Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3138382e302f32342d3234203d3e20323731353537.roa
File:                     3138312e3233332e3138382e302f32342d3234203d3e20323731353537.roa (raw, json)
Hash identifier:          9UUGRhX3YjEdLvEa2BFHayk3e7A/BW6HxcaalXu+jc4=
Subject key identifier:   C6:05:74:0C:A8:9D:6F:85:E5:69:D0:AA:7A:E5:71:69:C9:E1:45:D6
Certificate issuer:       /CN=BDEDBAF5A2A83155974AEA6482B69592C8F88CC3
Certificate serial:       5AE0F640F22B2F5B53787B309F9D38CCF941C8E5
Authority key identifier: BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3138382e302f32342d3234203d3e20323731353537.roa
Signing time:             Tue 23 May 2023 16:08:03 +0000
ROA not before:           Tue 23 May 2023 16:03:03 +0000
ROA not after:            Tue 21 May 2024 16:08:03 +0000
asID:                     271557
IP address blocks:        181.233.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e0:f6:40:f2:2b:2f:5b:53:78:7b:30:9f:9d:38:cc:f9:41:c8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEDBAF5A2A83155974AEA6482B69592C8F88CC3
        Validity
            Not Before: May 23 16:03:03 2023 GMT
            Not After : May 21 16:08:03 2024 GMT
        Subject: CN=C605740CA89D6F85E569D0AA7AE57169C9E145D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a1:5a:64:46:8e:0b:f2:1e:f7:29:27:2f:55:
                    7a:59:2f:cc:8b:95:16:a6:a2:c8:68:7d:fd:65:da:
                    ab:7e:6e:ea:07:8c:67:5e:41:44:57:44:85:20:f2:
                    69:d3:24:b1:b8:50:e8:15:02:48:53:42:85:0c:b2:
                    66:89:5b:66:38:a1:b1:10:22:89:a1:9b:ad:76:e1:
                    53:a6:3e:66:1b:fa:e1:d3:35:bb:c9:5f:cc:75:75:
                    d8:8a:57:cc:3e:cc:43:97:a8:c5:cf:6f:90:81:87:
                    28:3b:c1:3a:7d:a6:00:51:e4:a5:b0:a5:43:70:94:
                    1c:31:08:10:14:cc:e8:cd:1d:9b:67:60:e0:0d:99:
                    82:38:34:23:21:31:ab:0b:a4:52:d9:94:db:ad:eb:
                    b2:ab:fa:95:c2:96:d9:0a:d9:c9:d8:95:90:d6:86:
                    bd:36:2f:cc:f2:ad:0a:89:42:93:4a:de:ac:db:27:
                    03:2a:04:b3:57:65:7c:fb:78:4b:78:c6:af:f7:16:
                    10:ec:c3:2f:20:64:ff:14:e7:fc:d7:b0:40:13:87:
                    57:18:59:c6:97:b7:a4:71:55:2f:e6:99:9c:df:71:
                    d9:cf:9d:6b:f9:4c:25:a0:76:aa:c8:ad:14:12:ab:
                    08:ad:49:0a:55:fe:73:55:50:2c:08:3f:26:0f:c7:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:05:74:0C:A8:9D:6F:85:E5:69:D0:AA:7A:E5:71:69:C9:E1:45:D6
            X509v3 Authority Key Identifier:
                keyid:BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3138382e302f32342d3234203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:68:52:2d:b2:d0:88:5b:f3:61:80:9f:4b:bc:7c:0b:c7:2a:
         82:bb:17:c0:a5:54:cf:01:cc:74:cf:bf:d7:c6:05:d9:40:ac:
         69:97:1e:28:ce:ac:5a:c5:3e:33:dc:d1:73:ef:0c:dc:81:9c:
         af:da:ae:d7:03:40:f2:34:bf:68:a0:61:a1:09:3e:1f:57:8f:
         c3:00:90:82:7b:b5:88:99:61:64:23:cd:94:85:27:2a:fd:b5:
         47:ce:5a:12:8b:25:17:7b:cf:a6:fa:ed:fd:25:f8:0c:54:c9:
         10:c8:fa:d3:e7:f2:c4:4c:33:7b:d9:46:e5:27:b2:1c:e2:7c:
         98:88:4c:8a:67:79:56:d5:e4:35:aa:8e:37:47:a3:9a:02:86:
         38:ed:2f:24:7f:7b:12:4d:41:0d:f1:f6:0f:f0:9f:71:fc:a2:
         90:6a:4f:9b:9d:2c:0a:89:27:0e:7b:46:28:c3:8e:19:40:77:
         27:a8:4a:ed:45:6e:24:85:76:89:0f:48:0f:84:7c:a5:6c:1d:
         2c:68:d5:b2:2f:8d:94:af:a1:79:a1:6b:fe:e3:8a:6a:b1:fe:
         46:a8:86:64:ad:00:26:c3:44:cf:67:fe:58:b3:5a:89:c5:16:
         af:31:d2:ea:1c:65:85:8b:75:a1:c3:50:3c:d9:bf:87:55:c9:
         dc:35:3d:15
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWuD2QPIrL1tTeHswn504zPlByOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRFREJBRjVBMkE4MzE1NTk3NEFFQTY0ODJCNjk1OTJD
OEY4OENDMzAeFw0yMzA1MjMxNjAzMDNaFw0yNDA1MjExNjA4MDNaMDMxMTAvBgNV
BAMTKEM2MDU3NDBDQTg5RDZGODVFNTY5RDBBQTdBRTU3MTY5QzlFMTQ1RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJoVpkRo4L8h73KScvVXpZL8yL
lRamoshoff1l2qt+buoHjGdeQURXRIUg8mnTJLG4UOgVAkhTQoUMsmaJW2Y4obEQ
Iomhm6124VOmPmYb+uHTNbvJX8x1ddiKV8w+zEOXqMXPb5CBhyg7wTp9pgBR5KWw
pUNwlBwxCBAUzOjNHZtnYOANmYI4NCMhMasLpFLZlNut67Kr+pXCltkK2cnYlZDW
hr02L8zyrQqJQpNK3qzbJwMqBLNXZXz7eEt4xq/3FhDswy8gZP8U5/zXsEATh1cY
WcaXt6RxVS/mmZzfcdnPnWv5TCWgdqrIrRQSqwitSQpV/nNVUCwIPyYPxyP7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxgV0DKidb4XladCqeuVxacnhRdYwHwYDVR0j
BBgwFoAUve269aKoMVWXSupkgraVksj4jMMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3RhSzdBVFZkbVpXYllORTZkUFpXV3RIMXA2U003TFVZaVhLVXRkRjlE
dFYvMC9CREVEQkFGNUEyQTgzMTU1OTc0QUVBNjQ4MkI2OTU5MkM4Rjg4Q0MzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JERURCQUY1QTJBODMxNTU5
NzRBRUE2NDgyQjY5NTkyQzhGODhDQzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N0YUs3QVRWZG1aV2JZTkU2ZFBaV1d0SDFwNlNNN0xVWWlYS1V0ZEY5RHRWLzAv
MzEzODMxMmUzMjMzMzMyZTMxMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTM1MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALXpvDANBgkqhkiG9w0BAQsFAAOCAQEAZ2hS
LbLQiFvzYYCfS7x8C8cqgrsXwKVUzwHMdM+/18YF2UCsaZceKM6sWsU+M9zRc+8M
3IGcr9qu1wNA8jS/aKBhoQk+H1ePwwCQgnu1iJlhZCPNlIUnKv21R85aEoslF3vP
pvrt/SX4DFTJEMj60+fyxEwze9lG5SeyHOJ8mIhMimd5VtXkNaqON0ejmgKGOO0v
JH97Ek1BDfH2D/CfcfyikGpPm50sCoknDntGKMOOGUB3J6hK7UVuJIV2iQ9ID4R8
pWwdLGjVsi+NlK+heaFr/uOKarH+RqiGZK0AJsNEz2f+WLNaicUWrzHS6hxlhYt1
ocNQPNm/h1XJ3DU9FQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:06 2023 by rpki-client on console-ams.rpki-client.org