Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3230312e32302e3136302e302f32302d3232203d3e203238363036.roa
File:                     3230312e32302e3136302e302f32302d3232203d3e203238363036.roa (raw, json)
Hash identifier:          zVlAuQrs4O/ng1m/CG4nFvMvGTMYmJ+jV4alWZ5iW0M=
Subject key identifier:   1F:7C:12:A7:41:59:5D:4C:7C:26:06:34:3A:FB:2C:5E:FB:F8:23:5A
Certificate issuer:       /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Certificate serial:       315AFC29B6F627C3F0E5976E13484C3B0910E3B0
Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3230312e32302e3136302e302f32302d3232203d3e203238363036.roa
Signing time:             Fri 31 May 2024 12:44:27 +0000
ROA not before:           Fri 31 May 2024 12:39:27 +0000
ROA not after:            Fri 30 May 2025 12:44:27 +0000
asID:                     28606
IP address blocks:        201.20.160.0/20 maxlen: 22

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 23:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5a:fc:29:b6:f6:27:c3:f0:e5:97:6e:13:48:4c:3b:09:10:e3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
        Validity
            Not Before: May 31 12:39:27 2024 GMT
            Not After : May 30 12:44:27 2025 GMT
        Subject: CN=1F7C12A741595D4C7C2606343AFB2C5EFBF8235A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:d8:f8:bd:1c:35:9e:ec:3c:a1:1f:84:92:
                    94:86:a3:b3:72:a2:c4:8c:b7:21:80:3f:7e:bd:94:
                    c0:ba:21:f6:60:67:f0:64:c0:a2:07:1e:28:25:ad:
                    fd:4d:54:5c:da:12:5f:78:e0:4f:cb:9b:de:7a:1b:
                    b4:55:61:fa:3a:e0:c8:26:77:1c:8d:c8:64:7c:68:
                    6b:87:a5:2c:65:1a:a7:07:2c:fd:ce:f3:1b:31:46:
                    4f:05:f1:5d:d6:3a:4a:94:f3:20:3d:04:96:9a:84:
                    9d:a2:f9:d6:45:75:5a:5b:1f:16:26:30:32:8d:f2:
                    f4:83:25:39:b8:59:7e:29:4b:17:c3:be:8c:6e:a2:
                    b9:56:a0:cc:f0:42:96:0d:09:a2:a5:d5:9f:29:82:
                    8b:20:e8:43:b6:0c:22:3b:94:e6:74:4a:dd:c9:0c:
                    b7:7b:f1:f2:7c:2b:a6:64:43:38:50:23:21:92:6e:
                    40:74:01:f5:29:f9:ef:61:27:13:8c:14:59:98:6f:
                    83:a2:73:21:46:e0:d3:45:89:e1:99:b9:43:e5:50:
                    72:5b:42:75:5b:1f:b5:8d:6b:21:f3:53:e4:86:af:
                    2d:3b:85:a3:a9:56:98:24:5c:68:5e:52:6e:c4:29:
                    ec:51:f2:87:52:3f:5b:5d:52:ce:62:68:a1:1d:cb:
                    b8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7C:12:A7:41:59:5D:4C:7C:26:06:34:3A:FB:2C:5E:FB:F8:23:5A
            X509v3 Authority Key Identifier:
                keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3230312e32302e3136302e302f32302d3232203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         f2:05:c5:76:d5:df:a6:e4:12:8d:ce:11:93:6f:2a:9f:08:5d:
         2b:e9:98:6a:dd:b3:b2:a3:07:93:c5:37:87:47:d3:a2:14:9f:
         14:8c:78:16:90:60:67:00:b6:a5:5b:dd:7f:a2:40:e3:ef:42:
         c2:fb:63:c3:ed:c2:ed:bc:16:d8:39:d7:2f:91:a3:61:de:60:
         85:5c:7d:6e:e3:05:31:f0:c6:a7:ab:12:ee:4e:22:64:9a:df:
         f4:f4:7a:2c:78:84:3f:7b:62:e9:99:87:69:bc:ef:d5:52:49:
         24:b1:96:a6:10:f0:82:62:53:aa:b3:a7:81:71:18:e1:35:6f:
         66:53:27:77:e6:84:32:c6:e1:68:17:0b:ad:0b:54:42:c5:f6:
         c8:24:e1:46:43:d8:42:94:16:24:33:70:11:e8:46:98:5e:b6:
         cc:27:cc:ba:f8:66:fb:d7:ec:89:36:31:3b:f6:0e:df:ba:7a:
         78:4e:c1:d6:c6:27:84:64:1e:0b:5e:d3:79:e5:10:b7:a4:12:
         07:f2:66:da:52:a1:40:c8:4a:e2:b9:c2:9d:83:85:e0:53:86:
         ea:61:51:71:42:84:3a:7b:6d:60:74:20:5a:e6:96:25:9e:61:
         15:07:12:f2:35:88:f1:3b:8d:fb:2f:97:da:84:02:61:7d:78:
         01:c5:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 00:27:45 2024 by rpki-client on console-fra.rpki-client.org