6f:3a:fe:66:35:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:23 2024 GMT
            Not After : Apr  2 23:12:23 2025 GMT
        Subject: CN=67245BBB60034C880DE632001AFB14832CF2FFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:73:28:21:69:f1:52:a8:ea:d8:c9:c4:da:
                    fd:33:0e:41:50:b4:b4:d0:4d:8e:40:55:4e:6e:11:
                    12:ea:55:c7:6a:11:be:1c:ba:9b:af:86:db:bf:e3:
                    45:5f:19:ac:bf:16:3e:b1:7f:08:07:a5:76:49:8c:
                    8b:7a:e9:c9:9d:00:32:97:97:d3:ab:36:14:ea:4e:
                    73:95:2b:a7:b4:68:74:d1:6d:e0:e1:4a:86:5f:57:
                    78:88:de:a6:60:50:85:53:0c:c1:8e:51:f0:6c:25:
                    84:c6:aa:8a:0a:d8:63:76:6d:72:3e:6a:fa:4c:bd:
                    cd:6b:63:1f:7d:40:3b:c0:34:fb:80:10:00:a4:b4:
                    58:fe:9f:0d:f7:6d:c8:1d:87:e9:82:b4:69:0e:04:
                    37:8e:b7:4f:d9:03:d4:17:1a:50:b2:1c:0d:eb:29:
                    1e:4c:21:cb:08:62:43:f5:d1:92:cc:39:6f:ff:f1:
                    2e:74:77:8b:fe:44:af:4c:3a:03:7f:00:92:79:c5:
                    14:df:47:bf:c0:be:0a:83:91:b1:07:a1:04:a5:32:
                    86:e0:8b:5b:b4:8a:ba:99:97:3b:a3:74:2e:52:8a:
                    dd:43:2d:f0:2f:8a:3f:88:c1:c2:59:b1:cb:09:0f:
                    a8:25:6f:2e:1f:c7:0e:c7:64:9f:04:36:21:22:96:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:24:5B:BB:60:03:4C:88:0D:E6:32:00:1A:FB:14:83:2C:F2:FF:F7
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235312e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:77:eb:7d:3a:c5:9d:b5:2f:02:84:4e:c6:0e:78:36:d3:fb:
         38:40:3e:34:4d:48:82:c3:13:86:2f:df:92:59:60:e9:c0:b5:
         c9:19:fa:36:17:ec:41:68:75:11:3e:b6:2f:e5:4e:60:63:42:
         24:d7:6f:52:cb:2c:c2:ad:0d:e2:dc:1e:fe:9d:ac:4d:8b:51:
         4a:11:d2:f9:e9:04:ca:2e:26:b1:a3:95:6e:93:a3:aa:bb:b7:
         be:81:ba:05:fb:a8:7b:60:18:94:7f:01:a3:b6:13:e3:e2:b3:
         81:cd:63:52:9e:db:9f:57:c7:c3:0b:d7:0e:1e:9e:59:ee:dd:
         0b:ad:65:98:57:b8:51:a7:f3:8e:11:59:6a:e5:31:06:51:59:
         4f:13:29:78:49:1c:84:f2:05:36:4e:33:84:89:f2:ea:cf:97:
         de:9b:87:05:ab:d8:8a:d1:43:98:04:9e:df:28:2d:22:28:62:
         13:d4:ff:5e:29:e6:72:42:e4:2d:dc:a6:3a:ac:ee:37:52:44:
         bf:54:4b:3b:9d:e8:d8:67:ae:a9:c0:ab:21:1d:5e:24:82:cf:
         d2:5c:83:b1:60:ce:b1:7c:71:51:b2:75:69:b2:a4:7b:8d:37:
         ac:4f:41:19:91:69:d1:61:11:e7:02:87:fe:24:7c:57:ad:b1:
         2c:bd:94:65
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSuXRCgv7AkDf4lQ4cs1vOv5mNZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1QUQ3NjJGOTkwRjI2NjA4N0Y0NkI1QzIyRTlFQTlF
Mjg4QkY4RTAeFw0yNDA0MDMyMzA3MjNaFw0yNTA0MDIyMzEyMjNaMDMxMTAvBgNV
BAMTKDY3MjQ1QkJCNjAwMzRDODgwREU2MzIwMDFBRkIxNDgzMkNGMkZGRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCHMoIWnxUqjq2MnE2v0zDkFQ
tLTQTY5AVU5uERLqVcdqEb4cupuvhtu/40VfGay/Fj6xfwgHpXZJjIt66cmdADKX
l9OrNhTqTnOVK6e0aHTRbeDhSoZfV3iI3qZgUIVTDMGOUfBsJYTGqooK2GN2bXI+
avpMvc1rYx99QDvANPuAEACktFj+nw33bcgdh+mCtGkOBDeOt0/ZA9QXGlCyHA3r
KR5MIcsIYkP10ZLMOW//8S50d4v+RK9MOgN/AJJ5xRTfR7/AvgqDkbEHoQSlMobg
i1u0irqZlzujdC5Sit1DLfAvij+IwcJZscsJD6glby4fxw7HZJ8ENiEilsS7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZyRbu2ADTIgN5jIAGvsUgyzy//cwHwYDVR0j
BBgwFoAU01rXYvmQ8mYIf0a1wi6eqeKIv44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQzTnVzSEVzWDN1c1BVNWhocnExOVhiWWpTZmh5dHJaYTVnTUdHcGJ6
TUcvMS9EMzVBRDc2MkY5OTBGMjY2MDg3RjQ2QjVDMjJFOUVBOUUyODhCRjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNUFENzYyRjk5MEYyNjYw
ODdGNDZCNUMyMkU5RUE5RTI4OEJGOEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUM051c0hFc1gzdXNQVTVoaHJxMTlYYllqU2ZoeXRyWmE1Z01HR3Biek1HLzEv
MzIzMDMxMmUzMTM1MzcyZTMyMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzODM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJnfswDQYJKoZIhvcNAQELBQADggEBAJ936306
xZ21LwKETsYOeDbT+zhAPjRNSILDE4Yv35JZYOnAtckZ+jYX7EFodRE+ti/lTmBj
QiTXb1LLLMKtDeLcHv6drE2LUUoR0vnpBMouJrGjlW6To6q7t76BugX7qHtgGJR/
AaO2E+Pis4HNY1Ke259Xx8ML1w4enlnu3QutZZhXuFGn844RWWrlMQZRWU8TKXhJ
HITyBTZOM4SJ8urPl96bhwWr2IrRQ5gEnt8oLSIoYhPU/14p5nJC5C3cpjqs7jdS
RL9USzud6NhnrqnAqyEdXiSCz9Jcg7FgzrF8cVGydWmypHuNN6xPQRmRadFhEecC
h/4kfFetsSy9lGU=
-----END CERTIFICATE-----
Generated at Fri Aug 23 20:10:35 2024 by rpki-client on console-ams.rpki-client.org