Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e32332e3136302e302f31392d3139203d3e203232303835.roa
File:                     3230312e32332e3136302e302f31392d3139203d3e203232303835.roa (raw, json)
Hash identifier:          F7RtjEggduH2ygR4MzEUUodEZ3hhq0gYw2IyaO7xw/U=
Subject key identifier:   DE:B2:8B:2B:61:69:BC:72:BA:66:C0:A0:03:5F:D0:DD:FF:40:25:C9
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       3530B72607B621611ADC372D8142B41F2C5AC530
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e32332e3136302e302f31392d3139203d3e203232303835.roa
Signing time:             Wed 03 Apr 2024 18:31:54 +0000
ROA not before:           Wed 03 Apr 2024 18:26:54 +0000
ROA not after:            Wed 02 Apr 2025 18:31:54 +0000
asID:                     22085
IP address blocks:        201.23.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:30:b7:26:07:b6:21:61:1a:dc:37:2d:81:42:b4:1f:2c:5a:c5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Apr  3 18:26:54 2024 GMT
            Not After : Apr  2 18:31:54 2025 GMT
        Subject: CN=3082010A0282010100CCF3F836DB639ECCF406B00B6FDB548AC25B68944E06A69BC04499828C62E4D16087D53436B10A86D1E67A5C163030410C2A5E6A36A5C01D400715E8525EEDF6E67B1FF4ECB4A1E9DC74DBC2075CBC6DDC665E831DC0D9F5849CD7B51F29FBA073FEBF917A815E03583479D4E1C0C89B170E9FE2B5799BD499C2BE57EEAB94401DF82B6F7B81B2718D4231320838722426247FED8AC4D5AE8E5366A8AC14781809578D1D0549EAA6C9B4FA501DF48F5F8B5476BDD2AFFA89B7B5A8A028C10BAE73B87F0BDCCE7212864C5ED0A21B60EF085EF7651AFBC7D06BE2A707C3CC209E8229E838E62EB73E76838398B543240AC82FC6FAF87C81C87B7B01369494B00F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:f8:36:db:63:9e:cc:f4:06:b0:0b:6f:db:
                    54:8a:c2:5b:68:94:4e:06:a6:9b:c0:44:99:82:8c:
                    62:e4:d1:60:87:d5:34:36:b1:0a:86:d1:e6:7a:5c:
                    16:30:30:41:0c:2a:5e:6a:36:a5:c0:1d:40:07:15:
                    e8:52:5e:ed:f6:e6:7b:1f:f4:ec:b4:a1:e9:dc:74:
                    db:c2:07:5c:bc:6d:dc:66:5e:83:1d:c0:d9:f5:84:
                    9c:d7:b5:1f:29:fb:a0:73:fe:bf:91:7a:81:5e:03:
                    58:34:79:d4:e1:c0:c8:9b:17:0e:9f:e2:b5:79:9b:
                    d4:99:c2:be:57:ee:ab:94:40:1d:f8:2b:6f:7b:81:
                    b2:71:8d:42:31:32:08:38:72:24:26:24:7f:ed:8a:
                    c4:d5:ae:8e:53:66:a8:ac:14:78:18:09:57:8d:1d:
                    05:49:ea:a6:c9:b4:fa:50:1d:f4:8f:5f:8b:54:76:
                    bd:d2:af:fa:89:b7:b5:a8:a0:28:c1:0b:ae:73:b8:
                    7f:0b:dc:ce:72:12:86:4c:5e:d0:a2:1b:60:ef:08:
                    5e:f7:65:1a:fb:c7:d0:6b:e2:a7:07:c3:cc:20:9e:
                    82:29:e8:38:e6:2e:b7:3e:76:83:83:98:b5:43:24:
                    0a:c8:2f:c6:fa:f8:7c:81:c8:7b:7b:01:36:94:94:
                    b0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B2:8B:2B:61:69:BC:72:BA:66:C0:A0:03:5F:D0:DD:FF:40:25:C9
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e32332e3136302e302f31392d3139203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         34:f4:20:60:cd:8a:b6:f8:14:a3:8f:c0:e0:e8:c8:06:b5:2e:
         bb:23:4c:9e:9e:46:3e:6f:ac:e9:73:b4:12:57:9a:93:95:44:
         3a:79:49:63:72:bd:2a:52:64:6d:6d:f8:d1:f0:3e:1d:20:9d:
         a6:f7:3c:b6:f8:28:06:0b:67:33:91:ed:4e:0e:16:9a:c6:6f:
         1c:49:08:16:66:4e:8c:0a:c5:40:60:fe:d8:30:58:3e:66:e5:
         5b:bd:26:f5:cf:3f:d5:1b:c8:d6:85:a3:05:43:56:e1:da:3f:
         bc:fc:f9:c2:91:28:54:79:2a:63:ba:ef:5c:a5:4a:38:fe:f8:
         67:2b:95:20:cf:fe:6d:d9:45:62:f3:ec:0c:21:ce:e3:8d:70:
         dc:a3:6f:a9:8b:e1:a8:61:04:6b:3f:1d:29:b2:df:99:fc:da:
         d3:38:19:51:ad:8c:66:2c:75:44:ff:d2:38:2a:4d:a7:2f:ab:
         81:12:49:46:d0:f4:4e:51:cc:ac:c1:d8:41:31:6c:14:67:3c:
         cd:f8:bf:23:14:5d:c9:1a:b7:72:88:8e:a4:0a:4b:d5:de:08:
         0d:e0:13:d8:45:19:79:97:9d:73:dd:1b:94:73:be:63:f2:54:
         ed:2c:98:e7:c5:24:13:c4:ab:f2:05:4f:4c:ef:a2:ca:4d:96:
         65:de:c7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 21:31:16 2024 by rpki-client on console-ams.rpki-client.org