Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32322e302f32342d3234203d3e20323636313930.roa
File:                     3230302e392e32322e302f32342d3234203d3e20323636313930.roa (raw, json)
Hash identifier:          sSNzbdP5UkF9SAkRnOzhuOV5SyksbsxxGwiYaPqaoTU=
Subject key identifier:   98:A3:BD:CF:F0:0A:31:47:12:76:F4:98:81:CC:27:5E:ED:34:36:9F
Certificate issuer:       /CN=D38BB940B82325DF991DC304A7737E77B8C8E681
Certificate serial:       65BD024422D632700CEB6C4499A39373B341AFCD
Authority key identifier: D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32322e302f32342d3234203d3e20323636313930.roa
Signing time:             Thu 04 Apr 2024 05:20:48 +0000
ROA not before:           Thu 04 Apr 2024 05:15:48 +0000
ROA not after:            Thu 03 Apr 2025 05:20:48 +0000
asID:                     266190
IP address blocks:        200.9.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:bd:02:44:22:d6:32:70:0c:eb:6c:44:99:a3:93:73:b3:41:af:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D38BB940B82325DF991DC304A7737E77B8C8E681
        Validity
            Not Before: Apr  4 05:15:48 2024 GMT
            Not After : Apr  3 05:20:48 2025 GMT
        Subject: CN=98A3BDCFF00A31471276F49881CC275EED34369F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:eb:3a:1d:c2:94:8e:0e:ca:fe:f9:df:31:6c:
                    1e:54:f9:3c:78:32:bf:23:42:6c:0f:ec:5a:ed:52:
                    74:c3:7d:e6:c3:f4:14:9e:ce:ae:07:52:b4:0f:0c:
                    75:e7:cb:e4:84:f0:df:53:d1:bc:40:9c:3e:1f:9e:
                    cf:2d:00:6b:8e:94:5d:33:eb:57:2d:56:73:d7:c5:
                    96:09:e9:49:c9:5d:6f:38:8b:14:28:17:61:d3:9c:
                    39:49:fb:6d:7f:27:00:a5:dc:b9:c6:e6:fd:f4:e9:
                    e5:40:aa:51:aa:84:a1:fe:f3:18:c9:ab:af:0a:3c:
                    ae:d1:ce:36:f2:dc:29:1f:6a:aa:d0:26:25:3a:c1:
                    dc:4f:ae:ea:e8:6e:74:ab:c6:5e:97:7c:e3:a9:e1:
                    4d:cf:47:3b:b3:64:f9:d3:9b:29:1e:a1:fd:56:57:
                    4a:2f:49:6f:9f:9b:8a:6f:7d:b0:a9:ff:75:5b:81:
                    23:f8:bc:2a:01:cc:de:08:51:dc:61:af:16:33:52:
                    53:c5:23:c0:09:5f:ff:73:c8:a1:fb:68:97:b3:69:
                    a6:00:f8:14:45:18:45:89:73:c3:77:78:a6:cb:78:
                    80:2d:71:8a:68:cc:56:66:17:54:42:c2:67:68:1c:
                    58:55:2d:e8:cf:0d:49:82:e7:c4:c9:c0:a0:17:19:
                    30:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A3:BD:CF:F0:0A:31:47:12:76:F4:98:81:CC:27:5E:ED:34:36:9F
            X509v3 Authority Key Identifier:
                keyid:D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/D38BB940B82325DF991DC304A7737E77B8C8E681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32322e302f32342d3234203d3e20323636313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:18:e4:37:e7:d7:3b:ef:f3:11:35:cd:f0:ca:ca:83:e9:3a:
         f3:94:9c:30:c8:64:bb:f8:72:5c:58:5c:75:94:e1:d2:d0:01:
         90:5a:0c:26:13:3e:f6:98:5f:80:01:04:a7:b1:8d:1b:32:7e:
         fe:ac:21:38:69:de:ff:1d:46:48:ab:3a:a8:72:a4:3a:b0:7b:
         22:84:21:72:5b:95:f7:38:d7:76:72:59:45:7c:ad:00:75:2a:
         ac:a2:8e:af:3d:26:7e:45:71:a3:d4:f3:5c:d2:68:75:e5:b1:
         ba:15:34:bb:66:d7:df:ab:7a:e6:0a:a5:d6:ad:f3:f3:58:17:
         f6:46:96:cc:aa:22:7a:22:5b:b7:26:29:6c:9c:2f:44:dc:9f:
         23:9f:98:34:ee:74:e1:03:ae:20:f7:6d:20:40:c4:b4:1d:9c:
         47:72:d4:c2:73:2f:94:ca:a3:33:56:3b:8e:96:f3:38:ad:1b:
         1e:5c:78:53:ae:f7:fe:72:39:c5:00:e4:aa:ea:c0:97:99:b6:
         2f:2b:f9:b8:00:99:6b:86:97:c6:5c:3e:3b:7c:f4:8a:fd:44:
         25:c4:8d:e8:01:fd:f0:bf:fb:a3:bf:4d:52:f9:29:77:a4:7c:
         19:7d:92:ff:38:51:7d:9c:26:25:2e:46:e1:dc:31:30:c8:25:
         91:97:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org