Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137322e302f32322d3232203d3e203232373733.roa
File:                     3230302e3232302e3137322e302f32322d3232203d3e203232373733.roa (raw, json)
Hash identifier:          N2yNs3BBdCpN3I/UjMblpvJfbW1E9LOiPFevRnKk+/c=
Subject key identifier:   97:E8:A1:30:EC:0D:32:60:7B:6F:1D:85:6B:74:76:CD:2B:2C:55:35
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       059F860A70161044F9A606CA55990E509D82BFF9
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137322e302f32322d3232203d3e203232373733.roa
Signing time:             Thu 04 Apr 2024 14:17:22 +0000
ROA not before:           Thu 04 Apr 2024 14:12:22 +0000
ROA not after:            Thu 03 Apr 2025 14:17:22 +0000
asID:                     22773
IP address blocks:        200.220.172.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 16:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9f:86:0a:70:16:10:44:f9:a6:06:ca:55:99:0e:50:9d:82:bf:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Apr  4 14:12:22 2024 GMT
            Not After : Apr  3 14:17:22 2025 GMT
        Subject: CN=97E8A130EC0D32607B6F1D856B7476CD2B2C5535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:bf:ab:ec:34:de:ed:26:8d:15:f6:32:1f:
                    cc:f9:6e:5f:fd:4b:03:99:ce:e4:fd:32:f9:77:35:
                    e3:d7:64:73:e8:a8:5b:55:36:74:a6:24:19:68:47:
                    81:15:a0:67:59:43:07:aa:ee:22:b0:eb:82:b8:b9:
                    eb:75:cc:c6:4c:06:44:b7:50:16:7b:ab:a3:62:7f:
                    65:78:48:ad:d6:fa:40:b9:27:da:8a:dc:c8:40:ba:
                    32:97:5f:7d:c5:80:41:9e:12:8c:ba:8e:52:40:56:
                    7d:6c:91:39:f3:ad:51:9f:18:a2:70:40:5f:35:72:
                    0f:b5:10:23:6d:4f:4b:e4:ef:d1:61:c8:6c:64:49:
                    57:9c:b2:df:31:77:b4:5a:ee:b7:ed:62:20:23:b7:
                    21:2d:44:cd:b1:69:26:87:c1:91:bd:d5:fd:a3:a0:
                    9f:bd:6a:e7:ce:b8:d9:31:4c:89:53:1b:fe:40:9e:
                    57:90:97:e8:2d:43:c8:4d:77:80:94:03:6d:37:87:
                    69:26:f6:90:39:1e:a3:b4:32:58:0c:d0:64:25:ad:
                    3c:83:37:f1:6b:c9:52:95:c6:b7:be:e7:42:d5:50:
                    25:0c:c0:e5:3b:29:7e:ea:1f:71:42:0a:11:bc:be:
                    45:a3:da:58:a9:f3:58:ef:6f:e7:fa:d0:62:e6:57:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E8:A1:30:EC:0D:32:60:7B:6F:1D:85:6B:74:76:CD:2B:2C:55:35
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3137322e302f32322d3232203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:21:fe:8d:c3:26:d9:0c:dd:e7:a0:55:b4:6e:c3:45:f9:2b:
         a1:39:01:36:9e:f5:7b:70:3e:df:b7:75:06:5b:04:9c:91:46:
         4d:a9:92:57:56:de:da:cb:f2:1c:6c:c2:ee:21:fe:d1:e6:40:
         48:b7:f3:e7:29:ef:74:98:7a:92:0c:f4:ff:ec:c8:53:5b:44:
         28:71:7c:30:7c:04:3c:35:43:b9:28:de:11:1d:5a:66:25:f4:
         e5:11:e2:16:95:4e:f4:e6:d7:91:f6:85:7a:5b:5b:89:3f:78:
         f6:30:d2:68:2b:e4:a4:e0:79:5d:42:de:ba:0c:dd:84:0a:87:
         12:bc:f2:0a:92:e9:0f:bb:09:61:77:41:da:3e:53:c0:82:12:
         2a:06:ac:e0:14:ce:55:59:01:84:e2:7b:54:cc:ed:c1:2b:d3:
         71:e4:c8:d5:7c:d2:53:a6:ae:24:27:5b:df:a6:c8:b9:14:23:
         e3:8b:8a:22:a4:d0:4a:53:bd:39:9a:4a:8a:6c:89:85:ad:af:
         40:a1:86:cc:65:37:f3:ae:8a:1c:7e:c3:e9:b5:dd:3e:f6:1e:
         39:c0:78:5b:ca:e5:90:18:ff:30:ad:19:48:6e:16:93:d5:7c:
         46:bf:66:07:d4:b6:e1:ae:8f:69:9f:bb:be:8e:2a:e9:e4:25:
         8b:28:2d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 19:47:17 2024 by rpki-client on console-fra.rpki-client.org