Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3136392e3131322e302f32302d3230203d3e203232303835.roa
File:                     3230302e3136392e3131322e302f32302d3230203d3e203232303835.roa (raw, json)
Hash identifier:          +GHyctzjb9WSOoYgBXN3F64ddjJ647g6hPcxJ7ioSwE=
Subject key identifier:   89:88:D6:2C:12:0F:68:80:2E:1B:4C:3B:8D:90:62:C2:D6:9D:29:48
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       7F40A96D0089AA497663AF39C3D5EADF30C64DC9
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3136392e3131322e302f32302d3230203d3e203232303835.roa
Signing time:             Wed 03 Apr 2024 18:31:53 +0000
ROA not before:           Wed 03 Apr 2024 18:26:53 +0000
ROA not after:            Wed 02 Apr 2025 18:31:53 +0000
asID:                     22085
IP address blocks:        200.169.112.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:40:a9:6d:00:89:aa:49:76:63:af:39:c3:d5:ea:df:30:c6:4d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Apr  3 18:26:53 2024 GMT
            Not After : Apr  2 18:31:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:bb:5a:49:32:dd:3b:e6:33:13:04:e6:6e:
                    f6:18:bc:c5:e7:e9:7f:c1:a4:dc:ae:98:3a:24:d8:
                    c5:d0:82:db:56:6c:03:04:b4:e7:b1:29:20:5f:e6:
                    39:b4:a5:72:50:a3:c1:c8:93:d4:32:db:80:b7:5d:
                    06:a3:3c:fd:2c:90:65:f4:52:40:b6:8b:0c:2b:e4:
                    ba:09:eb:f0:9a:66:e1:dc:1f:9c:cf:84:c4:e9:de:
                    a5:85:39:87:6c:57:b2:14:c2:27:aa:f6:3b:e0:27:
                    8a:0c:cd:ee:d6:44:08:b4:b1:1e:9b:6c:11:0f:1d:
                    18:e6:29:cd:9f:39:f1:bf:34:97:32:5b:54:c9:83:
                    5a:58:75:1e:b6:8f:8c:0e:8e:73:88:3e:a4:5c:fa:
                    14:f6:8d:e5:85:5f:64:c3:cd:f0:59:7d:2d:e7:a6:
                    64:3c:cb:74:d8:22:d5:14:68:62:c8:15:37:b6:41:
                    cf:1e:3c:75:c3:d3:04:10:c2:80:1c:d5:fb:dc:e4:
                    8c:7b:b2:94:78:a4:2d:ba:86:a5:99:ef:62:ef:25:
                    12:ad:56:e9:5e:0b:3d:4d:6a:d3:94:32:65:ed:c6:
                    35:64:cc:b4:ab:9b:d3:38:6b:1c:c2:de:c6:ba:5e:
                    56:13:08:ce:a9:00:f6:68:c3:98:79:62:75:f7:ac:
                    57:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:88:D6:2C:12:0F:68:80:2E:1B:4C:3B:8D:90:62:C2:D6:9D:29:48
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3136392e3131322e302f32302d3230203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.169.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:39:64:ef:37:1e:cc:c4:4c:21:7e:bc:8e:3c:34:b5:ba:2f:
         4e:b4:12:6a:d6:ee:a1:f3:2d:cb:d0:e5:9f:cb:47:f6:3d:c8:
         1b:2e:66:41:60:c2:3c:e7:4c:de:d0:8e:5a:1a:59:27:10:fd:
         1d:9d:95:63:55:8b:f1:e3:1d:20:09:44:93:c3:73:da:7f:55:
         16:81:32:b6:f2:93:73:32:bb:86:50:e1:b4:90:79:d9:a1:8e:
         e2:83:86:81:ec:74:76:38:e3:8d:77:d8:76:e9:1c:2f:d3:37:
         11:51:f7:21:2b:ac:1e:e3:b3:5b:7f:09:9c:27:c0:38:e2:c1:
         9f:59:07:fc:b2:26:62:dc:82:87:11:38:dc:09:d6:e8:36:03:
         c3:96:12:ce:3e:f1:19:bf:1e:b5:b9:6a:99:b9:5a:59:f8:33:
         af:db:a7:99:30:6b:4c:f1:a0:a7:af:bd:20:5c:66:bd:e8:56:
         c4:8b:83:30:77:81:2d:df:30:51:76:e3:ce:4f:7d:a0:c8:15:
         cf:60:8f:e2:21:65:30:9e:de:4b:15:ac:5e:01:cc:08:97:7d:
         af:b8:c1:ad:16:42:cd:25:51:6c:29:75:62:b3:1a:b3:09:a7:
         67:f6:9f:0e:64:b8:a6:8e:4d:74:ff:f8:3b:3e:55:7e:ae:1c:
         f2:bd:ed:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 20:13:36 2024 by rpki-client on console-fra.rpki-client.org