Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e33302e302f32332d3233203d3e20323730383236.roa
File:                     3230302e3231392e33302e302f32332d3233203d3e20323730383236.roa (raw, json)
Hash identifier:          qanfAbMLmX/f0qjKoGyoAa9AXZ9w2BgOShC0P+E681k=
Subject key identifier:   67:12:AB:33:20:EC:E3:F1:CC:16:A3:A2:67:1C:3B:2D:8E:A3:56:D2
Certificate issuer:       /CN=D71606B1A6F25EDCF6323F7F5E7D161516E193C4
Certificate serial:       073EDB04DCB711B308612ADBDE43F62A6D2A40D5
Authority key identifier: D7:16:06:B1:A6:F2:5E:DC:F6:32:3F:7F:5E:7D:16:15:16:E1:93:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e33302e302f32332d3233203d3e20323730383236.roa
Signing time:             Thu 18 Apr 2024 17:34:32 +0000
ROA not before:           Thu 18 Apr 2024 17:29:32 +0000
ROA not after:            Thu 17 Apr 2025 17:34:32 +0000
asID:                     270826
IP address blocks:        200.219.30.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 19:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3e:db:04:dc:b7:11:b3:08:61:2a:db:de:43:f6:2a:6d:2a:40:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D71606B1A6F25EDCF6323F7F5E7D161516E193C4
        Validity
            Not Before: Apr 18 17:29:32 2024 GMT
            Not After : Apr 17 17:34:32 2025 GMT
        Subject: CN=6712AB3320ECE3F1CC16A3A2671C3B2D8EA356D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9a:f2:cc:70:ee:63:b4:3d:ae:39:5f:99:eb:
                    4d:41:b1:0f:f8:5e:b7:d8:05:f9:d4:89:0d:4d:1d:
                    42:77:77:82:13:0c:b3:6a:ff:b5:b7:95:97:5c:6c:
                    c5:0d:e1:81:32:13:95:7c:1d:52:bb:6c:08:10:68:
                    d7:38:06:38:15:9b:c0:5e:1c:c0:e4:9c:6f:5f:75:
                    21:a5:1e:d3:11:0c:40:79:49:a0:42:95:e5:4c:92:
                    6c:42:bc:10:c6:60:35:ba:26:ec:ff:80:e8:33:30:
                    92:92:e9:61:c8:1c:61:e2:5b:a6:25:2b:d4:09:cc:
                    f6:f0:cd:58:ef:9a:a7:be:84:3f:44:06:aa:4a:97:
                    f5:6a:b6:80:62:3c:0d:e2:1c:32:62:f9:21:32:c5:
                    cc:cc:f3:4c:c3:cb:df:f4:73:03:f6:53:fb:a4:4f:
                    00:dd:ea:31:a2:15:43:90:6e:92:36:b7:33:32:30:
                    2d:85:d7:cc:45:1b:76:c7:19:4e:2b:63:4a:4a:43:
                    1c:d7:2a:31:e9:4d:74:f1:29:42:e2:64:ea:66:f5:
                    d6:e7:ef:64:90:8d:3a:9d:ee:5c:04:7e:98:13:bd:
                    d2:d7:b5:fe:88:61:dc:19:cd:6a:23:a9:79:d6:c2:
                    1e:fb:10:e6:1e:6f:84:01:9d:fe:b2:60:9d:0f:ea:
                    43:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:12:AB:33:20:EC:E3:F1:CC:16:A3:A2:67:1C:3B:2D:8E:A3:56:D2
            X509v3 Authority Key Identifier:
                keyid:D7:16:06:B1:A6:F2:5E:DC:F6:32:3F:7F:5E:7D:16:15:16:E1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e33302e302f32332d3233203d3e20323730383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:1f:e5:f2:cb:66:0b:83:09:d6:42:9e:a0:c9:c1:46:15:ef:
         e1:7d:6e:c3:f6:e8:e0:a2:3d:2e:78:d1:9a:39:44:75:b4:78:
         11:8f:3a:8e:07:d2:17:da:14:eb:b1:9f:c4:ce:1d:2b:3e:41:
         bf:9c:ee:7a:21:69:da:24:9d:5d:80:2c:b3:2d:28:62:35:cf:
         ab:d4:d8:13:99:04:86:8c:e5:e0:f9:fb:ef:13:f8:fe:5b:a4:
         e3:e2:31:43:55:2c:7c:cc:c4:43:21:35:7c:43:d5:2a:4c:2d:
         68:5d:a9:18:f9:25:79:8b:2b:c8:61:be:a1:a3:07:f3:25:c4:
         24:64:9a:23:f7:3c:97:a0:9d:11:46:b6:22:3d:96:27:b1:48:
         d3:92:88:14:89:7b:3f:88:f9:f7:80:b7:78:3e:38:0d:28:8a:
         93:48:c6:a0:7f:20:1c:fb:d7:b8:f8:ff:46:4a:61:d5:a3:4d:
         2b:0f:05:0f:ba:30:d0:ba:1e:0a:1c:30:c3:ca:80:25:c7:05:
         64:6a:8b:0a:28:1a:aa:55:55:59:61:75:f6:9a:7f:97:57:57:
         93:cc:4c:fa:1e:f1:0f:61:07:aa:00:34:8d:c8:e8:33:a2:2a:
         02:bc:4a:40:32:d0:41:db:2b:ef:d2:d9:0d:98:ce:79:f4:fe:
         5c:e7:52:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBz7bBNy3EbMIYSrb3kP2Km0qQNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDcxNjA2QjFBNkYyNUVEQ0Y2MzIzRjdGNUU3RDE2MTUx
NkUxOTNDNDAeFw0yNDA0MTgxNzI5MzJaFw0yNTA0MTcxNzM0MzJaMDMxMTAvBgNV
BAMTKDY3MTJBQjMzMjBFQ0UzRjFDQzE2QTNBMjY3MUMzQjJEOEVBMzU2RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUmvLMcO5jtD2uOV+Z601BsQ/4
XrfYBfnUiQ1NHUJ3d4ITDLNq/7W3lZdcbMUN4YEyE5V8HVK7bAgQaNc4BjgVm8Be
HMDknG9fdSGlHtMRDEB5SaBCleVMkmxCvBDGYDW6Juz/gOgzMJKS6WHIHGHiW6Yl
K9QJzPbwzVjvmqe+hD9EBqpKl/VqtoBiPA3iHDJi+SEyxczM80zDy9/0cwP2U/uk
TwDd6jGiFUOQbpI2tzMyMC2F18xFG3bHGU4rY0pKQxzXKjHpTXTxKULiZOpm9dbn
72SQjTqd7lwEfpgTvdLXtf6IYdwZzWojqXnWwh77EOYeb4QBnf6yYJ0P6kM9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZxKrMyDs4/HMFqOiZxw7LY6jVtIwHwYDVR0j
BBgwFoAU1xYGsabyXtz2Mj9/Xn0WFRbhk8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWExVDRZbjlrWWViSm1TZ0Y2dVRuTXdROWtHTmdmUFhScWJFU2dyNkRp
djYvMC9ENzE2MDZCMUE2RjI1RURDRjYzMjNGN0Y1RTdEMTYxNTE2RTE5M0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MTYwNkIxQTZGMjVFRENG
NjMyM0Y3RjVFN0QxNjE1MTZFMTkzQzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhMVQ0WW45a1llYkptU2dGNnVUbk13UTlrR05nZlBYUnFiRVNncjZEaXY2LzAv
MzIzMDMwMmUzMjMxMzkyZTMzMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzODMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHI2x4wDQYJKoZIhvcNAQELBQADggEBAEUf5fLL
ZguDCdZCnqDJwUYV7+F9bsP26OCiPS540Zo5RHW0eBGPOo4H0hfaFOuxn8TOHSs+
Qb+c7nohadoknV2ALLMtKGI1z6vU2BOZBIaM5eD5++8T+P5bpOPiMUNVLHzMxEMh
NXxD1SpMLWhdqRj5JXmLK8hhvqGjB/MlxCRkmiP3PJegnRFGtiI9liexSNOSiBSJ
ez+I+feAt3g+OA0oipNIxqB/IBz717j4/0ZKYdWjTSsPBQ+6MNC6HgocMMPKgCXH
BWRqiwooGqpVVVlhdfaaf5dXV5PMTPoe8Q9hB6oANI3I6DOiKgK8SkAy0EHbK+/S
2Q2Yznn0/lznUo0=
-----END CERTIFICATE-----
Generated at Fri Aug 2 20:38:46 2024 by rpki-client on console-fra.rpki-client.org