Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32302e302f32342d3234203d3e20323636313930.roa
File:                     3230302e392e32302e302f32342d3234203d3e20323636313930.roa (raw, json)
Hash identifier:          PUFi8hmKqRf/kAcCQDqe/mOcyQ+B3XoXn36CiohAwwc=
Subject key identifier:   D9:CF:FD:93:11:F2:99:55:FC:21:1D:15:00:82:B1:EF:7E:59:5F:27
Certificate issuer:       /CN=D38BB940B82325DF991DC304A7737E77B8C8E681
Certificate serial:       5BA789E31D27A5C3D6F2874853FEB4C6D8962FFD
Authority key identifier: D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32302e302f32342d3234203d3e20323636313930.roa
Signing time:             Thu 04 Apr 2024 05:20:48 +0000
ROA not before:           Thu 04 Apr 2024 05:15:48 +0000
ROA not after:            Thu 03 Apr 2025 05:20:48 +0000
asID:                     266190
IP address blocks:        200.9.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a7:89:e3:1d:27:a5:c3:d6:f2:87:48:53:fe:b4:c6:d8:96:2f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D38BB940B82325DF991DC304A7737E77B8C8E681
        Validity
            Not Before: Apr  4 05:15:48 2024 GMT
            Not After : Apr  3 05:20:48 2025 GMT
        Subject: CN=D9CFFD9311F29955FC211D150082B1EF7E595F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:f4:ce:0f:f0:64:5c:bc:81:a3:89:4b:00:
                    a4:5e:c3:d3:a7:e2:14:e3:1d:90:31:22:f8:f6:b8:
                    8f:ab:bf:be:e3:43:81:da:da:e0:ed:b2:1b:cc:6b:
                    e2:68:5f:f4:c3:42:c1:f5:d2:6c:d5:11:7e:d9:b2:
                    a2:be:d3:4a:f4:6c:92:eb:f5:59:62:b1:55:7b:1c:
                    98:c5:ce:19:71:76:32:df:be:90:06:be:9f:9f:11:
                    95:94:90:0d:a3:d2:bd:0b:cc:3e:d7:f1:1c:76:e2:
                    69:bf:52:c5:36:f2:78:54:dc:92:6d:fa:01:73:00:
                    57:25:3e:83:1f:59:4c:bc:f7:81:50:54:02:45:3a:
                    d0:b6:65:11:6b:fd:16:11:c9:ba:ff:40:88:26:c2:
                    e0:ea:43:06:82:9e:ab:e5:97:da:7a:c5:e8:92:ba:
                    df:22:93:0d:cd:fc:74:c5:11:cc:0f:34:db:d8:73:
                    55:00:c2:fa:99:2b:40:08:ba:78:25:94:d8:fe:64:
                    b6:9f:6f:56:5d:aa:fc:fa:e5:3d:c3:0c:7a:77:5c:
                    ec:4b:a0:f1:30:8a:f2:b6:7b:ac:58:c9:06:ec:ce:
                    74:e4:c1:ba:9b:d1:d3:04:b3:d0:67:8a:a2:84:0d:
                    75:ac:29:b8:b6:eb:f1:cc:90:b0:72:71:68:05:22:
                    ec:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CF:FD:93:11:F2:99:55:FC:21:1D:15:00:82:B1:EF:7E:59:5F:27
            X509v3 Authority Key Identifier:
                keyid:D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/D38BB940B82325DF991DC304A7737E77B8C8E681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32302e302f32342d3234203d3e20323636313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:9b:bf:1b:92:f2:ad:bf:35:aa:bd:0c:f4:61:eb:0a:cd:25:
         c2:6f:2f:0e:87:31:71:19:4e:ad:ab:8d:7a:0c:9f:36:ab:dd:
         13:ed:67:32:4e:3b:09:4f:78:57:f4:3c:75:a5:77:67:a2:b1:
         6b:e7:b2:f4:83:d8:a0:99:2e:58:3c:95:14:ff:c9:cd:f5:eb:
         47:8d:10:25:7f:ae:9e:2e:ba:0a:ae:52:05:5f:4d:48:b3:28:
         d1:3e:9b:1b:5c:79:58:fd:0f:60:0f:de:26:9d:c5:8c:74:78:
         a2:96:c9:50:ce:d5:d0:55:5f:6e:7d:ec:92:93:5d:5f:59:43:
         fc:ee:71:09:b9:c8:66:1e:94:6c:72:09:80:f9:f8:22:9a:86:
         af:47:88:98:af:ce:86:8d:e9:91:3c:d8:a5:3e:42:ae:b0:74:
         b7:e9:15:5b:2a:93:b6:b0:e0:30:57:3d:ae:0f:76:8f:40:a0:
         cb:73:8f:e1:ab:8b:2f:91:b8:5c:67:a0:ed:d1:bd:59:ef:64:
         63:8b:6f:1d:69:b5:0d:82:d5:c7:c1:01:6c:b9:55:7b:d6:88:
         61:ee:bb:e7:79:19:6b:c6:60:09:35:91:2c:06:b4:56:19:73:
         42:37:54:62:92:93:63:24:61:41:f0:72:0d:db:ab:9b:50:6c:
         84:9d:10:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 17:36:10 2024 by rpki-client on console-ams.rpki-client.org