Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135382e302f32342d3234203d3e203631383035.roa
File:                     3230302e3232392e3135382e302f32342d3234203d3e203631383035.roa (raw, json)
Hash identifier:          1cFKtBefasVo2zydkGIugR9ZBWZ/Kxb+Y3UFDZjkfck=
Subject key identifier:   2B:21:01:B8:A8:A4:8D:A5:DB:B3:C2:5A:DD:42:D4:53:6E:92:1E:32
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       675E3B050425150159D978CEB2BA9D425C8A2381
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135382e302f32342d3234203d3e203631383035.roa
Signing time:             Thu 25 Apr 2024 19:33:09 +0000
ROA not before:           Thu 25 Apr 2024 19:28:09 +0000
ROA not after:            Thu 24 Apr 2025 19:33:09 +0000
asID:                     61805
IP address blocks:        200.229.158.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5e:3b:05:04:25:15:01:59:d9:78:ce:b2:ba:9d:42:5c:8a:23:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Apr 25 19:28:09 2024 GMT
            Not After : Apr 24 19:33:09 2025 GMT
        Subject: CN=2B2101B8A8A48DA5DBB3C25ADD42D4536E921E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:ba:8e:4f:f1:8e:2d:52:4f:22:99:4d:ae:
                    84:8e:6b:36:06:ee:af:eb:8c:ea:ef:83:e0:ec:d1:
                    f9:f3:e8:d9:d9:0b:2e:f9:e0:7c:de:77:40:f9:3b:
                    41:10:1d:e3:82:26:3f:22:ca:23:60:b3:01:c4:3a:
                    b9:f7:3e:51:e4:55:91:8f:2c:46:4a:8c:6f:cb:6b:
                    ec:a9:4c:50:1e:e4:9b:48:36:d5:fa:cc:8c:9d:4e:
                    fc:61:be:99:a0:4f:a7:22:46:0e:b5:46:91:ea:cc:
                    67:26:9b:83:14:6b:84:f6:8e:fe:6c:95:8d:4f:a9:
                    c9:86:43:c3:88:88:9e:be:8d:a8:b7:76:27:1a:7e:
                    5e:eb:65:ee:40:51:5e:af:e3:ef:5d:3f:0c:c8:dc:
                    29:0b:df:26:6a:58:55:bb:49:78:be:cb:60:83:e0:
                    6b:b4:39:54:92:1b:20:00:87:2e:5a:51:85:00:3e:
                    0a:ef:1a:49:0f:fd:b0:3c:a6:0e:e3:0c:27:5a:d0:
                    bb:ad:27:9b:3f:08:1e:ad:d0:08:8e:ef:c9:6a:5c:
                    42:e3:d6:e4:9c:05:de:7f:3e:19:d5:fc:8c:75:e8:
                    19:ef:ce:99:2b:4f:55:94:92:26:b3:a9:74:84:b0:
                    e5:c2:31:a2:3b:b9:0d:0a:8f:09:af:6e:41:d3:a0:
                    c2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:21:01:B8:A8:A4:8D:A5:DB:B3:C2:5A:DD:42:D4:53:6E:92:1E:32
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135382e302f32342d3234203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:33:b7:6c:10:2f:d3:c2:9a:01:af:4f:85:2c:78:14:38:1b:
         6c:45:a2:b5:d3:55:12:08:3b:8d:df:0d:de:4d:8d:40:6d:d5:
         fb:7c:9f:de:e3:a7:e0:bd:62:59:b1:55:cc:c8:08:00:91:79:
         fa:b7:29:40:05:06:66:70:ef:2f:13:24:57:95:d0:76:77:49:
         ff:9d:91:9e:2e:8f:2d:d2:c8:89:49:d7:0c:4e:85:b9:c3:17:
         d7:7b:ae:9f:ce:fb:be:65:46:40:db:b1:08:ad:a6:33:ce:27:
         4f:f6:77:f4:b4:8b:fd:aa:d2:79:b5:d7:19:6b:2d:43:13:85:
         f0:cb:41:ab:84:c9:81:25:0e:20:be:1c:d3:a2:de:c9:51:32:
         c5:cd:35:04:93:3c:d0:5e:a8:61:98:d9:81:b3:a7:fa:12:be:
         de:16:00:3c:d7:22:70:8d:7d:95:d9:fc:57:ac:39:23:95:ea:
         e4:58:ca:11:3e:58:42:15:f8:32:b0:ed:39:d6:e1:72:fc:41:
         a0:76:cf:ac:23:c8:03:14:c7:c7:7d:5f:4e:79:13:57:c3:ad:
         4f:30:32:75:2d:63:4f:85:a6:4f:ac:f2:dd:a7:69:11:5c:1e:
         0e:b8:41:25:34:20:4e:12:32:4a:83:44:1e:41:d2:69:bd:c2:
         ff:ac:3f:e7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ147BQQlFQFZ2XjOsrqdQlyKI4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU3MEJGNDgyMUIyMURDNTkwNUZERDc0RUQwM0MxMzZB
MTZBMjgzMDAeFw0yNDA0MjUxOTI4MDlaFw0yNTA0MjQxOTMzMDlaMDMxMTAvBgNV
BAMTKDJCMjEwMUI4QThBNDhEQTVEQkIzQzI1QURENDJENDUzNkU5MjFFMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3o7qOT/GOLVJPIplNroSOazYG
7q/rjOrvg+Ds0fnz6NnZCy754Hzed0D5O0EQHeOCJj8iyiNgswHEOrn3PlHkVZGP
LEZKjG/La+ypTFAe5JtINtX6zIydTvxhvpmgT6ciRg61RpHqzGcmm4MUa4T2jv5s
lY1PqcmGQ8OIiJ6+jai3dicafl7rZe5AUV6v4+9dPwzI3CkL3yZqWFW7SXi+y2CD
4Gu0OVSSGyAAhy5aUYUAPgrvGkkP/bA8pg7jDCda0LutJ5s/CB6t0AiO78lqXELj
1uScBd5/PhnV/Ix16BnvzpkrT1WUkiazqXSEsOXCMaI7uQ0KjwmvbkHToMKHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKyEBuKikjaXbs8Ja3ULUU26SHjIwHwYDVR0j
BBgwFoAU/nC/SCGyHcWQX9107QPBNqFqKDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzREWnQ4cEdoOUZYTU5XTDhNd3V1QXBzQnNBZDNMSFZ2THpka0Fxc1FC
OUgvMC9GRTcwQkY0ODIxQjIxREM1OTA1RkRENzRFRDAzQzEzNkExNkEyODMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFNzBCRjQ4MjFCMjFEQzU5
MDVGREQ3NEVEMDNDMTM2QTE2QTI4MzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c0RFp0OHBHaDlGWE1OV0w4TXd1dUFwc0JzQWQzTEhWdkx6ZGtBcXNRQjlILzAv
MzIzMDMwMmUzMjMyMzkyZTMxMzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzODMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI5Z4wDQYJKoZIhvcNAQELBQADggEBAK8zt2wQ
L9PCmgGvT4UseBQ4G2xForXTVRIIO43fDd5NjUBt1ft8n97jp+C9YlmxVczICACR
efq3KUAFBmZw7y8TJFeV0HZ3Sf+dkZ4ujy3SyIlJ1wxOhbnDF9d7rp/O+75lRkDb
sQitpjPOJ0/2d/S0i/2q0nm11xlrLUMThfDLQauEyYElDiC+HNOi3slRMsXNNQST
PNBeqGGY2YGzp/oSvt4WADzXInCNfZXZ/FesOSOV6uRYyhE+WEIV+DKw7TnW4XL8
QaB2z6wjyAMUx8d9X055E1fDrU8wMnUtY0+Fpk+s8t2naRFcHg64QSU0IE4SMkqD
RB5B0mm9wv+sP+c=
-----END CERTIFICATE-----
Generated at Fri Mar 14 05:00:35 2025 by rpki-client