Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3138392e302f32342d3332203d3e20323731363431.roa
File:                     3230302e3139342e3138392e302f32342d3332203d3e20323731363431.roa (raw, json)
Hash identifier:          xGIaoyJ6iEQ+IUG7Uz+Oz3Edobfwhswcq4akT9i2L5k=
Subject key identifier:   47:47:DC:72:14:68:3E:A4:64:ED:2F:55:EC:78:F1:00:9A:06:DF:A0
Certificate issuer:       /CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
Certificate serial:       28684BE2447446265BC98090431592CC75BDAD81
Authority key identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3138392e302f32342d3332203d3e20323731363431.roa
Signing time:             Fri 31 May 2024 15:19:16 +0000
ROA not before:           Fri 31 May 2024 15:14:16 +0000
ROA not after:            Fri 30 May 2025 15:19:16 +0000
asID:                     271641
IP address blocks:        200.194.189.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 04:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:68:4b:e2:44:74:46:26:5b:c9:80:90:43:15:92:cc:75:bd:ad:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
        Validity
            Not Before: May 31 15:14:16 2024 GMT
            Not After : May 30 15:19:16 2025 GMT
        Subject: CN=4747DC7214683EA464ED2F55EC78F1009A06DFA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:d4:fe:67:35:f7:be:76:4b:a6:84:be:6d:
                    6b:5e:de:30:bc:60:3b:1a:ea:80:ae:e4:ec:d6:4f:
                    34:04:ad:df:2c:cc:5a:ce:33:23:91:9b:bb:fd:e3:
                    3a:49:db:d8:94:f7:65:40:9e:89:24:53:b3:bc:79:
                    8e:db:0f:2d:37:38:11:c0:f3:ef:ef:f0:19:a0:df:
                    29:1e:46:35:d6:c5:dc:05:d0:c4:5a:b4:e1:0c:33:
                    15:1f:bb:61:23:16:2e:cf:f9:fa:72:f8:66:75:e4:
                    90:da:e9:01:24:fa:15:1a:34:5f:54:fc:05:1e:e4:
                    10:e7:96:84:03:0d:34:67:46:6a:e9:68:f8:a3:a9:
                    03:a0:8a:ad:f3:cd:9d:99:d1:0b:a4:7d:60:c4:71:
                    e7:7b:29:22:90:9d:23:ff:86:81:c4:1a:cc:8e:45:
                    ed:5b:58:2e:2a:7b:65:6d:39:a3:7b:fc:2e:e4:ff:
                    6e:11:43:ee:77:24:9d:d9:92:da:ef:ec:a8:8c:2a:
                    d2:c6:36:30:fa:43:2b:ab:db:cf:de:12:d4:48:51:
                    47:22:aa:c4:a3:eb:7f:f2:9c:60:d0:17:35:49:2c:
                    46:2d:63:6c:5b:65:72:e2:68:13:76:1c:3d:50:4b:
                    29:d0:02:20:2b:1f:bc:92:8a:bf:6b:6e:b5:b1:4f:
                    52:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:47:DC:72:14:68:3E:A4:64:ED:2F:55:EC:78:F1:00:9A:06:DF:A0
            X509v3 Authority Key Identifier:
                keyid:D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3138392e302f32342d3332203d3e20323731363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:e2:7d:2e:78:af:cb:b9:f1:23:d6:28:f4:db:36:28:1f:5a:
         c6:27:f0:42:ba:cc:3f:ab:7a:dd:c8:af:9b:37:6c:be:4e:9b:
         3a:b1:7a:10:25:af:ed:10:ff:9f:f6:42:fc:ca:5f:a6:c9:fb:
         be:c2:00:c3:6f:76:4c:5e:4e:3f:39:c1:fd:1a:89:49:4d:c5:
         72:ac:03:af:cd:de:46:25:d0:6d:1e:53:a7:80:0c:eb:34:e2:
         eb:50:5d:e5:ab:89:c1:4c:68:ed:1e:d5:22:ce:7e:6c:79:3c:
         5d:80:28:14:78:9c:c8:59:3e:ef:ea:49:26:58:ab:4d:67:80:
         33:ef:26:8c:81:83:b6:66:b5:dd:11:a7:64:b3:af:17:b4:79:
         3f:2e:2e:fe:18:12:d7:b5:8b:08:df:40:87:ae:2c:76:30:f7:
         2b:ec:90:89:f0:47:f7:33:56:17:57:df:e4:4a:bb:b3:97:6b:
         57:78:04:33:db:0a:d6:80:e0:68:7b:16:54:b7:7b:bb:fd:8c:
         ee:ac:14:72:c8:76:c9:22:bb:5d:0b:2a:cb:a3:41:0d:71:9c:
         23:c6:53:a6:a6:24:9f:3b:e1:04:d7:d0:71:28:55:83:c6:b1:
         73:e8:9e:d5:34:b2:0b:2c:62:5d:c2:ab:7f:ba:f7:4f:07:0c:
         ee:ef:a8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 08:36:24 2024 by rpki-client on console-fra.rpki-client.org