Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3136342e302f32332d3234203d3e20323635333033.roa
File:                     3230302e3135302e3136342e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          9pHEvg1Zoyc+YtUrqaTbbs1TPhH5l0R6J1fUQwnIpDM=
Subject key identifier:   C9:6B:F1:41:35:71:94:6B:37:95:21:9B:B0:60:37:0C:D0:92:9F:A4
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       3A3BA8E40CB86A1E965C62AD4FDA520FA7CEF697
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3136342e302f32332d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 13:59:44 +0000
ROA not before:           Mon 08 Apr 2024 13:54:44 +0000
ROA not after:            Mon 07 Apr 2025 13:59:44 +0000
asID:                     265303
IP address blocks:        200.150.164.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3b:a8:e4:0c:b8:6a:1e:96:5c:62:ad:4f:da:52:0f:a7:ce:f6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:54:44 2024 GMT
            Not After : Apr  7 13:59:44 2025 GMT
        Subject: CN=C96BF1413571946B3795219BB060370CD0929FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:36:03:7d:8e:b7:c3:53:fd:ce:de:e9:ff:
                    83:7e:41:89:75:90:0f:3a:59:97:46:45:3d:e7:c7:
                    da:5b:02:df:1c:16:2f:46:0f:dc:28:69:52:3d:b1:
                    ff:00:66:19:a4:77:41:dc:6d:40:46:c0:a1:dd:db:
                    89:bc:19:51:5c:67:60:f3:b5:ba:bc:19:2d:02:d2:
                    dc:24:56:b3:fd:e1:cf:8e:fc:42:9f:e7:ad:fb:3a:
                    32:2d:5b:10:02:67:7a:07:92:86:98:a6:fb:bc:2a:
                    ab:a0:3e:01:7d:cd:4b:97:5c:86:d5:82:95:b2:4e:
                    16:a2:81:12:95:ff:f0:7e:82:d9:79:b4:19:fe:43:
                    e1:1f:e0:4a:da:4c:e3:2f:d2:95:e1:44:6e:c1:26:
                    da:56:23:39:0b:69:3a:33:33:30:04:10:bf:f6:15:
                    d7:e2:56:19:c1:2c:f6:62:4e:53:9c:69:ee:a6:91:
                    06:e5:db:1d:3f:e0:06:a9:89:cb:8a:2b:c0:ac:f1:
                    0c:a1:08:70:e5:5b:d2:e2:b6:59:53:c8:ef:b0:95:
                    4e:e8:6a:15:6d:e6:a5:90:29:48:33:e3:9c:66:47:
                    d9:bd:da:30:f5:e6:78:a1:ff:98:dd:87:9d:1e:c7:
                    5e:f1:a1:4b:81:44:87:b2:e7:a0:4e:58:c6:0d:eb:
                    5f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6B:F1:41:35:71:94:6B:37:95:21:9B:B0:60:37:0C:D0:92:9F:A4
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3136342e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:b0:13:ee:a6:58:02:7d:23:57:ae:5b:bc:72:5d:05:0a:3f:
         dc:5b:ec:f4:44:78:82:e7:6c:f7:f2:2a:36:56:df:f3:9a:0a:
         2a:32:ab:34:3a:b7:6e:d0:df:df:2b:b4:e2:5c:a5:54:41:26:
         c4:f5:6a:03:53:ba:3c:a2:bd:d3:86:25:73:25:0a:2a:86:cb:
         dc:f7:5c:96:71:cc:b8:ba:54:41:41:b5:cb:2a:9d:7b:2f:3b:
         d6:37:d9:fc:17:46:39:8d:d6:e2:ec:ac:41:3a:8e:3f:c0:5d:
         96:12:c1:e5:4f:2d:b7:2b:86:35:4a:bb:5b:87:8d:62:45:25:
         1c:c0:8e:31:ac:01:8b:5c:53:9c:65:0d:96:f3:e9:63:3c:d1:
         a2:2f:a9:8b:b6:00:af:8d:a5:ce:de:33:30:3b:9b:0e:73:1f:
         ea:91:79:25:70:3f:ee:ef:bc:de:27:4f:e4:88:5c:dc:4e:4c:
         89:fb:70:54:89:c8:6c:e1:e7:a9:94:2a:a0:2f:6d:9b:32:27:
         ea:aa:59:fe:23:69:c0:17:d0:60:6f:72:c6:fc:86:ed:7b:62:
         5f:dc:48:e5:62:95:15:9e:76:0e:0d:2a:97:5f:d1:38:0f:9a:
         e1:45:dd:63:3f:4a:a7:ef:e8:3e:4c:a9:a5:16:2c:23:b1:88:
         0e:4b:6c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org