Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3139302e3130392e38342e302f32322d3232203d3e203232303835.roa
File:                     3139302e3130392e38342e302f32322d3232203d3e203232303835.roa (raw, json)
Hash identifier:          TNCUqordXWyeZ4V5HucDi9OFlHI+BnYrCU6zGsIFi6o=
Subject key identifier:   C8:77:E0:65:9F:17:71:8A:3D:43:E0:8C:C6:A0:A3:21:7B:85:51:BC
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       254ED8C62DB3824138783853B765E660BBB48402
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3139302e3130392e38342e302f32322d3232203d3e203232303835.roa
Signing time:             Wed 03 Apr 2024 18:31:54 +0000
ROA not before:           Wed 03 Apr 2024 18:26:54 +0000
ROA not after:            Wed 02 Apr 2025 18:31:54 +0000
asID:                     22085
IP address blocks:        190.109.84.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4e:d8:c6:2d:b3:82:41:38:78:38:53:b7:65:e6:60:bb:b4:84:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Apr  3 18:26:54 2024 GMT
            Not After : Apr  2 18:31:54 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4e:79:5e:7e:87:77:54:e1:31:48:81:7b:06:
                    b4:fb:d7:cf:3a:38:4d:0e:dc:9f:1d:fc:30:09:78:
                    08:ab:6a:59:79:de:26:c0:8d:41:1c:a3:65:21:97:
                    0d:b1:72:9b:d8:b8:a9:74:16:0a:6e:8c:00:bc:de:
                    b4:22:c5:e1:19:78:16:9c:00:fd:d1:66:36:64:90:
                    c1:79:ac:38:91:2d:e7:44:1e:68:74:5c:54:ba:59:
                    1e:a3:b6:3f:6c:13:36:f2:39:91:bd:11:e8:42:fb:
                    65:c2:fd:16:e3:02:51:38:44:a3:e0:3f:bb:48:f6:
                    d2:63:23:a1:16:4d:e3:f2:d9:29:d1:0c:73:39:aa:
                    85:38:4a:c7:fd:25:af:17:8f:9a:bb:a2:29:3e:30:
                    1b:c6:5b:7e:d7:f0:db:f9:c5:83:28:0c:a5:f7:f9:
                    0c:3c:7f:23:4b:67:3e:f8:17:07:ab:3d:3b:5e:43:
                    93:b3:28:1c:0b:fc:98:fa:7f:d2:98:ac:e9:62:81:
                    33:f0:29:37:f1:04:0a:ec:38:5d:ec:e6:b6:ad:58:
                    ef:d4:4c:1e:40:71:a3:06:85:0d:5f:13:be:c9:f6:
                    30:25:54:ad:d0:b7:c5:e4:66:a7:ea:55:ee:82:69:
                    b8:63:03:93:dd:3d:9b:58:d6:fb:91:a7:f7:42:d8:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:77:E0:65:9F:17:71:8A:3D:43:E0:8C:C6:A0:A3:21:7B:85:51:BC
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3139302e3130392e38342e302f32322d3232203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:0e:84:fc:b6:5b:e7:cc:22:f1:77:09:4d:d8:ae:e2:59:24:
         13:53:bd:96:50:24:46:2c:55:f1:74:01:5a:a6:17:43:31:7f:
         0c:64:ee:54:c7:68:24:02:6c:3e:2d:ab:bf:7b:87:df:83:c8:
         19:1d:db:31:97:00:b1:e2:16:e4:0b:40:8d:07:7a:f4:6e:38:
         11:3f:99:92:c2:bc:8a:e7:1b:d1:17:88:08:fc:d0:5d:21:0e:
         f9:38:b1:0b:74:e8:b5:95:9f:90:50:29:93:fa:4a:fa:a3:8e:
         12:36:99:17:cc:07:f9:a0:09:23:22:6f:1a:12:ed:c1:89:a1:
         51:62:d9:d7:d5:a0:3c:f2:d4:a0:da:9a:3c:63:f0:ca:0a:1c:
         20:40:27:3a:af:f1:c4:17:19:2c:e1:9c:dc:c2:94:b5:2a:fb:
         bd:32:a6:15:a4:11:ef:c7:8f:3f:b7:2c:98:77:ee:74:b8:45:
         71:a4:f8:94:e5:4d:aa:d4:c0:67:5a:19:82:73:c0:74:ee:a0:
         80:24:45:c2:0e:4f:cc:f8:02:ea:cd:bd:77:b5:5f:26:b1:96:
         c0:34:91:e7:83:6d:51:33:fb:63:d5:2d:ea:a2:c2:73:a0:61:
         68:1f:13:57:78:c6:70:88:c0:c7:db:15:41:9c:21:15:80:68:
         a6:ba:70:2a
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUJU7Yxi2zgkE4eDhTt2XmYLu0hAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVFQkVFRkQ0NUEwRDkwQjVFNjBDRDhENEI0Mzg0MDk4
MzUzRTgyODAeFw0yNDA0MDMxODI2NTRaFw0yNTA0MDIxODMxNTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0I0RTc5NUU3RTg3Nzc1NEUx
MzE0ODgxN0IwNkI0RkJEN0NGM0EzODREMEVEQzlGMURGQzMwMDk3ODA4QUI2QTU5
NzlERTI2QzA4RDQxMUNBMzY1MjE5NzBEQjE3MjlCRDhCOEE5NzQxNjBBNkU4QzAw
QkNERUI0MjJDNUUxMTk3ODE2OUMwMEZERDE2NjM2NjQ5MEMxNzlBQzM4OTEyREU3
NDQxRTY4NzQ1QzU0QkE1OTFFQTNCNjNGNkMxMzM2RjIzOTkxQkQxMUU4NDJGQjY1
QzJGRDE2RTMwMjUxMzg0NEEzRTAzRkJCNDhGNkQyNjMyM0ExMTY0REUzRjJEOTI5
RDEwQzczMzlBQTg1Mzg0QUM3RkQyNUFGMTc4RjlBQkJBMjI5M0UzMDFCQzY1QjdF
RDdGMERCRjlDNTgzMjgwQ0E1RjdGOTBDM0M3RjIzNEI2NzNFRjgxNzA3QUIzRDNC
NUU0MzkzQjMyODFDMEJGQzk4RkE3RkQyOThBQ0U5NjI4MTMzRjAyOTM3RjEwNDBB
RUMzODVERUNFNkI2QUQ1OEVGRDQ0QzFFNDA3MUEzMDY4NTBENUYxM0JFQzlGNjMw
MjU1NEFERDBCN0M1RTQ2NkE3RUE1NUVFODI2OUI4NjMwMzkzREQzRDlCNThENkZC
OTFBN0Y3NDJEOEQ5ODUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAy055Xn6Hd1ThMUiBewa0+9fPOjhNDtyfHfwwCXgIq2pZed4mwI1B
HKNlIZcNsXKb2LipdBYKbowAvN60IsXhGXgWnAD90WY2ZJDBeaw4kS3nRB5odFxU
ulkeo7Y/bBM28jmRvRHoQvtlwv0W4wJROESj4D+7SPbSYyOhFk3j8tkp0QxzOaqF
OErH/SWvF4+au6IpPjAbxlt+1/Db+cWDKAyl9/kMPH8jS2c++BcHqz07XkOTsygc
C/yY+n/SmKzpYoEz8Ck38QQK7Dhd7Oa2rVjv1EweQHGjBoUNXxO+yfYwJVSt0LfF
5Gan6lXugmm4YwOT3T2bWNb7kaf3QtjZhQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FMh34GWfF3GKPUPgjMagoyF7hVG8MB8GA1UdIwQYMBaAFNXr7v1FoNkLXmDNjUtD
hAmDU+goMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hGWXFjckxWdjFKSld6
dlVGZ1I4cVp6cGlkTFFUdGtCa1haczZnZVFkdWllLzEvRDVFQkVFRkQ0NUEwRDkw
QjVFNjBDRDhENEI0Mzg0MDk4MzUzRTgyOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENUVCRUVGRDQ1QTBEOTBCNUU2MENEOEQ0QjQzODQwOTgzNTNF
ODI4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IRllxY3JMVnYxSkpXenZVRmdS
OHFaenBpZExRVHRrQmtYWnM2Z2VRZHVpZS8xLzMxMzkzMDJlMzEzMDM5MmUzODM0
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMjMwMzgzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5t
VDANBgkqhkiG9w0BAQsFAAOCAQEApQ6E/LZb58wi8XcJTdiu4lkkE1O9llAkRixV
8XQBWqYXQzF/DGTuVMdoJAJsPi2rv3uH34PIGR3bMZcAseIW5AtAjQd69G44ET+Z
ksK8iucb0ReICPzQXSEO+TixC3TotZWfkFApk/pK+qOOEjaZF8wH+aAJIyJvGhLt
wYmhUWLZ19WgPPLUoNqaPGPwygocIEAnOq/xxBcZLOGc3MKUtSr7vTKmFaQR78eP
P7csmHfudLhFcaT4lOVNqtTAZ1oZgnPAdO6ggCRFwg5PzPgC6s29d7VfJrGWwDSR
54NtUTP7Y9Ut6qLCc6BhaB8TV3jGcIjAx9sVQZwhFYBoprpwKg==
-----END CERTIFICATE-----
Generated at Tue Jul 16 21:31:16 2024 by rpki-client on console-ams.rpki-client.org