Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136342e3136332e3134382e302f32322d3233203d3e20323632383638.roa
File:                     3136342e3136332e3134382e302f32322d3233203d3e20323632383638.roa (raw, json)
Hash identifier:          w8NPq1arAaPXRXUJNszMsl/jMlD2KR1HeKEoYxJTIk4=
Subject key identifier:   D8:CD:E0:D7:1F:CB:37:DF:DB:CE:1F:06:5D:33:B7:13:CF:FC:DD:80
Certificate issuer:       /CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
Certificate serial:       7E1460158949B8F194FB894F1BF80777237801E6
Authority key identifier: 07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136342e3136332e3134382e302f32322d3233203d3e20323632383638.roa
Signing time:             Sat 22 Jul 2023 21:43:05 +0000
ROA not before:           Sat 22 Jul 2023 21:38:05 +0000
ROA not after:            Sat 20 Jul 2024 21:43:05 +0000
asID:                     262868
IP address blocks:        164.163.148.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:14:60:15:89:49:b8:f1:94:fb:89:4f:1b:f8:07:77:23:78:01:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Validity
            Not Before: Jul 22 21:38:05 2023 GMT
            Not After : Jul 20 21:43:05 2024 GMT
        Subject: CN=D8CDE0D71FCB37DFDBCE1F065D33B713CFFCDD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fa:77:82:9f:f3:e7:63:75:76:05:35:e5:a7:
                    54:d0:fb:72:2e:12:df:c3:8a:36:93:66:76:9d:27:
                    c9:8d:e0:8d:f4:21:cb:72:a6:f6:fe:61:b3:8e:04:
                    30:65:a6:45:c6:8a:4f:cc:e9:cd:bc:c9:3b:eb:24:
                    5e:26:db:bc:3e:81:24:6e:8b:38:ea:15:d0:15:7d:
                    d3:89:91:1b:8a:06:63:5a:6a:bc:8b:c7:e9:8c:61:
                    f3:73:f4:6f:61:41:13:07:99:90:dc:2e:7b:97:18:
                    5c:37:c9:0d:ef:d2:db:56:77:0b:d3:d4:3e:32:ce:
                    24:9a:40:cf:a2:78:9e:0a:74:35:5c:0a:92:2a:02:
                    34:5f:42:7f:ac:55:64:e5:e8:c5:98:3a:b9:dd:d6:
                    48:5b:33:b5:c0:30:47:c5:9d:de:58:2c:60:8c:a1:
                    14:e0:40:cb:31:c8:a4:d3:1a:90:8b:6b:5a:ec:bc:
                    49:48:69:97:a2:d6:e6:30:72:96:55:d6:50:a5:ed:
                    af:97:2d:e5:dc:97:6f:ad:a7:ab:b9:af:a8:c2:5d:
                    6c:de:55:56:e8:68:09:ec:5a:88:65:e3:63:06:0b:
                    70:2d:09:c8:f9:cc:fb:98:c7:5a:54:7e:f8:21:c9:
                    36:59:89:e2:6c:de:ea:fb:82:99:09:8a:cf:aa:5e:
                    28:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CD:E0:D7:1F:CB:37:DF:DB:CE:1F:06:5D:33:B7:13:CF:FC:DD:80
            X509v3 Authority Key Identifier:
                keyid:07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136342e3136332e3134382e302f32322d3233203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:42:59:07:49:5e:2a:c7:ca:14:ee:64:61:33:45:93:28:89:
         ba:06:97:a3:2c:c5:34:ad:dd:e1:22:a7:03:64:c8:d7:23:b8:
         29:30:67:c6:79:a8:3b:fe:d7:7d:41:fd:2e:8e:2d:2c:cd:4e:
         3f:b9:19:39:aa:42:fb:9b:19:39:46:77:d9:4c:c7:40:50:9d:
         e8:7d:e8:5e:1e:43:f8:92:c9:6e:36:7a:e1:07:0f:43:9d:79:
         bf:3b:4d:e9:e2:b7:02:98:2a:52:47:0a:ec:b4:5e:84:e0:d3:
         f6:e2:48:d1:16:0c:6d:d4:3c:25:79:be:f6:2b:0d:5b:01:e8:
         be:d7:8c:0f:d9:9a:bc:a8:33:20:0d:83:25:b4:9e:e4:00:45:
         a7:ad:cc:af:ae:92:10:b3:fd:0f:0a:a9:77:f5:3e:29:36:ac:
         c7:11:49:0c:91:b5:05:b8:4f:a0:3a:e5:ca:f0:fa:95:01:2c:
         f8:74:e7:e8:82:7f:5a:df:e9:ae:19:75:76:1b:95:5b:a6:11:
         96:3b:d6:f5:12:34:23:b8:1a:76:a8:eb:dc:fd:f6:fe:b3:f0:
         fd:9f:13:47:e0:c9:20:85:39:ef:ff:aa:69:dc:7e:ee:70:98:
         37:dd:ed:35:9d:dc:97:0c:cd:6a:2d:f0:de:2f:84:2a:b4:9d:
         0f:93:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 12:51:59 2023 by rpki-client on console-ams.rpki-client.org