Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32332d3233203d3e20323730383236.roa
File:                     3230302e3231392e32382e302f32332d3233203d3e20323730383236.roa (raw, json)
Hash identifier:          0oApiM8CVFfpqvdhlLlD3rmK3x17ogJwkyhIve88QQg=
Subject key identifier:   78:A4:13:E8:E7:7C:21:C5:6A:FD:4F:F7:67:14:86:EA:36:34:CF:94
Certificate issuer:       /CN=D71606B1A6F25EDCF6323F7F5E7D161516E193C4
Certificate serial:       23BE793F495D0D2DD83F1377F1618454B2ADFFC3
Authority key identifier: D7:16:06:B1:A6:F2:5E:DC:F6:32:3F:7F:5E:7D:16:15:16:E1:93:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32332d3233203d3e20323730383236.roa
Signing time:             Thu 18 Apr 2024 17:34:33 +0000
ROA not before:           Thu 18 Apr 2024 17:29:33 +0000
ROA not after:            Thu 17 Apr 2025 17:34:33 +0000
asID:                     270826
IP address blocks:        200.219.28.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 19:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:be:79:3f:49:5d:0d:2d:d8:3f:13:77:f1:61:84:54:b2:ad:ff:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D71606B1A6F25EDCF6323F7F5E7D161516E193C4
        Validity
            Not Before: Apr 18 17:29:33 2024 GMT
            Not After : Apr 17 17:34:33 2025 GMT
        Subject: CN=78A413E8E77C21C56AFD4FF7671486EA3634CF94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:79:9d:68:ed:d9:ee:73:d3:3c:f4:2e:5d:
                    65:98:68:d8:23:05:31:45:b9:a8:f0:a6:c2:6b:44:
                    8c:01:9f:82:f0:8b:06:99:cc:b7:40:36:45:e5:d9:
                    f2:5e:6b:c3:b5:95:5c:e2:0b:d5:24:0a:b3:c6:49:
                    2e:ae:7f:5a:57:18:ae:76:8a:ee:01:54:85:20:24:
                    30:4e:98:ce:3f:ba:65:42:ab:f6:42:9a:e4:db:84:
                    2e:44:39:2c:71:6e:bb:ed:b9:99:2f:04:7b:0e:3b:
                    6a:70:66:9a:5b:ac:07:18:5c:6a:60:2f:4c:de:81:
                    92:a0:94:73:0a:7c:c3:75:3d:b4:7e:a7:b3:96:c9:
                    a2:45:ec:2a:58:7e:2a:16:af:2c:0a:f4:c6:78:f2:
                    2a:f7:d7:a8:bc:79:3f:fd:f8:16:05:66:77:12:12:
                    47:85:34:ad:76:45:dc:10:19:6d:c8:20:1a:f1:fe:
                    cd:24:10:c5:bf:1a:b7:ab:09:fc:a8:d0:0f:6a:3f:
                    02:d5:05:86:cf:54:c7:65:10:36:c5:4e:ad:d6:f3:
                    c9:92:81:ac:9b:74:e4:37:aa:54:0f:34:d1:93:e6:
                    8e:22:42:d1:c2:d7:6b:e3:15:b8:8a:55:1f:cf:8f:
                    a5:d8:d7:9c:c6:cd:87:b6:86:7c:3c:44:ca:43:34:
                    c3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A4:13:E8:E7:7C:21:C5:6A:FD:4F:F7:67:14:86:EA:36:34:CF:94
            X509v3 Authority Key Identifier:
                keyid:D7:16:06:B1:A6:F2:5E:DC:F6:32:3F:7F:5E:7D:16:15:16:E1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32332d3233203d3e20323730383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:53:40:55:f0:a1:7c:ac:35:7c:71:32:36:d3:1d:50:49:50:
         4b:2b:12:dd:b2:dc:84:be:ae:a7:3d:d6:22:0e:d2:af:c9:41:
         c3:e2:84:5c:c8:7b:bc:f5:8b:f3:04:4d:37:92:de:c3:2e:3e:
         34:94:80:9f:3a:ee:48:d9:97:e8:e0:a2:fa:7f:9f:bc:f6:62:
         9e:f1:f6:71:24:b8:55:ce:95:df:0a:aa:c4:3f:5a:c3:79:1a:
         a6:82:75:b1:99:e4:2a:50:c9:0d:cf:45:d5:d8:5a:46:64:f3:
         ca:5e:b9:da:c9:25:6c:10:37:23:4b:66:36:a8:bf:3d:85:3d:
         25:71:ab:7a:aa:c7:3b:b5:0b:41:e4:ce:fd:b9:7b:92:9c:54:
         31:bc:2c:e0:df:64:d7:75:6a:56:d3:32:7b:25:4f:bf:18:05:
         79:0b:6a:ef:c2:76:00:ee:2a:0d:77:7d:fc:f0:00:4b:1c:6a:
         bf:52:f3:98:e9:d7:73:81:6d:22:f1:f2:be:b6:0e:79:fd:a8:
         12:8d:09:6e:f1:b4:06:56:3f:fe:ce:45:5a:19:81:77:af:37:
         88:a3:67:11:e8:38:ce:7a:97:db:b9:73:e2:18:ed:1c:c3:7e:
         74:5d:1f:80:3a:89:a2:f5:10:7c:b6:1b:6e:3c:86:c5:56:9f:
         9a:9f:8a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 20:38:46 2024 by rpki-client on console-fra.rpki-client.org