Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32312e302f32342d3234203d3e20323636313930.roa
File:                     3230302e392e32312e302f32342d3234203d3e20323636313930.roa (raw, json)
Hash identifier:          OOxE7HV6r1VzX7/HVfv4GKO2wBXMKxmBNKHpTkI/WXk=
Subject key identifier:   71:11:A2:49:E9:ED:FA:AF:55:72:3B:E0:3D:4A:95:C7:D9:C0:9B:B6
Certificate issuer:       /CN=D38BB940B82325DF991DC304A7737E77B8C8E681
Certificate serial:       7E50921BD0AD90128FE258CBFC0F52BCCF8B43D2
Authority key identifier: D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32312e302f32342d3234203d3e20323636313930.roa
Signing time:             Thu 04 Apr 2024 05:20:48 +0000
ROA not before:           Thu 04 Apr 2024 05:15:48 +0000
ROA not after:            Thu 03 Apr 2025 05:20:48 +0000
asID:                     266190
IP address blocks:        200.9.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:50:92:1b:d0:ad:90:12:8f:e2:58:cb:fc:0f:52:bc:cf:8b:43:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D38BB940B82325DF991DC304A7737E77B8C8E681
        Validity
            Not Before: Apr  4 05:15:48 2024 GMT
            Not After : Apr  3 05:20:48 2025 GMT
        Subject: CN=7111A249E9EDFAAF55723BE03D4A95C7D9C09BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:3b:fd:06:c9:04:3f:91:09:29:fe:1f:19:
                    e8:fa:a5:9f:80:9c:64:5e:d9:7e:c7:5e:d7:28:0c:
                    db:12:54:ca:d3:a0:c1:ae:07:c8:62:fe:f4:3e:4f:
                    39:1e:4a:c5:03:9f:67:ea:20:e3:a1:59:c7:0f:6d:
                    2a:ed:f7:34:bd:d4:92:8e:50:0b:82:1d:28:85:0d:
                    d7:d4:2c:a9:7d:87:32:67:f2:21:ca:1d:30:4d:5c:
                    ab:37:2c:e3:e8:4c:86:31:76:cc:4d:e6:d2:20:e2:
                    ee:a4:14:b3:24:4e:42:14:d2:b3:bd:ee:40:37:e2:
                    5a:51:e1:1d:d7:b0:2e:69:d8:32:84:15:e7:70:aa:
                    9d:17:f1:f9:b5:83:37:31:fc:3d:46:d0:5a:f7:39:
                    01:3e:9f:69:f5:65:64:2b:86:62:86:a6:9f:4f:85:
                    35:05:04:2e:52:bb:d3:c2:e8:95:66:f7:73:c6:39:
                    14:64:d7:92:c7:b1:6f:f0:eb:ff:54:fb:79:6d:be:
                    3d:23:80:92:21:20:d0:15:e6:87:48:d7:af:22:59:
                    10:7c:d1:7f:7c:e2:8b:58:dd:4f:16:33:0b:75:42:
                    62:b8:79:ea:4c:28:c3:77:3a:d8:6f:d7:ae:80:f7:
                    a7:90:c6:ca:d8:83:f3:4c:16:54:c2:60:e1:a7:3f:
                    a1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:11:A2:49:E9:ED:FA:AF:55:72:3B:E0:3D:4A:95:C7:D9:C0:9B:B6
            X509v3 Authority Key Identifier:
                keyid:D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/D38BB940B82325DF991DC304A7737E77B8C8E681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32312e302f32342d3234203d3e20323636313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:59:3b:e1:e1:d1:40:25:1b:fd:f9:9b:46:7c:2e:75:e4:7f:
         4f:d9:89:3d:32:26:34:62:40:72:dd:ed:17:e6:0a:a5:89:5c:
         a4:d5:fb:87:0d:eb:77:52:83:7b:b8:ed:5e:ba:bb:f5:ac:61:
         a8:32:56:56:0f:c9:e4:5c:ff:e8:f1:04:7b:fd:f0:85:57:e8:
         ee:fe:c7:ba:55:a5:1d:55:30:96:6d:e5:c7:88:44:8f:53:d5:
         52:ba:82:27:31:3f:c9:58:5e:3e:4c:f2:c7:1d:61:dd:99:1c:
         54:de:e4:f8:5e:5e:45:4a:ed:4d:46:f3:cd:4b:37:ab:71:11:
         76:01:9b:f3:a3:49:56:1a:a0:99:f5:1c:67:46:1a:cd:44:71:
         d0:09:ea:34:a0:33:04:a3:68:19:f2:39:0d:d0:dc:f5:a3:fd:
         95:2a:27:0d:13:95:28:7b:f5:9d:64:fa:0f:f2:a4:a4:74:2e:
         26:ab:12:ee:17:38:55:fe:68:ec:fa:d9:ce:3b:5e:fa:db:9d:
         7d:0f:7d:c1:2c:51:6a:a8:8a:5a:db:96:53:77:69:e2:99:4e:
         bf:61:8d:a2:d2:de:57:5b:1c:38:1c:97:9d:2e:27:58:ed:8b:
         80:6f:b5:da:09:ef:11:00:1d:22:72:0a:15:6c:65:9b:ec:89:
         ce:4a:68:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 17:36:10 2024 by rpki-client on console-ams.rpki-client.org