Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136372e302f32342d3234203d3e20323634303134.roa
File:                     3134332e302e3136372e302f32342d3234203d3e20323634303134.roa (raw, json)
Hash identifier:          i37CMGzWDI1nW46rh3ZBw9SEp12ZAREjnBETX5nw68k=
Subject key identifier:   52:73:DF:07:4B:34:8E:8A:89:AA:68:AB:FB:26:33:A9:04:52:B2:AB
Certificate issuer:       /CN=22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3
Certificate serial:       3B13B2F50CD086C8C57D5FDBB5B01337A9F10960
Authority key identifier: 22:EA:8D:7C:B9:12:5D:9A:67:29:C2:F7:D9:1A:E9:E0:D1:2F:B2:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136372e302f32342d3234203d3e20323634303134.roa
Signing time:             Thu 23 Nov 2023 13:01:57 +0000
ROA not before:           Thu 23 Nov 2023 12:56:57 +0000
ROA not after:            Thu 21 Nov 2024 13:01:57 +0000
asID:                     264014
IP address blocks:        143.0.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:13:b2:f5:0c:d0:86:c8:c5:7d:5f:db:b5:b0:13:37:a9:f1:09:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3
        Validity
            Not Before: Nov 23 12:56:57 2023 GMT
            Not After : Nov 21 13:01:57 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:42:c8:16:98:3f:f6:0f:e1:af:d6:42:c3:
                    64:47:bc:92:86:26:97:16:8b:de:cb:44:77:47:d5:
                    5a:aa:b1:45:0d:35:2f:db:b0:75:b5:67:6a:e0:1e:
                    aa:a3:1f:df:a9:24:c2:32:f0:2c:1f:a7:a4:08:8a:
                    69:d2:71:76:6f:8f:f2:cd:78:11:f2:fc:73:30:11:
                    48:4f:2d:d1:2c:ba:37:80:2c:a4:02:02:4f:e2:16:
                    c9:9e:a5:8b:51:4a:43:cb:9c:f1:f6:df:81:fc:0f:
                    5a:e2:bc:15:08:d1:8e:7d:34:8a:cf:d4:5b:70:9e:
                    de:b8:3a:c2:42:91:09:69:ac:fc:0a:cd:c2:b0:02:
                    a0:1c:dd:3b:40:d0:e3:41:3d:35:79:9d:01:88:01:
                    aa:a8:02:11:d8:c6:b7:0f:52:ab:e6:d4:8f:26:18:
                    9c:35:07:5a:31:f4:da:1a:63:75:e2:25:3f:02:66:
                    7c:b8:9d:04:ba:22:b0:8b:38:df:aa:69:85:b9:ff:
                    b1:cc:91:fa:c5:bd:67:7c:31:51:dc:83:c7:56:6d:
                    74:f4:2e:21:45:b1:36:0a:32:c9:b8:81:b8:4f:95:
                    ac:16:de:a8:dd:1d:a0:ff:a7:71:81:09:4e:41:77:
                    ed:8e:7c:8f:25:3e:fa:92:2a:03:10:b4:58:c9:f9:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:73:DF:07:4B:34:8E:8A:89:AA:68:AB:FB:26:33:A9:04:52:B2:AB
            X509v3 Authority Key Identifier:
                keyid:22:EA:8D:7C:B9:12:5D:9A:67:29:C2:F7:D9:1A:E9:E0:D1:2F:B2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136372e302f32342d3234203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:90:06:67:9e:41:a6:86:56:d1:c3:1c:89:55:5f:0f:37:c4:
         c2:9b:af:78:ef:f6:49:f5:56:2b:19:e5:21:4f:91:01:20:6e:
         aa:94:65:16:0a:d3:56:16:43:64:27:4f:4c:5d:75:ab:56:21:
         ec:13:54:92:a3:ec:58:08:88:dd:c0:a9:3a:bc:f2:ba:3e:cc:
         b9:99:90:7e:5c:96:a9:e2:c0:bc:30:a1:52:bd:9e:ad:62:91:
         20:db:d1:72:f5:fb:c3:b1:f8:9d:91:90:e8:a4:77:da:c7:08:
         eb:b5:f9:12:d0:83:2a:f0:d2:83:1c:3b:be:db:b3:55:c8:d2:
         ad:f6:80:b5:85:f7:c8:17:1c:62:05:6a:4b:5d:69:f4:3f:46:
         4b:84:c2:17:80:c5:5d:0f:96:40:19:51:8d:12:50:2c:e9:a0:
         c4:07:0b:65:2f:c4:d2:3b:0b:7a:08:39:18:58:57:5a:c4:4d:
         f4:7b:1e:b0:60:53:63:31:da:87:28:58:89:58:6b:ee:3d:e1:
         e7:67:69:07:58:99:1a:41:03:f9:51:d2:92:14:80:2f:cc:85:
         f9:cc:2d:94:59:e2:07:91:51:5b:f1:8c:a0:07:d7:e0:d8:c3:
         80:b2:aa:f0:62:37:f0:be:66:41:11:8e:c3:66:d3:dc:e9:2e:
         8e:d1:d4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 20:44:48 2023 by rpki-client on console-fra.rpki-client.org