Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3136382e3139362e37322e302f32322d3232203d3e203631393432.roa
File:                     3136382e3139362e37322e302f32322d3232203d3e203631393432.roa (raw, json)
Hash identifier:          xzgwkRz8Q2HsOoFsLuOnOhTD2Mug1R2T8bYPkXifYus=
Subject key identifier:   3B:37:7E:03:D8:74:F4:89:29:D5:E6:0A:11:3F:E6:B4:FA:61:3D:FD
Certificate issuer:       /CN=F11C1CC2AC17600695F88B435DCA3A62798480D8
Certificate serial:       21882EAB70DF0BE8F423DCD58B7706178BB7EE8E
Authority key identifier: F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3136382e3139362e37322e302f32322d3232203d3e203631393432.roa
Signing time:             Fri 14 Apr 2023 16:39:27 +0000
ROA not before:           Fri 14 Apr 2023 16:34:27 +0000
ROA not after:            Fri 12 Apr 2024 16:39:27 +0000
asID:                     61942
IP address blocks:        168.196.72.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:88:2e:ab:70:df:0b:e8:f4:23:dc:d5:8b:77:06:17:8b:b7:ee:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F11C1CC2AC17600695F88B435DCA3A62798480D8
        Validity
            Not Before: Apr 14 16:34:27 2023 GMT
            Not After : Apr 12 16:39:27 2024 GMT
        Subject: CN=3B377E03D874F48929D5E60A113FE6B4FA613DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:ac:58:78:76:23:bd:43:aa:38:cb:31:bc:
                    b4:5a:8f:03:01:ee:b5:80:fc:e6:94:ac:25:93:69:
                    51:08:1e:e0:bf:d7:5c:11:ea:c3:e3:bf:99:50:41:
                    39:e2:38:a5:d4:ae:31:50:ee:83:4b:fd:d9:91:57:
                    cc:79:7a:c3:fc:1a:3e:c9:29:66:c8:3e:53:b1:2a:
                    c4:e3:e9:0a:bd:21:e8:6f:3f:df:ef:49:57:b8:07:
                    f2:50:5d:3b:72:18:04:58:7f:b6:86:72:55:68:20:
                    29:79:62:18:36:d4:07:da:f4:47:8b:19:cc:a5:91:
                    4b:03:1e:10:09:77:6b:56:05:aa:f8:d5:07:a6:f2:
                    7c:c6:a4:a8:b0:5e:f4:98:ec:59:dc:b8:b4:b6:a6:
                    eb:9d:36:72:89:10:76:37:61:50:f4:6a:49:3d:bc:
                    ad:2b:80:8f:99:c5:9b:fd:7d:c4:d4:19:2d:6a:59:
                    bd:a3:01:4f:eb:40:72:a8:d9:1b:f7:f4:d3:ae:46:
                    04:72:83:d2:e0:42:2e:03:8d:f5:21:8b:82:60:21:
                    24:f3:9c:5e:2b:1e:de:05:b0:0f:de:02:6d:42:d0:
                    63:3b:ac:80:d9:07:27:71:16:1a:7e:3b:eb:03:55:
                    15:c1:18:de:18:6a:97:bd:fe:59:b5:1c:5d:a1:b0:
                    a3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:37:7E:03:D8:74:F4:89:29:D5:E6:0A:11:3F:E6:B4:FA:61:3D:FD
            X509v3 Authority Key Identifier:
                keyid:F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3136382e3139362e37322e302f32322d3232203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:cd:c3:55:0c:22:dc:7a:fe:50:98:d1:af:6f:3f:05:2b:4e:
         ea:77:93:d1:90:9d:77:4c:b8:f5:67:90:0f:db:e7:43:5b:1d:
         f8:0c:00:9c:74:b4:1d:99:e9:e8:91:46:46:0c:60:23:f7:8a:
         7e:db:8e:a3:c5:0f:84:12:b3:3a:b9:fb:c0:cc:8e:bf:6a:65:
         a4:0a:90:02:97:26:f3:bf:7c:5e:fd:ee:c6:27:52:c8:87:58:
         bb:4f:c3:93:1d:64:df:bb:3c:d8:22:75:a8:7d:cc:2f:eb:08:
         aa:8b:7c:26:76:b4:f0:a8:8f:d1:85:3e:b3:63:91:b0:bd:3f:
         dd:8e:95:6c:32:6f:4f:82:0e:57:5a:a4:b5:b0:d9:51:44:96:
         fe:80:f2:57:39:e9:6b:21:74:5f:6e:75:22:09:a9:69:a8:d2:
         b8:71:cd:cd:c8:1d:83:55:cb:a7:54:9f:7d:04:aa:65:2d:d5:
         41:a7:e2:21:e1:06:60:47:01:d6:56:6d:93:32:31:72:db:77:
         6c:4c:19:ea:4d:fb:cc:ff:ba:78:b7:00:75:b0:e4:1d:b7:72:
         37:e8:c4:70:73:50:97:5e:82:e1:88:56:ff:b2:bf:54:67:f4:
         63:61:cc:6a:d2:19:00:26:87:8d:28:46:3c:78:3f:f9:b4:9a:
         9c:f6:ec:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:55 2023 by rpki-client on console-fra.rpki-client.org