Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135392e302f32342d3234203d3e203631383035.roa
File:                     3230302e3232392e3135392e302f32342d3234203d3e203631383035.roa (raw, json)
Hash identifier:          E6GJPShYqe14fA8l8uXEanoCcEXX4Gq6cCVRQL3uVds=
Subject key identifier:   31:7F:4C:CF:98:1D:6A:D9:77:30:8A:0F:13:57:D9:D6:0B:5B:E0:3A
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       442101279945940B06D0042365C58F5731A6DBA0
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135392e302f32342d3234203d3e203631383035.roa
Signing time:             Thu 25 Apr 2024 19:33:12 +0000
ROA not before:           Thu 25 Apr 2024 19:28:12 +0000
ROA not after:            Thu 24 Apr 2025 19:33:12 +0000
asID:                     61805
IP address blocks:        200.229.159.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:21:01:27:99:45:94:0b:06:d0:04:23:65:c5:8f:57:31:a6:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Apr 25 19:28:12 2024 GMT
            Not After : Apr 24 19:33:12 2025 GMT
        Subject: CN=317F4CCF981D6AD977308A0F1357D9D60B5BE03A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f7:a9:04:cb:c4:3c:7c:af:5a:38:a8:bb:42:
                    5d:61:15:d6:7f:b3:a1:49:c6:bc:e5:73:60:ab:c9:
                    ce:91:e9:da:10:92:9e:bd:9f:34:bf:75:91:3a:67:
                    e8:39:50:5a:b5:73:3a:9c:a6:49:fb:0d:93:ab:48:
                    29:5c:be:13:b5:a3:30:9b:91:d8:2f:4d:ca:df:d2:
                    aa:ba:19:10:44:01:0a:78:08:7e:b3:d9:f6:59:e7:
                    fc:2e:9f:0a:ad:ba:ba:cf:fb:31:8e:d3:d4:0d:97:
                    39:b0:8e:49:e4:0e:90:82:62:c7:13:4b:96:ec:84:
                    4e:b9:83:b7:c2:1c:a9:11:07:3e:55:95:29:1d:5f:
                    88:4d:77:28:25:39:f1:e4:01:34:bf:21:57:59:f2:
                    83:d7:b6:21:de:df:81:05:bc:6b:13:f6:ce:8f:49:
                    d8:9b:9c:9e:69:5c:71:5e:40:5c:93:8d:d5:c1:83:
                    27:7e:7a:fb:4f:12:45:7d:e9:76:cf:5c:5e:77:06:
                    1e:f1:f8:a8:ee:38:de:72:1b:0a:ca:a7:d4:c2:6d:
                    42:c7:ca:b4:dc:59:09:4e:dd:38:dc:6b:dd:21:9b:
                    44:15:f7:9e:05:bf:43:83:63:95:47:0c:81:fe:49:
                    9e:b9:51:b5:6a:14:01:9a:04:d8:35:30:ee:57:4c:
                    0c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7F:4C:CF:98:1D:6A:D9:77:30:8A:0F:13:57:D9:D6:0B:5B:E0:3A
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135392e302f32342d3234203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:7b:b0:6a:b7:6b:2e:1e:70:59:87:85:e8:2c:41:d8:6c:28:
         21:49:30:22:76:cc:96:7d:68:93:01:73:a2:05:25:43:b1:f2:
         4a:a6:ce:6a:1c:a9:b8:bd:cd:dc:21:40:f0:ac:14:0a:a8:ca:
         df:4c:56:79:30:6c:be:41:6e:45:a4:df:fe:a8:ac:f1:18:18:
         d4:eb:e6:fc:81:13:26:2c:e8:f2:c3:d8:cc:b0:43:c9:0f:54:
         69:78:96:73:3f:ab:b0:78:73:f2:aa:da:57:65:2c:b0:16:a3:
         81:4d:43:9e:aa:ba:24:79:ea:24:36:6f:7a:1a:23:a9:21:76:
         b1:7b:7d:31:4e:10:a6:0a:cc:86:08:0f:64:b1:34:e5:ca:dd:
         7d:2f:05:72:b6:55:45:31:55:6d:72:f0:cf:16:84:85:5a:7d:
         64:3c:a9:24:6b:90:f0:69:07:ee:56:62:fa:90:5b:25:68:83:
         ee:c1:05:b0:08:98:54:2f:44:8a:53:fe:be:cd:d7:36:36:23:
         e3:56:c1:79:1a:a8:df:bb:8c:37:7c:e2:11:37:9e:b6:b8:1c:
         26:da:65:98:14:f2:28:d5:89:81:59:c1:e4:37:50:7c:6d:9c:
         c4:f8:1f:21:9b:45:67:06:d8:37:65:05:44:ef:87:57:47:19:
         96:23:60:f3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURCEBJ5lFlAsG0AQjZcWPVzGm26AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU3MEJGNDgyMUIyMURDNTkwNUZERDc0RUQwM0MxMzZB
MTZBMjgzMDAeFw0yNDA0MjUxOTI4MTJaFw0yNTA0MjQxOTMzMTJaMDMxMTAvBgNV
BAMTKDMxN0Y0Q0NGOTgxRDZBRDk3NzMwOEEwRjEzNTdEOUQ2MEI1QkUwM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs96kEy8Q8fK9aOKi7Ql1hFdZ/
s6FJxrzlc2Cryc6R6doQkp69nzS/dZE6Z+g5UFq1czqcpkn7DZOrSClcvhO1ozCb
kdgvTcrf0qq6GRBEAQp4CH6z2fZZ5/wunwqturrP+zGO09QNlzmwjknkDpCCYscT
S5bshE65g7fCHKkRBz5VlSkdX4hNdyglOfHkATS/IVdZ8oPXtiHe34EFvGsT9s6P
SdibnJ5pXHFeQFyTjdXBgyd+evtPEkV96XbPXF53Bh7x+KjuON5yGwrKp9TCbULH
yrTcWQlO3Tjca90hm0QV954Fv0ODY5VHDIH+SZ65UbVqFAGaBNg1MO5XTAxrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMX9Mz5gdatl3MIoPE1fZ1gtb4DowHwYDVR0j
BBgwFoAU/nC/SCGyHcWQX9107QPBNqFqKDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzREWnQ4cEdoOUZYTU5XTDhNd3V1QXBzQnNBZDNMSFZ2THpka0Fxc1FC
OUgvMC9GRTcwQkY0ODIxQjIxREM1OTA1RkRENzRFRDAzQzEzNkExNkEyODMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFNzBCRjQ4MjFCMjFEQzU5
MDVGREQ3NEVEMDNDMTM2QTE2QTI4MzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c0RFp0OHBHaDlGWE1OV0w4TXd1dUFwc0JzQWQzTEhWdkx6ZGtBcXNRQjlILzAv
MzIzMDMwMmUzMjMyMzkyZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzODMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI5Z8wDQYJKoZIhvcNAQELBQADggEBAJ17sGq3
ay4ecFmHhegsQdhsKCFJMCJ2zJZ9aJMBc6IFJUOx8kqmzmocqbi9zdwhQPCsFAqo
yt9MVnkwbL5BbkWk3/6orPEYGNTr5vyBEyYs6PLD2MywQ8kPVGl4lnM/q7B4c/Kq
2ldlLLAWo4FNQ56quiR56iQ2b3oaI6khdrF7fTFOEKYKzIYID2SxNOXK3X0vBXK2
VUUxVW1y8M8WhIVafWQ8qSRrkPBpB+5WYvqQWyVog+7BBbAImFQvRIpT/r7N1zY2
I+NWwXkaqN+7jDd84hE3nra4HCbaZZgU8ijViYFZweQ3UHxtnMT4HyGbRWcG2Ddl
BUTvh1dHGZYjYPM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:17 2025 by rpki-client