Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32332e302f32342d3234203d3e20323636313930.roa
File:                     3230302e392e32332e302f32342d3234203d3e20323636313930.roa (raw, json)
Hash identifier:          SfO4l3rZgtrUPZXUdAKNcY3W7t+DwNUvuR6MDqE8MjE=
Subject key identifier:   80:DB:13:ED:F2:39:DA:5D:59:0A:04:E6:F4:81:FD:9E:46:28:23:D0
Certificate issuer:       /CN=D38BB940B82325DF991DC304A7737E77B8C8E681
Certificate serial:       260822E26281E6EFA2227F52B343D8CBB3373D5F
Authority key identifier: D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32332e302f32342d3234203d3e20323636313930.roa
Signing time:             Thu 04 Apr 2024 05:20:48 +0000
ROA not before:           Thu 04 Apr 2024 05:15:48 +0000
ROA not after:            Thu 03 Apr 2025 05:20:48 +0000
asID:                     266190
IP address blocks:        200.9.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:08:22:e2:62:81:e6:ef:a2:22:7f:52:b3:43:d8:cb:b3:37:3d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D38BB940B82325DF991DC304A7737E77B8C8E681
        Validity
            Not Before: Apr  4 05:15:48 2024 GMT
            Not After : Apr  3 05:20:48 2025 GMT
        Subject: CN=80DB13EDF239DA5D590A04E6F481FD9E462823D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:0b:31:67:77:d2:ea:c6:3f:1f:ed:03:58:
                    11:03:90:22:49:ad:59:4c:0f:b6:1c:9e:28:e6:67:
                    33:82:b0:0e:1c:2d:61:3a:e4:1c:78:3c:c9:36:43:
                    06:1a:1e:f3:31:aa:83:bb:04:7b:9f:85:27:4b:45:
                    6a:76:90:4e:99:83:e9:77:a9:21:a2:54:ec:4f:fa:
                    fc:3c:51:3b:20:80:47:a2:f5:bd:1e:a4:c5:64:ed:
                    fc:ef:df:e9:24:b1:8b:9f:28:f6:2e:b4:f6:49:86:
                    be:d1:e1:b0:de:62:9c:bf:34:61:b4:78:b4:f0:f7:
                    14:57:36:0f:0f:b5:83:5a:44:99:7b:c6:97:73:c2:
                    07:8b:e6:54:04:dc:9b:cd:49:b2:90:83:63:d5:1e:
                    18:f4:76:45:04:42:79:d5:e0:8d:e2:2a:99:92:52:
                    28:d0:df:ca:5d:7f:8e:0c:97:f2:f7:7d:37:f1:94:
                    e9:8d:9f:f7:86:47:3f:3f:da:88:36:af:70:7a:c3:
                    96:8f:c0:cb:9e:dd:07:6d:27:be:6b:ab:46:21:b8:
                    2e:4d:b2:cd:4d:62:36:55:f3:16:d9:0c:7a:17:e6:
                    fa:a3:cb:98:9a:72:6a:59:89:b6:c5:11:d1:49:75:
                    c1:e9:19:ad:b3:24:cc:b9:79:f3:25:df:8f:6e:de:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DB:13:ED:F2:39:DA:5D:59:0A:04:E6:F4:81:FD:9E:46:28:23:D0
            X509v3 Authority Key Identifier:
                keyid:D3:8B:B9:40:B8:23:25:DF:99:1D:C3:04:A7:73:7E:77:B8:C8:E6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/D38BB940B82325DF991DC304A7737E77B8C8E681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38BB940B82325DF991DC304A7737E77B8C8E681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/1/3230302e392e32332e302f32342d3234203d3e20323636313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:75:7e:4d:87:6e:f4:79:39:5e:f8:9b:d6:71:19:81:78:03:
         d0:75:bd:eb:f0:d2:f5:28:f7:c1:f8:9e:d4:05:04:37:1c:ac:
         10:aa:be:0e:29:db:a0:2c:08:a2:9a:d9:70:8c:b9:a6:f0:c5:
         88:44:1c:68:97:63:43:0e:dd:c2:74:91:16:7e:47:a2:35:2d:
         41:ff:7d:64:7e:2a:9a:b3:cf:d7:da:a5:4e:ea:61:79:c5:91:
         47:45:30:f0:2a:06:e7:36:aa:e1:06:c7:b9:fe:82:06:ee:a7:
         e3:74:82:e5:20:a5:64:a4:1e:4b:4b:ca:5b:9d:85:54:20:f6:
         3d:a7:1a:fd:e2:23:a5:c5:30:ab:e5:fa:77:6d:2c:0c:63:1e:
         31:e0:17:ed:59:c5:7d:fd:c0:e0:44:fa:21:71:12:a6:f7:3f:
         0a:bb:96:7a:de:c2:5c:85:02:ba:93:2e:0c:e9:eb:a3:f6:56:
         73:6d:24:f8:47:99:95:e3:dc:61:10:5a:3c:20:a6:7b:de:27:
         3f:7e:dd:e0:f7:1b:ec:d9:e7:dd:02:d9:0f:ea:3d:70:48:17:
         62:e9:72:71:51:76:8b:5c:69:fb:ad:11:b4:4e:37:77:e3:58:
         c0:bc:8a:26:cc:dd:94:6a:e6:5c:b9:7c:03:27:f5:79:1c:37:
         b1:22:29:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 17:36:10 2024 by rpki-client on console-ams.rpki-client.org