Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135362e302f32322d3232203d3e203631383035.roa
File:                     3230302e3232392e3135362e302f32322d3232203d3e203631383035.roa (raw, json)
Hash identifier:          x6l61EzbzDX7ju2rtrjo6nsGsOfkGsUDBWQ7/2b3a2o=
Subject key identifier:   BD:D3:33:00:40:19:4C:8C:0F:59:9A:CA:D3:21:B5:4F:37:61:14:12
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       4DFEAAF4D2BC77F2DB53656616CA045E84DC7C99
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135362e302f32322d3232203d3e203631383035.roa
Signing time:             Thu 25 Apr 2024 19:32:56 +0000
ROA not before:           Thu 25 Apr 2024 19:27:56 +0000
ROA not after:            Thu 24 Apr 2025 19:32:56 +0000
asID:                     61805
IP address blocks:        200.229.156.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fe:aa:f4:d2:bc:77:f2:db:53:65:66:16:ca:04:5e:84:dc:7c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Apr 25 19:27:56 2024 GMT
            Not After : Apr 24 19:32:56 2025 GMT
        Subject: CN=BDD3330040194C8C0F599ACAD321B54F37611412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:c4:f7:1b:cc:61:af:4e:42:18:90:9a:62:
                    9d:b1:fb:be:f0:d2:6b:c6:79:1f:99:f9:6b:73:f0:
                    d5:fe:22:fa:43:51:c7:29:c4:9b:79:45:1c:a3:55:
                    48:39:7c:b9:fe:59:d3:75:7b:ee:43:76:1f:82:3c:
                    2a:93:9b:f2:f9:2a:24:e1:38:f9:b0:7b:52:90:fd:
                    42:e8:61:7f:47:13:ba:a4:3b:73:f8:23:07:16:31:
                    3d:32:53:a2:df:05:65:ee:c1:c5:0c:e2:fa:b6:2a:
                    9b:fa:7a:11:3d:17:0b:a7:a6:97:d6:87:95:56:62:
                    2b:62:dd:b2:96:64:5a:1f:7c:81:d9:20:37:fe:e4:
                    db:ae:88:a1:a9:79:25:86:29:d9:d8:b1:53:e5:6c:
                    13:0f:12:8b:34:63:01:d2:57:1c:a2:04:49:54:77:
                    c6:5b:b4:00:2f:09:81:33:e2:5d:e6:5f:ff:96:c4:
                    c7:be:71:c4:37:00:23:d8:72:f0:b0:bf:65:24:49:
                    06:c3:7a:9e:42:c9:99:5a:ee:77:b8:eb:0c:4a:33:
                    7d:f6:32:fa:2a:db:3b:d2:54:16:9b:9d:d2:66:12:
                    2f:21:25:5d:4c:b2:b0:04:09:47:8c:2e:3f:ad:d4:
                    99:25:84:12:36:83:82:97:46:34:e1:63:91:19:3d:
                    e5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D3:33:00:40:19:4C:8C:0F:59:9A:CA:D3:21:B5:4F:37:61:14:12
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135362e302f32322d3232203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:ef:a9:7c:0a:e2:3c:23:c9:a9:62:fe:d1:19:cb:46:32:83:
         3f:75:89:fc:d8:78:30:37:28:eb:bd:50:8c:19:8d:23:28:be:
         ed:43:d0:cc:a6:b5:4e:c9:3b:6d:bd:40:af:df:59:2c:43:1a:
         6c:54:19:4d:ce:b0:5c:04:21:f2:4e:24:5b:fb:d9:93:ae:cc:
         41:c7:c3:6c:96:60:46:49:8c:4c:fc:a6:2e:95:6f:1e:d2:2f:
         47:10:33:4f:8b:91:7c:7b:a4:5b:42:3f:5c:e0:30:19:e9:6d:
         e9:01:f7:d5:5f:8d:c2:77:ee:9a:93:d4:b2:82:7a:c8:f8:66:
         91:42:49:1e:d0:04:7f:2e:24:bd:dc:db:7e:22:cd:d7:be:a4:
         d1:40:a4:f1:7f:49:35:e2:6e:7f:29:b8:ac:0e:a6:f1:85:96:
         dd:6a:68:ee:a9:bf:95:00:f4:ca:eb:3d:40:c1:06:81:16:3c:
         b3:1f:e2:27:92:73:ca:36:dd:42:8a:5e:e9:95:ea:d3:f0:6e:
         f7:c3:40:bf:7a:bc:be:0f:f8:c4:59:6e:0c:4f:dd:3c:c5:74:
         4b:d0:2d:82:ff:1b:19:e4:41:13:00:e8:0a:ee:7d:b8:71:73:
         fe:79:41:1f:a7:a4:2a:a1:ab:e2:9b:d5:18:5c:42:b4:84:8c:
         d7:54:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org