Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3138382e302f32322d3232203d3e20323731363431.roa
File:                     3230302e3139342e3138382e302f32322d3232203d3e20323731363431.roa (raw, json)
Hash identifier:          /uBhCAHw39nfGIAXmTnBj8mJ0XZBRSREB+gtWS/5TtY=
Subject key identifier:   5A:A6:B7:4A:92:E7:B8:84:C8:C8:EE:88:37:18:04:0D:AB:33:C1:6F
Certificate issuer:       /CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
Certificate serial:       18C07604865C5C5645B36D9AA4BCC5F28EE2714C
Authority key identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3138382e302f32322d3232203d3e20323731363431.roa
Signing time:             Fri 31 May 2024 15:21:43 +0000
ROA not before:           Fri 31 May 2024 15:16:43 +0000
ROA not after:            Fri 30 May 2025 15:21:43 +0000
asID:                     271641
IP address blocks:        200.194.188.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 04:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c0:76:04:86:5c:5c:56:45:b3:6d:9a:a4:bc:c5:f2:8e:e2:71:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
        Validity
            Not Before: May 31 15:16:43 2024 GMT
            Not After : May 30 15:21:43 2025 GMT
        Subject: CN=5AA6B74A92E7B884C8C8EE883718040DAB33C16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ee:0e:2e:32:50:cc:b0:94:0c:dc:9e:65:09:
                    79:fd:a4:4b:f3:4d:e7:fb:ad:10:ed:97:7a:13:c4:
                    1a:64:fa:61:4b:32:dd:f4:b0:c6:ba:8f:cd:b7:da:
                    2b:81:75:24:08:1a:43:49:0b:29:b2:40:f8:06:ee:
                    f9:71:2f:d6:48:29:d1:5c:2c:66:2e:e5:7f:93:ab:
                    c8:97:ca:3e:fe:7d:db:3c:af:3a:66:cd:83:c7:86:
                    85:6f:64:79:f7:8e:f3:a4:7c:3d:6b:ec:69:69:1e:
                    59:ea:e5:94:c2:22:6f:b6:39:4e:32:9c:58:8a:77:
                    9d:a7:4b:6f:c0:c3:c9:4f:8d:4b:b9:a3:5f:70:8a:
                    39:61:29:2c:ad:48:5a:31:0a:4f:81:8c:48:ef:f7:
                    50:9c:b4:ec:48:d9:63:06:d2:e4:c7:d2:54:89:d1:
                    a9:fa:82:90:2b:ea:1e:b2:78:79:e9:32:9b:db:36:
                    1c:b8:40:d0:25:ff:51:8a:4e:22:a9:23:7c:be:41:
                    48:71:bf:44:75:8b:aa:57:1b:67:4d:c4:8d:9a:7d:
                    a6:45:48:4b:d0:d4:8e:ec:05:e7:7c:d2:ae:98:46:
                    71:5e:b7:1e:78:2a:48:b7:d0:49:b8:f3:47:cb:93:
                    9b:bf:94:d3:c9:0a:ed:cf:2e:1f:b3:9c:f0:a6:46:
                    7b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A6:B7:4A:92:E7:B8:84:C8:C8:EE:88:37:18:04:0D:AB:33:C1:6F
            X509v3 Authority Key Identifier:
                keyid:D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3138382e302f32322d3232203d3e20323731363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:1a:e3:26:44:6d:09:99:21:3f:f3:90:df:f3:b6:16:bb:43:
         5f:f5:81:5e:ea:1e:44:1e:ec:c5:e5:c4:90:bd:23:12:37:7c:
         6a:fc:67:99:48:da:9d:4a:82:db:a3:79:fe:4b:8b:c8:92:8a:
         45:76:a3:58:0e:d4:59:7e:2f:51:25:99:01:c6:14:4d:ab:f9:
         ee:46:54:32:18:d0:ef:ab:8e:f6:4a:ae:13:01:a8:f0:d5:f8:
         fa:06:11:64:e3:5d:b5:24:39:c1:82:f5:fb:cf:85:d4:f1:51:
         ed:d3:d4:e6:ab:31:92:32:04:e7:e7:57:dd:d7:59:91:1d:5f:
         16:10:2d:9e:91:26:f2:20:15:69:ef:ac:36:ef:26:c4:1b:a2:
         9a:a8:fa:b9:f4:53:32:cb:18:9f:47:23:5b:50:6a:9a:e6:de:
         c7:41:2f:32:2b:27:90:a7:35:fa:b7:eb:a7:bd:67:33:cc:d1:
         2a:ea:c0:64:56:1a:41:1c:4f:ba:62:72:b2:f5:85:c7:ad:7a:
         05:e2:fc:d4:c2:2c:eb:12:6a:15:9c:19:dd:7c:44:8c:cb:10:
         53:3b:0d:26:77:ec:28:f9:5a:47:e2:7a:12:60:7f:52:df:d8:
         21:52:da:00:6e:53:12:1c:b0:af:62:47:bd:cb:c2:f5:69:6d:
         c6:7e:f5:1d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGMB2BIZcXFZFs22apLzF8o7icUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM5REFGRUZFNUIzQzg3MEY5RTFBOEJEQUU5MjRFMjlF
RjFBOTkxRDAeFw0yNDA1MzExNTE2NDNaFw0yNTA1MzAxNTIxNDNaMDMxMTAvBgNV
BAMTKDVBQTZCNzRBOTJFN0I4ODRDOEM4RUU4ODM3MTgwNDBEQUIzM0MxNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD7g4uMlDMsJQM3J5lCXn9pEvz
Tef7rRDtl3oTxBpk+mFLMt30sMa6j8232iuBdSQIGkNJCymyQPgG7vlxL9ZIKdFc
LGYu5X+Tq8iXyj7+fds8rzpmzYPHhoVvZHn3jvOkfD1r7GlpHlnq5ZTCIm+2OU4y
nFiKd52nS2/Aw8lPjUu5o19wijlhKSytSFoxCk+BjEjv91CctOxI2WMG0uTH0lSJ
0an6gpAr6h6yeHnpMpvbNhy4QNAl/1GKTiKpI3y+QUhxv0R1i6pXG2dNxI2afaZF
SEvQ1I7sBed80q6YRnFetx54Kki30Em480fLk5u/lNPJCu3PLh+znPCmRntnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWqa3SpLnuITIyO6INxgEDaszwW8wHwYDVR0j
BBgwFoAU052v7+WzyHD54ai9rpJOKe8amR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1J0aHlNTkNGd29yY0hXQ3ZFd3o1QUZ1aUVqd1J6YnJEOURqbVNmZWZa
NVMvMS9EMzlEQUZFRkU1QjNDODcwRjlFMUE4QkRBRTkyNEUyOUVGMUE5OTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzOURBRkVGRTVCM0M4NzBG
OUUxQThCREFFOTI0RTI5RUYxQTk5MUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdSdGh5TU5DRndvcmNIV0N2RXd6NUFGdWlFandSemJyRDlEam1TZmVmWjVTLzEv
MzIzMDMwMmUzMTM5MzQyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMTM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsjCvDANBgkqhkiG9w0BAQsFAAOCAQEAshrj
JkRtCZkhP/OQ3/O2FrtDX/WBXuoeRB7sxeXEkL0jEjd8avxnmUjanUqC26N5/kuL
yJKKRXajWA7UWX4vUSWZAcYUTav57kZUMhjQ76uO9kquEwGo8NX4+gYRZONdtSQ5
wYL1+8+F1PFR7dPU5qsxkjIE5+dX3ddZkR1fFhAtnpEm8iAVae+sNu8mxBuimqj6
ufRTMssYn0cjW1Bqmubex0EvMisnkKc1+rfrp71nM8zRKurAZFYaQRxPumJysvWF
x616BeL81MIs6xJqFZwZ3XxEjMsQUzsNJnfsKPlaR+J6EmB/Ut/YIVLaAG5TEhyw
r2JHvcvC9Wltxn71HQ==
-----END CERTIFICATE-----
Generated at Tue Nov 5 08:36:24 2024 by rpki-client on console-fra.rpki-client.org