Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32332d3233203d3e20323730343633.roa
File:                     3230302e38312e34382e302f32332d3233203d3e20323730343633.roa (raw, json)
Hash identifier:          QRE7iiuwssXbSzks9xN6dI7ggwmqwyrMG1sH8k5zTcI=
Subject key identifier:   C0:48:BC:95:F1:A9:05:82:19:A7:44:A6:BF:F2:BF:C3:CE:22:CD:A3
Certificate issuer:       /CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
Certificate serial:       09A33617F78050D46343A86C4F86D9C844875A08
Authority key identifier: B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32332d3233203d3e20323730343633.roa
Signing time:             Thu 18 Apr 2024 13:43:04 +0000
ROA not before:           Thu 18 Apr 2024 13:38:04 +0000
ROA not after:            Thu 17 Apr 2025 13:43:04 +0000
asID:                     270463
IP address blocks:        200.81.48.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 22 May 2024 17:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a3:36:17:f7:80:50:d4:63:43:a8:6c:4f:86:d9:c8:44:87:5a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
        Validity
            Not Before: Apr 18 13:38:04 2024 GMT
            Not After : Apr 17 13:43:04 2025 GMT
        Subject: CN=C048BC95F1A9058219A744A6BFF2BFC3CE22CDA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:c5:4a:e2:de:6c:06:d1:1f:d4:c4:34:b8:
                    b8:5f:a4:8d:d7:14:8b:68:46:88:84:2c:cb:72:07:
                    69:a6:94:ab:5b:e9:d2:3d:32:2a:c9:0d:fd:e1:c3:
                    da:41:30:c3:87:1d:ff:5b:c8:d8:98:11:f5:a6:63:
                    50:63:5d:ee:03:c4:60:9e:5e:f1:29:bd:7f:49:0f:
                    6e:51:ba:68:e4:20:fc:2a:d8:ac:72:29:f4:b8:fe:
                    ab:f8:65:5f:26:43:c6:0f:e4:09:0b:2b:df:8b:13:
                    e8:13:12:e8:6d:2a:f9:0e:f9:fa:24:46:85:b5:42:
                    4d:c2:01:2f:6a:8d:86:4b:79:d3:82:2f:fd:3f:38:
                    8a:ec:d7:d1:5f:a9:e3:52:3c:7f:40:33:12:a3:76:
                    8a:5a:1d:66:c5:00:33:11:e1:1a:1a:ba:3b:5d:de:
                    a2:e3:95:ee:80:a2:94:19:9c:41:7b:24:d8:b2:10:
                    38:a5:19:33:a3:17:60:2f:43:35:b1:25:0e:f7:e8:
                    4b:ad:4a:f2:94:4c:bb:24:f2:f8:e9:21:81:52:9d:
                    a6:70:0b:ff:5d:28:aa:14:41:34:b2:04:9b:bc:fa:
                    22:9a:2e:26:7d:00:1f:9f:60:65:59:42:73:36:ed:
                    04:d4:df:bc:19:23:b3:07:b7:3c:31:db:ae:83:96:
                    1a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:48:BC:95:F1:A9:05:82:19:A7:44:A6:BF:F2:BF:C3:CE:22:CD:A3
            X509v3 Authority Key Identifier:
                keyid:B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32332d3233203d3e20323730343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:71:0b:76:eb:78:95:d2:08:d0:10:86:8a:b9:bc:df:5f:7d:
         ed:c9:55:53:da:ea:ef:af:d8:54:a7:79:d6:ad:ab:e8:4f:9a:
         15:0f:d9:2c:a8:48:38:d0:ba:39:0b:c1:9d:dc:bf:95:af:dc:
         dd:65:79:b3:cc:ab:f3:54:33:15:5c:8b:d4:4a:a3:6d:6d:e2:
         0e:4b:1a:e2:f0:89:df:1d:1b:7e:60:a6:cc:59:9e:ac:08:f1:
         75:5b:10:3b:c9:56:9c:f5:fd:25:3c:69:ad:9b:cb:9a:3d:f0:
         cb:10:c2:a8:04:28:17:d3:67:92:59:e8:b7:28:f5:f4:d7:3e:
         2f:d3:12:d0:ec:ad:d5:56:e8:e0:34:af:2a:21:ac:b0:7b:97:
         d7:93:a9:89:55:17:6f:1d:9e:3f:2d:18:2d:d4:8c:7d:01:26:
         7c:05:7d:3a:32:9d:38:e1:7a:f8:28:70:51:6a:ef:79:ec:5b:
         00:e4:1b:3e:99:54:ab:ff:0a:65:01:cd:de:39:a9:c7:22:1a:
         98:f9:d4:ae:6a:2a:f3:39:de:71:13:a4:bf:1a:f6:f7:97:45:
         7c:6a:fb:ac:88:e8:20:db:67:7d:49:36:13:b0:76:14:b1:7b:
         82:59:1d:55:57:f8:81:16:55:d9:40:13:04:f0:0f:d9:19:7a:
         af:d7:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org