Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32322d3234203d3e203631373932.roa
File:                     3230312e35352e3139362e302f32322d3234203d3e203631373932.roa (raw, json)
Hash identifier:          mCQbyTKnGROjUa9T9WTCJHRuphPeC7SedLa5BC/qjjQ=
Subject key identifier:   E5:A8:AD:3C:D5:F2:3D:5C:0B:E2:45:BA:8F:D4:C7:3B:E8:4F:C1:C3
Certificate issuer:       /CN=7118DBB6F419AC1957CD203A0BE108FBC95D0C04
Certificate serial:       52CEB62BBE810D47DF8DFD9F1A5FDEA2A5C06DF9
Authority key identifier: 71:18:DB:B6:F4:19:AC:19:57:CD:20:3A:0B:E1:08:FB:C9:5D:0C:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32322d3234203d3e203631373932.roa
Signing time:             Wed 28 Jun 2023 11:42:00 +0000
ROA not before:           Wed 28 Jun 2023 11:37:00 +0000
ROA not after:            Wed 26 Jun 2024 11:42:00 +0000
asID:                     61792
IP address blocks:        201.55.196.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 11:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ce:b6:2b:be:81:0d:47:df:8d:fd:9f:1a:5f:de:a2:a5:c0:6d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7118DBB6F419AC1957CD203A0BE108FBC95D0C04
        Validity
            Not Before: Jun 28 11:37:00 2023 GMT
            Not After : Jun 26 11:42:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:fa:8d:dc:32:e8:06:71:6f:6e:2e:4e:eb:
                    fe:6a:38:10:63:93:db:30:ef:6e:5f:12:7c:fb:8c:
                    05:df:e5:a5:64:42:c3:09:18:12:f4:5e:58:3f:25:
                    7e:04:e1:54:69:68:da:d9:43:09:15:a8:f9:f9:d4:
                    d7:68:13:6f:03:c8:f2:d0:03:23:44:94:df:52:6c:
                    82:15:94:3d:ea:55:99:15:d3:76:ff:4c:56:8d:10:
                    48:f6:32:d0:92:58:a0:b1:bd:ab:e2:c4:4a:3e:ff:
                    86:1f:3c:08:a8:05:2e:1c:f8:6f:5e:5b:28:30:aa:
                    7a:56:99:33:97:8d:03:25:45:1c:8b:c4:67:41:9e:
                    ef:95:3f:cc:77:4b:44:84:44:02:8b:76:1f:ec:7c:
                    9a:07:b1:c4:59:a1:ed:56:91:d4:12:f6:b5:c7:a7:
                    78:ba:ba:4f:ef:60:16:31:16:15:51:ca:78:f3:c5:
                    78:a4:c3:55:f8:0b:7f:2f:2f:99:57:7a:dc:30:0c:
                    bf:1f:df:23:ec:0b:07:df:80:43:77:88:b6:f1:48:
                    90:b5:a7:97:92:9f:dc:12:de:87:57:b3:61:3b:89:
                    28:bb:95:ad:05:6a:e1:7d:af:a6:c5:b1:c7:b6:e2:
                    4e:49:fa:fb:61:59:df:80:00:25:7c:88:13:c8:d0:
                    ca:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A8:AD:3C:D5:F2:3D:5C:0B:E2:45:BA:8F:D4:C7:3B:E8:4F:C1:C3
            X509v3 Authority Key Identifier:
                keyid:71:18:DB:B6:F4:19:AC:19:57:CD:20:3A:0B:E1:08:FB:C9:5D:0C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32322d3234203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:db:3b:4b:e2:ed:15:09:d3:e5:fa:b7:34:65:fd:75:9d:4c:
         33:62:3c:91:ad:83:e1:6f:f0:0b:02:91:8d:47:a0:78:35:93:
         23:9c:d8:95:43:fa:20:5d:fc:c3:05:94:0a:cd:37:37:f0:71:
         50:f5:2c:c8:11:ee:5a:12:74:64:e2:32:08:06:29:a6:33:d5:
         7c:b5:07:f2:82:4b:d0:35:b5:a2:28:43:f3:4d:14:f0:68:6f:
         b5:a9:22:a1:d6:85:03:6f:ff:e3:ad:71:30:20:85:5e:32:0f:
         1a:8b:40:06:3a:46:0c:ca:61:05:ba:70:90:1e:57:6b:b3:9e:
         d6:3b:48:c6:7b:b8:27:e6:90:66:e1:2d:94:f5:3a:0a:08:eb:
         c2:79:79:a1:fc:5e:09:3d:ea:ae:c6:eb:21:d0:7b:ce:92:98:
         9b:5c:25:13:f6:18:5b:64:d3:c1:4d:c2:2f:a3:9a:47:6d:1b:
         07:20:48:71:17:33:cc:23:ca:a6:42:70:70:e3:80:6d:a4:f6:
         93:43:cf:2a:33:bc:2a:e2:75:e0:56:cc:4e:85:61:9c:5b:6c:
         11:4b:47:ec:6e:c3:75:f7:f7:bd:0c:bb:3e:66:26:92:07:4f:
         91:91:6b:4f:c9:ad:1f:39:d3:04:dc:da:45:ba:a8:47:a2:fe:
         43:74:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 18:30:28 2024 by rpki-client on console-ams.rpki-client.org