Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136342e302f32342d3234203d3e20323634303134.roa
File:                     3134332e302e3136342e302f32342d3234203d3e20323634303134.roa (raw, json)
Hash identifier:          bZVkGqsH8SzqehlcVx5bwPvy5CabKFJN/rN6xzAyOOM=
Subject key identifier:   B8:20:96:9B:0B:3A:88:2F:4B:23:04:CF:6A:7F:EE:FB:26:07:F9:85
Certificate issuer:       /CN=22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3
Certificate serial:       181ADEDAF30AAC82FDF6B03326AFECA140B21AA5
Authority key identifier: 22:EA:8D:7C:B9:12:5D:9A:67:29:C2:F7:D9:1A:E9:E0:D1:2F:B2:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136342e302f32342d3234203d3e20323634303134.roa
Signing time:             Thu 23 Nov 2023 13:02:16 +0000
ROA not before:           Thu 23 Nov 2023 12:57:16 +0000
ROA not after:            Thu 21 Nov 2024 13:02:16 +0000
asID:                     264014
IP address blocks:        143.0.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1a:de:da:f3:0a:ac:82:fd:f6:b0:33:26:af:ec:a1:40:b2:1a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3
        Validity
            Not Before: Nov 23 12:57:16 2023 GMT
            Not After : Nov 21 13:02:16 2024 GMT
        Subject: CN=3082010A0282010100B0A5E37F0DE9BE2D25438B421EF0CDAEF2DE1CE80F690A90C61E2A9E37D69C75830DC0E8E0AB0FE0C7984A116D319EFE1B9EC0AEA3318E17A0E9D0B39D8FCC69C3AEF894F8A89CADE725F9E7FEC6F2672B22C0D67BFB49A7C1A7EAA6C569107D8DC3D30E91798C863103B449361016DE238C8B65809F214653CDCA9DCFAE3B1E6C046252423D206C770096A2DA2C82C9FF50ECCACFC8F6D17E0EAF50498257B19E9A0C220A0EE59B7B5CB264AAE7391AC9F0AE524A94A431895848F8B633453E39034CFC5F9A27FCF0A545F685767D16BE01C659DEA3E5759781F718DE4EAD4D97457E9BDA1727336F6AAD138CB79939AB405E601DB2D6EC2D24DE4D178E1B270203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:e3:7f:0d:e9:be:2d:25:43:8b:42:1e:f0:
                    cd:ae:f2:de:1c:e8:0f:69:0a:90:c6:1e:2a:9e:37:
                    d6:9c:75:83:0d:c0:e8:e0:ab:0f:e0:c7:98:4a:11:
                    6d:31:9e:fe:1b:9e:c0:ae:a3:31:8e:17:a0:e9:d0:
                    b3:9d:8f:cc:69:c3:ae:f8:94:f8:a8:9c:ad:e7:25:
                    f9:e7:fe:c6:f2:67:2b:22:c0:d6:7b:fb:49:a7:c1:
                    a7:ea:a6:c5:69:10:7d:8d:c3:d3:0e:91:79:8c:86:
                    31:03:b4:49:36:10:16:de:23:8c:8b:65:80:9f:21:
                    46:53:cd:ca:9d:cf:ae:3b:1e:6c:04:62:52:42:3d:
                    20:6c:77:00:96:a2:da:2c:82:c9:ff:50:ec:ca:cf:
                    c8:f6:d1:7e:0e:af:50:49:82:57:b1:9e:9a:0c:22:
                    0a:0e:e5:9b:7b:5c:b2:64:aa:e7:39:1a:c9:f0:ae:
                    52:4a:94:a4:31:89:58:48:f8:b6:33:45:3e:39:03:
                    4c:fc:5f:9a:27:fc:f0:a5:45:f6:85:76:7d:16:be:
                    01:c6:59:de:a3:e5:75:97:81:f7:18:de:4e:ad:4d:
                    97:45:7e:9b:da:17:27:33:6f:6a:ad:13:8c:b7:99:
                    39:ab:40:5e:60:1d:b2:d6:ec:2d:24:de:4d:17:8e:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:20:96:9B:0B:3A:88:2F:4B:23:04:CF:6A:7F:EE:FB:26:07:F9:85
            X509v3 Authority Key Identifier:
                keyid:22:EA:8D:7C:B9:12:5D:9A:67:29:C2:F7:D9:1A:E9:E0:D1:2F:B2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136342e302f32342d3234203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:cf:3c:58:f6:72:92:17:7a:d9:09:30:19:3e:24:31:7a:82:
         93:43:07:82:e1:ce:5b:85:ac:37:f1:32:c1:4a:61:5d:bb:1b:
         c1:18:46:aa:21:41:ba:7d:3f:4b:a1:5c:3b:67:a3:08:17:4d:
         f4:78:35:3d:d0:16:8e:f7:67:02:e0:6c:8f:5a:c4:4c:91:59:
         a2:ba:f8:9f:50:d6:67:23:3f:9b:aa:bf:a7:60:63:ce:c8:61:
         bf:03:27:25:94:92:18:f9:81:a4:4e:70:7b:11:88:90:bb:2b:
         66:05:05:2f:36:4e:d7:01:12:63:1f:71:f0:1b:14:c2:76:09:
         5d:d7:4d:f7:5d:15:ee:43:c3:8a:a2:0c:13:88:a4:6f:9f:81:
         95:e2:ea:bf:3d:16:87:46:d8:6d:9f:35:18:f2:69:59:75:67:
         8b:3a:44:6c:8a:70:d1:50:7a:ca:6e:d1:b3:87:89:fc:ce:a5:
         58:e4:18:1e:95:6b:89:32:92:3f:8d:04:e6:ab:8b:86:c8:22:
         c9:e4:6d:b0:30:cb:7f:69:d2:8d:e7:ff:04:56:4e:bc:d9:ff:
         72:ea:5a:e5:47:19:0a:1c:a7:1c:81:7c:23:31:57:66:79:38:
         e6:88:d1:b8:2a:ba:6d:a9:5a:99:44:43:3e:67:d2:c5:b8:bc:
         31:ad:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 20:55:33 2023 by rpki-client on console-ams.rpki-client.org