Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32332d3233203d3e203532363331.roa
File:                     3230302e3232392e3234362e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          jzH2GR04dGYSrh5RWc4NhpJiTwX7upZfweugbbWwNjo=
Subject key identifier:   EC:08:C9:50:19:81:B5:4D:3D:63:A6:10:51:9C:E5:BE:24:19:10:68
Certificate issuer:       /CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
Certificate serial:       46992336F40DEBA01880DD76A55258BE2FCA46B9
Authority key identifier: BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32332d3233203d3e203532363331.roa
Signing time:             Tue 15 Oct 2024 12:41:45 +0000
ROA not before:           Tue 15 Oct 2024 12:36:45 +0000
ROA not after:            Tue 14 Oct 2025 12:41:45 +0000
asID:                     52631
IP address blocks:        200.229.246.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 12:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:99:23:36:f4:0d:eb:a0:18:80:dd:76:a5:52:58:be:2f:ca:46:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
        Validity
            Not Before: Oct 15 12:36:45 2024 GMT
            Not After : Oct 14 12:41:45 2025 GMT
        Subject: CN=EC08C9501981B54D3D63A610519CE5BE24191068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:0a:a1:c6:af:43:5e:c3:c5:8c:a0:1a:03:
                    c8:ea:22:79:2a:e8:4d:5f:86:a9:15:06:67:60:32:
                    69:71:6a:1a:4d:d8:04:cc:92:70:1c:f7:8c:70:e9:
                    58:be:f9:90:53:07:cb:37:bc:23:8b:e2:16:08:00:
                    bf:00:c7:c9:59:43:f8:ac:7f:e5:1e:9f:70:4f:1b:
                    a3:8b:1a:7d:de:20:31:9b:93:fd:d0:9c:60:6e:9a:
                    6a:9b:95:e7:a9:10:09:20:f0:0f:d4:59:39:c0:f9:
                    2c:6f:41:82:4c:e3:da:ca:28:9b:cf:06:cf:77:dc:
                    21:8a:f8:a6:e1:b4:a8:cf:c2:a9:c1:03:f3:ba:11:
                    59:91:54:14:8c:bd:29:a4:29:7a:9a:a4:84:c0:97:
                    e5:50:92:7b:8a:b6:ef:f1:d2:87:dc:e8:a1:2f:d1:
                    7e:96:dd:c3:9a:4f:e4:b8:52:1d:47:52:c7:21:a3:
                    57:e9:df:a3:36:d6:6a:64:95:14:5a:6f:e8:ad:cc:
                    71:be:ea:7a:88:91:e1:3d:a0:ef:15:6a:d7:f1:0a:
                    eb:d0:7e:01:bf:ff:e7:bf:71:f6:29:df:81:7f:35:
                    9b:e7:a0:ff:ff:d6:73:e1:39:e5:d3:aa:a8:e5:4d:
                    c6:47:29:cd:a5:ff:19:00:8d:7c:e2:65:fe:2b:01:
                    9e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:08:C9:50:19:81:B5:4D:3D:63:A6:10:51:9C:E5:BE:24:19:10:68
            X509v3 Authority Key Identifier:
                keyid:BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:79:88:b6:7e:6a:01:d3:8a:be:bd:01:f2:9f:52:e9:81:8b:
         0d:a6:10:85:f3:87:2a:00:d0:16:7f:b2:fd:4f:a2:09:e9:34:
         30:01:13:d0:75:66:6b:ee:94:92:b8:c4:4e:88:a6:2c:8f:88:
         be:a1:cb:c7:b5:6b:09:55:84:1a:fd:6a:27:56:36:1a:e1:40:
         07:15:e1:e6:a6:a2:80:fa:94:e3:14:77:f8:b6:c8:c4:97:5c:
         b7:31:1c:12:f8:98:1e:8f:a9:9d:1c:57:95:97:83:93:90:ef:
         9a:36:55:c0:b3:28:ff:6b:7f:d3:fd:0a:cf:ce:8c:ec:85:bb:
         c0:b3:b8:bc:0b:42:81:59:fb:7b:b2:1f:f5:69:02:3f:cf:24:
         5e:fd:67:7c:7a:75:16:c1:46:54:e1:0c:a1:3f:3e:f1:40:96:
         1f:1e:69:38:9f:bd:22:ce:c3:68:73:7f:ef:2b:04:8b:54:73:
         a3:85:39:91:f5:06:b4:15:d9:c4:98:00:ff:3c:88:c2:5f:a4:
         5c:79:16:0b:9d:23:d0:23:51:aa:c3:0d:9e:e7:18:c8:3e:e6:
         7f:cf:4c:6d:06:9b:a6:14:64:60:90:08:6a:aa:f3:c7:a2:03:
         06:97:d6:4a:c6:c0:eb:26:71:3f:2a:46:39:6d:65:f0:bf:ec:
         62:7c:99:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 14:24:42 2024 by rpki-client on console-ams.rpki-client.org