Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3136382e3233322e36382e302f32322d3232203d3e20323632333534.roa
File:                     3136382e3233322e36382e302f32322d3232203d3e20323632333534.roa (raw, json)
Hash identifier:          wbiNEoFbbsTClrmIAjGZF+9p06Z6oNs6dC2Vn4T1vqo=
Subject key identifier:   73:7D:45:87:98:09:86:3B:AC:4E:20:ED:B2:B9:87:A2:EE:E2:D9:83
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       61939081730B926DD636036EC5A761654DA70B05
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3136382e3233322e36382e302f32322d3232203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:31 +0000
ROA not before:           Wed 06 Mar 2024 14:09:31 +0000
ROA not after:            Wed 05 Mar 2025 14:14:31 +0000
asID:                     262354
IP address blocks:        168.232.68.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 02 Apr 2024 23:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:93:90:81:73:0b:92:6d:d6:36:03:6e:c5:a7:61:65:4d:a7:0b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:31 2024 GMT
            Not After : Mar  5 14:14:31 2025 GMT
        Subject: CN=737D45879809863BAC4E20EDB2B987A2EEE2D983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:af:62:32:bd:67:a2:15:a8:de:ca:b6:c8:
                    bd:f6:ad:a3:f9:82:7f:6d:86:02:62:ec:49:b2:25:
                    27:a8:8c:63:fe:dd:07:fd:67:0e:6b:9e:62:f9:2d:
                    65:1a:5b:9f:2f:44:7e:7a:c8:19:ee:d1:89:0d:e9:
                    99:33:69:9b:a0:21:09:69:a6:9d:76:93:f9:3e:d3:
                    3a:15:73:16:ab:cf:88:17:a3:77:d4:1a:25:4b:b7:
                    3a:9f:53:dc:7b:b6:c3:24:c0:ec:26:2d:e6:7e:5e:
                    c7:f2:4f:87:a4:1f:36:74:b3:40:ef:47:9f:c1:83:
                    bf:81:ec:09:b6:60:e5:c3:fe:79:83:43:b4:2e:59:
                    e5:f3:1c:29:ee:af:91:db:2e:dd:f3:af:61:e2:55:
                    a5:aa:26:4e:f3:37:82:e9:c6:76:98:aa:c0:18:4a:
                    8e:d8:24:4d:bc:58:13:c1:73:b0:4b:d8:3d:ed:7c:
                    4b:df:12:64:d3:09:fd:fd:20:38:a6:b8:0f:69:e7:
                    5f:6f:00:a7:bc:a5:08:d8:30:d2:1d:7a:c8:4e:51:
                    d9:da:1a:d9:12:46:82:8d:4e:5e:4f:ec:24:c0:13:
                    1f:42:fe:6a:a5:5a:29:26:ff:a3:6e:c3:ab:6b:0e:
                    d4:c5:fc:48:45:cd:2c:f9:de:9f:43:b8:50:78:91:
                    66:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7D:45:87:98:09:86:3B:AC:4E:20:ED:B2:B9:87:A2:EE:E2:D9:83
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3136382e3233322e36382e302f32322d3232203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:a9:c5:49:36:db:9a:f4:a1:06:35:60:e5:bd:95:18:48:5b:
         1d:94:eb:6b:ff:97:24:c4:16:90:f1:e0:2e:51:61:44:d6:4d:
         4d:d7:c3:73:7f:72:83:86:92:4c:7c:ef:16:9f:36:d5:67:1a:
         7d:2a:b8:de:c7:00:c3:ee:6f:fa:fd:dc:8d:0e:e1:d7:e4:12:
         68:6e:d8:7e:70:5b:e3:c3:64:0b:8e:2e:0d:ec:46:21:ca:2c:
         ca:a8:48:cd:cf:17:e6:28:50:a1:3f:43:67:81:73:be:6f:bf:
         a7:12:98:f9:a9:dc:68:07:30:b5:c4:3b:85:0e:24:be:7e:c2:
         18:7b:a5:58:28:27:6e:db:ca:66:39:d2:1f:b3:83:13:b6:7c:
         d5:15:91:aa:21:a3:e9:ae:ad:8f:ea:67:52:dc:d9:9c:8f:e2:
         14:10:dc:17:eb:bb:6b:3a:1f:d3:61:e1:42:70:33:9a:78:d5:
         b0:bb:89:c9:b0:24:c5:05:48:36:f8:7c:27:df:48:d1:76:85:
         77:8f:d1:ab:93:51:e0:7b:cc:1b:e9:75:7f:51:69:29:b2:b8:
         b6:c1:a0:c1:b5:07:3e:00:bb:ac:a2:36:fe:35:95:90:f8:9f:
         97:8d:29:20:35:f2:f2:56:f0:a6:99:fc:9a:84:b6:36:fb:c6:
         62:8d:6e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 02:19:29 2024 by rpki-client on console-fra.rpki-client.org