Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32342d3234203d3e203532363331.roa
File:                     3230302e3232392e3234342e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          OUoa3xZwHmXQvgvIPkrePFniSjCFe8cwEyBL8UEOzfM=
Subject key identifier:   11:4B:AC:04:B4:7C:7E:C8:91:35:DB:56:F8:B1:A8:06:BA:CD:13:48
Certificate issuer:       /CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
Certificate serial:       575BBC06E4732C986443016EA8FCD72F39F92857
Authority key identifier: BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32342d3234203d3e203532363331.roa
Signing time:             Mon 14 Oct 2024 14:24:37 +0000
ROA not before:           Mon 14 Oct 2024 14:19:37 +0000
ROA not after:            Mon 13 Oct 2025 14:24:37 +0000
asID:                     52631
IP address blocks:        200.229.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 12:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5b:bc:06:e4:73:2c:98:64:43:01:6e:a8:fc:d7:2f:39:f9:28:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
        Validity
            Not Before: Oct 14 14:19:37 2024 GMT
            Not After : Oct 13 14:24:37 2025 GMT
        Subject: CN=114BAC04B47C7EC89135DB56F8B1A806BACD1348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:a9:f1:3d:f9:1b:ae:ec:bf:07:1f:83:ba:
                    6d:75:2c:de:0f:a2:c1:35:aa:95:ae:9b:73:70:52:
                    8f:b4:56:89:21:7c:fd:b1:aa:e8:42:17:eb:41:36:
                    89:52:f9:f9:80:4f:05:37:fd:52:f5:78:b3:e3:6b:
                    26:0d:bd:09:40:db:de:50:1c:c9:1c:3c:51:66:48:
                    ee:61:df:d0:6b:c4:b0:2d:6d:19:ab:3a:b7:42:27:
                    86:1c:46:b7:d1:d4:5d:b2:2d:60:b4:4a:0f:df:0a:
                    af:06:7c:9d:6b:4b:2a:a1:82:86:f2:70:1a:ee:eb:
                    15:71:a7:9b:17:43:5d:49:6e:42:a9:b4:cf:8d:78:
                    4b:5d:7d:8d:bb:e6:b3:e2:09:2d:d8:06:02:e1:79:
                    13:43:40:3b:90:14:cd:7a:ed:c3:51:b1:5f:4e:0d:
                    e9:ca:6c:54:ff:af:f2:5d:0f:ee:94:38:72:09:c7:
                    99:b7:38:14:9d:69:ab:17:a7:0a:9b:00:b9:73:ba:
                    8d:8d:f1:a7:f0:0b:89:86:5e:72:9d:a6:48:c3:c0:
                    cb:06:8d:b5:c3:2a:38:d2:96:f0:86:07:42:ee:b5:
                    f7:50:80:78:8b:97:5e:2d:da:d4:f1:d7:fc:87:76:
                    db:3a:1c:19:bb:e1:d5:b0:c1:17:d9:f2:72:ce:3c:
                    8d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4B:AC:04:B4:7C:7E:C8:91:35:DB:56:F8:B1:A8:06:BA:CD:13:48
            X509v3 Authority Key Identifier:
                keyid:BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:b2:3a:80:b7:22:c1:4d:c9:3e:67:b6:cb:8c:fe:77:f8:cc:
         eb:9e:41:ea:e6:b4:19:6c:be:7d:ae:95:ef:03:b0:c9:61:79:
         6e:03:0d:7d:c5:dd:d5:ae:b6:e4:57:96:83:68:6a:bb:57:09:
         10:cc:db:3c:4a:8f:5a:ed:3e:bc:fb:ec:89:d6:c2:ab:27:48:
         10:5e:d1:77:76:a3:60:89:10:fb:60:1b:d8:60:97:ea:e7:83:
         d8:95:1e:a7:21:03:5d:01:2e:af:d9:87:9c:b0:30:32:73:52:
         d0:66:07:c0:0f:26:fb:c4:b7:67:0c:a4:0b:42:ab:88:67:c4:
         91:b0:36:9a:ff:4d:15:e7:65:bc:73:6e:12:3f:40:da:2c:17:
         49:3d:41:ed:4d:37:db:cf:58:48:9e:d6:b9:90:93:d6:e4:15:
         a3:a5:9f:23:ff:d8:0d:5e:e7:26:07:33:fc:c8:9d:15:cb:2f:
         05:6e:a6:ff:7b:2b:20:6a:15:81:57:82:2d:e2:7c:91:79:39:
         13:f0:0f:7b:27:ee:1b:22:31:ec:43:0d:32:bc:e7:87:54:f7:
         d5:af:8f:e8:c7:19:c7:92:e2:18:35:62:6c:7e:56:df:6a:62:
         d2:cd:c5:15:4b:d9:db:85:ee:b5:dc:a9:c2:b1:1a:1e:e8:ba:
         e8:a0:65:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 14:24:42 2024 by rpki-client on console-ams.rpki-client.org