Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135382e302f32332d3233203d3e203631383035.roa
File:                     3230302e3232392e3135382e302f32332d3233203d3e203631383035.roa (raw, json)
Hash identifier:          XgmFBIqhMYnPrbnVCW3Evl1TVUYucFno4EPda27EMbI=
Subject key identifier:   2E:26:3B:E1:70:C3:6C:CD:C1:AA:7D:6E:49:03:C2:FE:0C:1A:4F:36
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       31F688CAC194960A593AD991CC21CD6DEA6A9AC6
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135382e302f32332d3233203d3e203631383035.roa
Signing time:             Thu 25 Apr 2024 19:33:07 +0000
ROA not before:           Thu 25 Apr 2024 19:28:07 +0000
ROA not after:            Thu 24 Apr 2025 19:33:07 +0000
asID:                     61805
IP address blocks:        200.229.158.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f6:88:ca:c1:94:96:0a:59:3a:d9:91:cc:21:cd:6d:ea:6a:9a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Apr 25 19:28:07 2024 GMT
            Not After : Apr 24 19:33:07 2025 GMT
        Subject: CN=2E263BE170C36CCDC1AA7D6E4903C2FE0C1A4F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:fd:f7:a6:26:39:fc:bc:08:91:15:6a:0f:42:
                    d1:07:ce:22:1d:86:7d:b4:3d:12:3c:40:32:12:43:
                    db:9b:d5:02:9a:10:8e:08:9d:a4:21:77:ca:ac:b2:
                    01:f9:2e:7b:9e:97:b3:f7:36:54:5a:7c:d9:f2:8d:
                    19:08:4d:dc:34:9e:1d:6f:99:9c:f5:a2:ed:50:55:
                    34:e2:6e:48:62:0d:cd:b8:a4:69:02:25:36:d2:bb:
                    b9:a3:87:70:ce:e7:59:85:2d:ec:ee:5f:c1:89:ff:
                    55:99:d5:a2:3a:a5:7b:ac:d5:3d:88:5e:9d:9a:3b:
                    06:63:c0:5e:11:e0:99:43:a7:53:39:3b:38:09:6a:
                    28:c6:d6:e7:fd:32:b5:fe:00:6a:de:2e:25:5c:3d:
                    8f:cd:62:db:88:82:e4:ce:08:01:cb:8a:ea:27:84:
                    ea:8b:f3:7a:2f:10:b6:53:87:ee:94:0c:67:52:28:
                    66:89:b0:3b:50:e4:c1:13:7c:71:ab:57:0f:f7:f4:
                    05:89:4f:8a:3b:3f:c4:86:31:e0:e7:07:b7:03:50:
                    43:87:01:fb:89:b7:44:eb:35:7f:94:2d:82:d7:63:
                    af:3b:24:79:45:d1:a7:82:b6:07:28:32:37:2b:db:
                    9b:01:7c:1d:46:9b:46:aa:b0:74:71:97:84:42:5a:
                    d4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:26:3B:E1:70:C3:6C:CD:C1:AA:7D:6E:49:03:C2:FE:0C:1A:4F:36
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135382e302f32332d3233203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:b2:84:30:b6:92:14:55:f5:5b:6e:0f:16:1d:45:31:5b:8f:
         18:6e:d0:01:07:38:3f:a1:70:75:1b:8e:b1:0d:55:33:87:82:
         1f:04:97:76:4c:0c:dc:d0:ff:1f:33:df:8e:90:f0:54:93:c2:
         8f:8d:3e:c1:2a:8d:d9:08:3c:92:9d:6e:47:fd:b2:cd:9e:7b:
         8d:90:b1:98:60:88:68:c8:c8:97:67:58:1a:41:3b:1f:c2:af:
         74:72:50:a2:4f:d9:91:5a:20:5b:74:9a:f0:c0:1a:4c:cf:77:
         22:01:4b:6e:25:a0:3e:12:0e:27:31:bb:6f:7d:61:fc:73:d0:
         b6:7e:a1:81:b3:4b:a7:92:3d:9c:8f:99:ba:4f:0d:87:2f:96:
         5c:6a:25:0d:ee:5e:47:0c:5c:e3:38:c8:7c:1f:17:aa:f8:79:
         40:f8:c4:e0:d2:40:f2:c7:b8:07:80:96:47:e1:9a:0f:79:ed:
         3e:97:94:ed:f1:d8:6d:0b:4c:bf:1a:db:f7:56:6c:22:51:11:
         a4:8a:be:4d:5e:32:e0:5b:9a:2c:30:1d:45:47:c8:73:e0:3f:
         40:8a:53:0d:2d:f6:57:1c:07:09:94:ff:8f:c4:06:bd:17:29:
         6e:19:bf:15:0b:45:29:c4:00:58:5b:16:a8:6a:fd:18:70:13:
         62:0c:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:59 2025 by rpki-client