Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3137342e302f32332d3234203d3e20323635333033.roa
File:                     3230302e3135302e3137342e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          3JlYbCFsJpOQbJapa7d4R3TCf8ivRSzsjcnakQn+5Rc=
Subject key identifier:   95:00:62:59:91:07:C7:45:00:5D:EA:2E:FA:AE:5F:CF:5D:EE:83:05
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       4E1AB1ACDB0645E156542D3EA9756A5EAAF4ECC8
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3137342e302f32332d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 13:57:02 +0000
ROA not before:           Mon 08 Apr 2024 13:52:02 +0000
ROA not after:            Mon 07 Apr 2025 13:57:02 +0000
asID:                     265303
IP address blocks:        200.150.174.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1a:b1:ac:db:06:45:e1:56:54:2d:3e:a9:75:6a:5e:aa:f4:ec:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:52:02 2024 GMT
            Not After : Apr  7 13:57:02 2025 GMT
        Subject: CN=950062599107C745005DEA2EFAAE5FCF5DEE8305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:09:67:a9:e0:fb:9a:7a:cb:57:f7:51:85:ab:
                    43:5f:ee:f9:50:b0:82:1a:88:03:59:6c:87:56:7c:
                    e8:80:65:c4:69:ce:3f:26:3f:ba:fd:9e:bb:34:d0:
                    b0:2c:ea:b7:94:c6:09:66:87:9c:d6:fb:84:3c:f7:
                    fb:2f:4e:17:71:6a:52:56:b2:96:a8:80:52:0e:77:
                    57:e2:4f:a1:78:f0:32:fe:6c:44:27:04:fa:c4:8a:
                    31:9c:21:b1:84:22:ef:a7:a1:cb:c3:d2:a4:30:db:
                    57:c8:63:f4:2b:0c:78:96:9c:76:a5:6d:65:89:ab:
                    4d:51:e2:e7:ec:30:3e:21:97:81:b9:2f:94:78:3f:
                    0b:37:2a:eb:e1:33:98:8e:42:39:33:31:0c:a6:37:
                    01:cc:74:2d:3f:83:9b:bc:9e:35:0c:6a:c7:c7:9c:
                    0d:76:1c:cf:73:b6:25:bc:a1:ef:00:6b:ba:0a:6c:
                    11:62:f0:9f:55:93:e1:aa:c2:f8:26:c6:f9:10:10:
                    5c:af:04:ef:e2:87:0d:c3:1d:03:f7:ff:12:38:de:
                    4b:91:57:db:87:80:ec:e7:91:86:3a:38:72:8d:30:
                    94:bd:3a:7a:00:d8:1b:9a:21:31:9f:c4:f9:66:e0:
                    db:f9:e0:7f:bf:89:ac:d7:87:5f:6c:ae:e0:12:47:
                    bc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:00:62:59:91:07:C7:45:00:5D:EA:2E:FA:AE:5F:CF:5D:EE:83:05
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3137342e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:41:24:b9:40:0e:cd:88:db:21:b1:46:f2:62:06:e3:ed:ad:
         4d:d3:77:dd:43:3f:03:03:e4:30:c2:17:36:9d:40:34:b6:c3:
         57:3b:f7:1e:37:0b:50:fb:fd:21:0c:be:f7:9e:fc:f6:15:85:
         cb:be:87:ed:c5:1c:09:7a:ab:4d:6b:e2:56:2d:c8:18:9a:bd:
         e0:9c:56:97:ac:1a:68:63:47:c9:cf:e8:5b:79:a4:f0:25:17:
         4f:cf:44:bc:5c:a5:ad:38:36:63:bc:69:72:50:b6:17:23:3e:
         69:5b:74:f8:d6:bc:43:3e:a4:78:2f:14:db:03:08:88:e5:10:
         43:78:aa:c3:cd:dd:7e:a8:57:9b:d1:ad:68:17:6a:8f:66:c9:
         9c:40:41:bf:d9:47:57:bc:64:4c:26:90:f3:cd:73:44:d8:ee:
         e2:18:40:3f:dc:c9:cb:3c:a6:79:97:3b:d5:9c:97:c8:c0:b3:
         2d:fa:fb:b3:b7:6d:99:3a:af:2b:fa:42:35:eb:6e:f2:a0:ea:
         6d:d0:7e:99:04:16:18:45:07:74:cb:83:d9:09:a3:cd:3f:b7:
         0a:95:99:b3:6e:7f:b0:80:de:4b:dd:39:3b:16:71:4a:0f:82:
         8e:5b:a7:ca:05:72:3a:9b:f6:05:3a:87:58:c9:e8:bf:e3:69:
         f6:fc:30:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org