Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32302e302f32332d3233203d3e20323636313930.roa
File:                     3230302e392e32302e302f32332d3233203d3e20323636313930.roa (raw, json)
Hash identifier:          iNpF1nPpIWR5TL/6rlBbhc/mwGS+wJ3sr87ZnLuWRFA=
Subject key identifier:   BA:05:95:B1:74:B8:C3:60:B7:C8:E0:AA:F8:AD:F5:21:4F:52:AD:9F
Certificate issuer:       /CN=D38BB940B82325DF991DC304A7737E77B8C8E681
Certificate serial:       68B345AAE11D419A6109DBED7D3C58E9F1E79FF6
Authority key identifier: D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32302e302f32332d3233203d3e20323636313930.roa
Signing time:             Thu 04 Apr 2024 05:20:48 +0000
ROA not before:           Thu 04 Apr 2024 05:15:48 +0000
ROA not after:            Thu 03 Apr 2025 05:20:48 +0000
asID:                     266190
IP address blocks:        200.9.20.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b3:45:aa:e1:1d:41:9a:61:09:db:ed:7d:3c:58:e9:f1:e7:9f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D38BB940B82325DF991DC304A7737E77B8C8E681
        Validity
            Not Before: Apr  4 05:15:48 2024 GMT
            Not After : Apr  3 05:20:48 2025 GMT
        Subject: CN=BA0595B174B8C360B7C8E0AAF8ADF5214F52AD9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:98:23:12:15:a7:05:16:07:ad:f5:fb:a0:
                    b3:34:4b:6f:b9:4d:b2:46:81:a8:db:2c:a5:97:c5:
                    9c:d6:db:de:58:cf:35:3c:c5:1f:82:8b:b7:05:c1:
                    4e:16:54:58:68:99:df:da:60:0d:45:17:12:e9:e1:
                    f1:b8:09:4d:a3:20:4f:d8:f4:57:af:83:d4:bb:0b:
                    73:88:25:24:ca:1f:8f:e0:91:69:2c:bc:c1:87:f5:
                    5c:34:0a:bb:99:9a:05:ee:d4:83:2c:a1:44:da:b4:
                    7f:66:23:00:46:8b:19:e1:44:ce:65:3e:b3:a7:bb:
                    7b:74:7c:b4:59:17:6b:ab:37:c3:7d:85:16:59:04:
                    7c:17:3a:0a:ff:ce:ce:a0:ee:f6:b2:7c:de:73:eb:
                    e7:1f:40:28:54:e4:fb:30:b1:dd:8d:93:31:77:dc:
                    ba:f4:14:41:21:f9:9e:49:56:49:07:a8:67:9f:51:
                    15:1d:9a:7e:6b:25:83:33:2a:f5:cd:1c:07:24:3f:
                    80:5a:9f:4e:9f:10:a7:c7:76:d2:a6:7d:5c:15:b8:
                    f6:27:13:72:cd:17:77:d0:d6:a4:69:24:ae:54:f8:
                    9c:2c:c9:55:02:b8:4a:d9:f6:d8:98:60:57:be:d6:
                    2c:2a:90:3c:f1:9b:70:11:b6:f1:56:e5:e7:b1:c0:
                    6c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:05:95:B1:74:B8:C3:60:B7:C8:E0:AA:F8:AD:F5:21:4F:52:AD:9F
            X509v3 Authority Key Identifier:
                keyid:D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/D38BB940B82325DF991DC304A7737E77B8C8E681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32302e302f32332d3233203d3e20323636313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:a4:a3:2f:db:36:e4:88:c3:e0:52:79:68:66:5b:14:bc:e1:
         6a:ab:29:79:30:31:12:b1:41:8b:26:f0:c1:cd:db:02:af:65:
         dc:d5:b2:b2:dd:a4:89:6e:bf:96:f7:df:58:6a:53:39:af:43:
         11:71:df:40:e2:35:4a:fd:68:b7:60:81:77:e1:40:02:09:96:
         fb:c5:fa:6c:99:58:4c:8a:96:73:52:d1:57:88:3a:6f:23:55:
         fb:23:04:54:13:3a:17:2c:55:2d:a2:a6:5f:f5:e7:e4:f4:32:
         43:14:fe:89:d6:61:ce:ee:a2:9e:df:e6:47:aa:38:11:66:fa:
         d3:69:7a:c9:62:d7:0d:de:bd:4f:b0:eb:71:82:8e:0a:19:98:
         d7:df:d6:93:09:42:8f:d7:32:dc:cb:8c:36:04:8c:c0:b2:e1:
         6b:a0:96:75:8d:d4:95:7e:11:ea:a5:82:8f:58:cc:36:df:9a:
         0c:be:a9:7a:c2:06:db:a4:5c:46:53:db:ef:e3:ff:8b:ce:a6:
         51:d2:b0:24:e9:f1:cf:3b:cb:24:cd:1e:5c:65:75:7e:6c:a4:
         9a:ef:b3:03:7d:fc:ce:96:37:cd:49:e4:86:25:d6:58:20:ba:
         1b:94:9e:56:4b:b9:0e:50:9a:21:cb:e3:67:c3:55:e3:03:84:
         c2:22:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org