Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32332d3233203d3e203532363331.roa
File:                     3230302e3232392e3234342e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          +wL1aRF0VREonyp31/SSRVhGWbkOy8kIYc+8kXnn1Fw=
Subject key identifier:   EB:45:E7:A4:77:8B:91:82:AC:FF:D8:5C:9C:8B:4D:67:A1:AF:BD:F1
Certificate issuer:       /CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
Certificate serial:       7557CCB77C08B9BD56EEC4B571C7310A8D8809AC
Authority key identifier: BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32332d3233203d3e203532363331.roa
Signing time:             Tue 15 Oct 2024 12:41:46 +0000
ROA not before:           Tue 15 Oct 2024 12:36:46 +0000
ROA not after:            Tue 14 Oct 2025 12:41:46 +0000
asID:                     52631
IP address blocks:        200.229.244.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 12:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:57:cc:b7:7c:08:b9:bd:56:ee:c4:b5:71:c7:31:0a:8d:88:09:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
        Validity
            Not Before: Oct 15 12:36:46 2024 GMT
            Not After : Oct 14 12:41:46 2025 GMT
        Subject: CN=EB45E7A4778B9182ACFFD85C9C8B4D67A1AFBDF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:bd:fd:20:2b:d9:e0:f4:9d:fe:6c:c6:44:
                    ec:a1:56:07:6b:82:74:17:0a:ad:d9:eb:70:c8:93:
                    65:0e:c3:3f:e4:90:3a:b8:46:f1:d2:00:d7:01:28:
                    e9:a5:97:c6:51:80:5b:5e:e8:c2:08:75:0c:c9:6a:
                    cb:75:95:b9:21:37:56:e6:03:ef:94:e7:f7:14:1e:
                    1a:99:d6:43:12:91:93:a0:0a:51:b4:28:25:76:a0:
                    14:78:b0:3e:5d:da:b7:8e:40:d5:d9:21:7c:42:54:
                    9e:a4:c4:43:71:c8:53:e4:a9:9c:dc:4c:0e:b9:72:
                    6a:b1:9c:ea:a4:05:18:6b:a8:d2:55:c9:3d:94:10:
                    8c:96:41:2d:2f:d6:50:b0:6a:3d:47:99:21:98:18:
                    78:df:67:89:12:ce:95:8f:73:db:74:7f:66:de:ea:
                    13:96:60:4e:7a:4a:38:d9:11:ca:06:10:52:d5:11:
                    78:e6:55:8f:c2:41:36:16:90:0e:89:2c:8c:f2:36:
                    e1:b1:53:6d:cd:6d:b0:60:43:8f:80:40:e5:32:fd:
                    a9:80:ac:49:57:23:29:73:e8:a0:4f:2d:78:ac:0c:
                    09:1f:25:75:88:05:45:c7:01:27:53:4e:f7:99:50:
                    20:1d:dc:9e:77:f1:f7:af:06:83:aa:ca:b3:08:d7:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:45:E7:A4:77:8B:91:82:AC:FF:D8:5C:9C:8B:4D:67:A1:AF:BD:F1
            X509v3 Authority Key Identifier:
                keyid:BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:af:74:e5:1e:80:a8:94:4f:35:2d:c7:ef:7b:fd:b6:08:7e:
         c5:2f:f7:93:b3:60:09:11:75:09:5b:89:09:f1:5b:4a:7d:51:
         21:92:c2:84:a1:49:42:d5:de:d6:94:5d:0f:f0:80:a7:e9:4c:
         b1:dd:48:41:19:50:1c:21:5c:ba:77:9d:fc:14:89:dc:9c:d9:
         7d:00:45:b7:5e:fb:ef:b4:8d:bd:7c:93:1e:49:2c:d3:a7:0b:
         de:5a:f1:c7:14:d1:25:ca:be:09:bc:93:1a:5d:c4:c5:bf:68:
         82:34:21:65:dc:a9:f9:d8:22:44:34:19:4f:eb:2c:69:31:0e:
         08:59:d7:bf:27:e5:c1:6c:99:9d:2c:d7:ff:b4:24:88:02:48:
         e0:12:e3:8f:54:e1:15:c7:9b:de:55:e0:4b:89:91:e6:99:0e:
         ba:2d:52:9f:b6:78:46:2f:26:90:55:62:dd:f0:20:db:5d:e9:
         70:2a:9c:8a:75:e2:38:44:18:b6:56:08:f3:e6:fd:ee:e8:fa:
         4d:70:6f:51:70:5c:99:18:e3:30:1d:8f:e4:a5:00:3b:ec:f1:
         72:dd:b8:45:66:56:de:2e:3a:64:d0:8f:af:d3:5d:1a:4e:03:
         28:62:85:24:f2:62:d4:95:ab:dc:2f:6a:21:e0:79:62:f4:5e:
         82:64:5f:3f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdVfMt3wIub1W7sS1cccxCo2ICawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU2M0JEMzA3NDA3MUFFQzBBNDQ1NzhDNjdCMkQxNzND
NUNEMUZGMTAeFw0yNDEwMTUxMjM2NDZaFw0yNTEwMTQxMjQxNDZaMDMxMTAvBgNV
BAMTKEVCNDVFN0E0Nzc4QjkxODJBQ0ZGRDg1QzlDOEI0RDY3QTFBRkJERjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL3r39ICvZ4PSd/mzGROyhVgdr
gnQXCq3Z63DIk2UOwz/kkDq4RvHSANcBKOmll8ZRgFte6MIIdQzJast1lbkhN1bm
A++U5/cUHhqZ1kMSkZOgClG0KCV2oBR4sD5d2reOQNXZIXxCVJ6kxENxyFPkqZzc
TA65cmqxnOqkBRhrqNJVyT2UEIyWQS0v1lCwaj1HmSGYGHjfZ4kSzpWPc9t0f2be
6hOWYE56SjjZEcoGEFLVEXjmVY/CQTYWkA6JLIzyNuGxU23NbbBgQ4+AQOUy/amA
rElXIylz6KBPLXisDAkfJXWIBUXHASdTTveZUCAd3J538fevBoOqyrMI1/g1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU60XnpHeLkYKs/9hcnItNZ6GvvfEwHwYDVR0j
BBgwFoAUvmO9MHQHGuwKRFeMZ7LRc8XNH/EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC9CRTYzQkQzMDc0MDcxQUVDMEE0NDU3OEM2N0IyRDE3M0M1Q0QxRkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFNjNCRDMwNzQwNzFBRUMw
QTQ0NTc4QzY3QjJEMTczQzVDRDFGRjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzQzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNjMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHI5fQwDQYJKoZIhvcNAQELBQADggEBAJavdOUe
gKiUTzUtx+97/bYIfsUv95OzYAkRdQlbiQnxW0p9USGSwoShSULV3taUXQ/wgKfp
TLHdSEEZUBwhXLp3nfwUidyc2X0ARbde+++0jb18kx5JLNOnC95a8ccU0SXKvgm8
kxpdxMW/aII0IWXcqfnYIkQ0GU/rLGkxDghZ178n5cFsmZ0s1/+0JIgCSOAS449U
4RXHm95V4EuJkeaZDrotUp+2eEYvJpBVYt3wINtd6XAqnIp14jhEGLZWCPPm/e7o
+k1wb1FwXJkY4zAdj+SlADvs8XLduEVmVt4uOmTQj6/TXRpOAyhihSTyYtSVq9wv
aiHgeWL0XoJkXz8=
-----END CERTIFICATE-----
Generated at Mon Oct 28 14:25:16 2024 by rpki-client on console-fra.rpki-client.org