Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32322d3232203d3e203232373733.roa
File:                     3230302e3232302e3136302e302f32322d3232203d3e203232373733.roa (raw, json)
Hash identifier:          Y1sl4QEnQQRqM7Hb4ioJ0mNtzi+thDv2QUKuSdHaIzg=
Subject key identifier:   FE:D5:6E:E9:D1:3B:4E:E6:E5:C1:7A:1E:07:5E:37:8E:3F:E1:E0:E7
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       74AC6370DF72CCBCAEAD716C6098FA656E819822
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32322d3232203d3e203232373733.roa
Signing time:             Thu 04 Apr 2024 14:17:21 +0000
ROA not before:           Thu 04 Apr 2024 14:12:21 +0000
ROA not after:            Thu 03 Apr 2025 14:17:21 +0000
asID:                     22773
IP address blocks:        200.220.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 16:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ac:63:70:df:72:cc:bc:ae:ad:71:6c:60:98:fa:65:6e:81:98:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Apr  4 14:12:21 2024 GMT
            Not After : Apr  3 14:17:21 2025 GMT
        Subject: CN=FED56EE9D13B4EE6E5C17A1E075E378E3FE1E0E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:12:33:e4:3a:88:02:29:74:8f:a8:74:a2:af:
                    ff:d5:88:0c:bd:13:3b:84:72:e8:b3:3c:2c:09:73:
                    51:b2:bf:23:31:38:7d:f9:57:15:c6:35:5c:99:7a:
                    41:d6:21:43:2f:97:4e:16:25:d5:09:e2:ba:47:23:
                    bc:f6:16:1a:7a:d7:89:d9:4c:58:ef:6f:02:8a:77:
                    7e:90:e2:50:f2:7f:7a:79:ea:48:b1:de:41:00:64:
                    ff:38:a7:ec:ac:6f:70:9e:9a:99:86:8b:c9:74:04:
                    70:dd:ba:3e:d1:31:25:1c:3c:dc:37:c9:61:da:b6:
                    75:67:12:d9:69:b4:1b:8a:9e:e6:15:8e:b8:1d:71:
                    e8:3e:d8:ad:ac:8a:0a:5d:9e:91:ed:b6:f3:75:6e:
                    54:00:0c:e9:2c:31:60:63:c9:3f:92:5e:65:48:27:
                    95:c2:01:dc:e2:06:47:84:c5:6c:81:c6:44:28:eb:
                    4e:bc:26:7d:1d:e2:f6:92:f2:ae:15:c9:b2:72:28:
                    8d:dc:7f:26:29:91:bc:2f:e4:97:e7:2f:b1:d9:0c:
                    1b:b9:4b:9a:74:89:68:c4:2d:da:37:3d:d9:8e:0b:
                    4f:14:94:a1:62:0e:7c:a6:b4:47:c2:91:18:fe:b4:
                    e3:8d:43:3a:f0:ba:99:f1:9a:f9:7f:db:16:43:fd:
                    b4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D5:6E:E9:D1:3B:4E:E6:E5:C1:7A:1E:07:5E:37:8E:3F:E1:E0:E7
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136302e302f32322d3232203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:bc:31:5e:e3:81:ef:c1:cc:b0:28:4a:1e:57:fb:07:17:31:
         69:3d:e2:74:6d:b1:a3:26:85:64:65:45:79:f5:6c:23:9e:bc:
         a9:e9:82:5a:e5:e9:f9:a4:1f:7b:6b:2e:f0:53:15:f5:54:79:
         62:43:b2:27:e6:95:42:07:bd:f3:d8:2b:b9:98:a8:d0:1c:75:
         f8:12:ca:82:9c:ae:3f:c3:d1:06:6e:70:68:ee:6a:18:59:5a:
         b4:d5:5d:50:62:af:b1:e3:0f:c4:63:ed:3e:ca:78:1c:5b:b7:
         44:d1:b4:5a:25:88:1f:91:4c:20:b8:78:dd:d5:cf:6b:a9:a3:
         ec:0e:7f:54:2e:bf:3a:e8:25:24:2f:d2:1b:22:53:2d:46:41:
         75:2c:d9:7f:92:5d:35:d7:3e:b3:1a:18:33:ea:b9:96:19:64:
         8c:e2:5c:a1:ef:c0:96:11:dc:c8:e0:ca:ec:a0:2a:47:20:26:
         a5:a1:13:b0:12:89:99:5a:c8:b8:13:2a:fd:d5:f3:ba:cb:10:
         99:18:ab:97:9b:09:ea:11:9b:e5:37:40:e1:9d:04:6c:c6:bf:
         34:34:5b:7b:98:6f:fc:85:b0:00:78:32:94:e0:3e:66:2f:1f:
         bd:de:9d:8f:e4:8d:67:d3:8c:42:37:c8:a8:c8:0d:9a:bf:4a:
         97:47:24:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 19:47:17 2024 by rpki-client on console-fra.rpki-client.org