Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36342e302f32322d3232203d3e20323632333136.roa
File:                     3137372e37342e36342e302f32322d3232203d3e20323632333136.roa (raw, json)
Hash identifier:          M3P6hk1mWqcM0ql+LamY8jCoyv84UUD9ER0CI6jozyg=
Subject key identifier:   47:36:96:78:6B:15:74:21:FA:2F:19:A3:92:40:26:CD:19:05:7B:70
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       75F565540C6CA792E1142CE59211D372C0A39E7F
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36342e302f32322d3232203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:39 +0000
ROA not before:           Mon 21 Aug 2023 13:21:39 +0000
ROA not after:            Mon 19 Aug 2024 13:26:39 +0000
asID:                     262316
IP address blocks:        177.74.64.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f5:65:54:0c:6c:a7:92:e1:14:2c:e5:92:11:d3:72:c0:a3:9e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:39 2023 GMT
            Not After : Aug 19 13:26:39 2024 GMT
        Subject: CN=473696786B157421FA2F19A3924026CD19057B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:4f:d2:8e:2a:1c:88:04:f1:46:d2:b9:5c:
                    c2:42:a1:b7:b6:f3:47:5f:1e:92:e0:0d:6a:d7:5c:
                    54:44:4a:6c:ad:1d:f4:1b:5c:2c:ac:71:e4:61:4e:
                    ed:32:3d:c8:94:31:52:ff:af:02:86:2d:0e:59:a3:
                    5b:fc:20:0e:7d:3a:87:57:09:4d:fc:79:81:ea:89:
                    d3:e4:df:c3:6c:a3:2f:73:83:8d:55:cc:f0:7c:87:
                    8c:49:62:30:49:09:59:e4:f6:10:38:fa:fb:9b:74:
                    df:04:5c:70:ba:d7:ab:08:65:af:fc:29:c8:62:ea:
                    26:c9:59:b8:ec:0e:47:08:b7:78:88:48:37:a8:b8:
                    d7:72:47:59:3e:0a:97:f2:d5:43:ca:53:3c:0a:c7:
                    3b:cb:e6:08:86:12:37:9e:cf:f0:6b:98:c1:01:e9:
                    ef:20:37:97:3f:a1:2a:62:b1:3c:a3:ec:86:f3:2d:
                    02:d6:3c:10:92:8b:2f:4e:c9:52:c5:2a:ea:6a:da:
                    72:c5:68:1c:82:12:41:46:a2:a1:d7:8d:d9:42:f6:
                    3a:5f:0d:7c:9b:ea:88:3c:8e:31:e1:1a:bb:4c:67:
                    5b:0e:68:dd:9b:4a:02:50:6d:c8:f5:28:3c:cd:0b:
                    9b:12:bd:6b:57:e2:c4:cf:72:6f:24:63:5c:d5:ff:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:36:96:78:6B:15:74:21:FA:2F:19:A3:92:40:26:CD:19:05:7B:70
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36342e302f32322d3232203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:e0:b1:c8:c8:fd:e8:3b:7a:56:be:ce:bf:2b:b7:16:40:4e:
         6f:35:e0:6b:4f:56:22:05:c9:98:da:26:64:ca:bd:fc:d9:ea:
         34:02:db:2c:f6:73:99:84:44:e3:6f:88:ad:88:93:b2:67:c1:
         33:a1:c0:03:3c:3b:0c:2c:5c:82:da:ac:e6:3d:db:6a:ae:1b:
         1a:91:c1:6d:56:b8:ca:dd:94:fb:77:2c:bc:14:54:c6:c7:23:
         33:91:52:9a:64:f3:63:b8:e9:eb:e7:aa:fd:ef:bc:28:57:0d:
         4e:73:12:af:3e:28:e5:c8:d9:3a:c0:9c:64:ab:f7:02:e0:7c:
         91:48:1c:4b:f8:0c:39:9d:26:4c:1e:df:a4:66:e5:98:76:dd:
         53:30:fd:be:c2:e8:6f:d2:29:01:26:34:47:2c:58:94:0e:ea:
         6b:e7:a6:bf:52:95:ec:1c:8e:4f:17:97:56:ca:25:a1:c6:a6:
         b7:3a:63:6b:66:2b:5f:b6:c5:b8:7f:b1:dc:b7:22:22:8b:43:
         a6:3e:f3:6d:0d:5b:4a:bd:bc:4d:ce:fe:b2:49:ba:6d:30:ed:
         c9:60:bc:3c:3b:c6:68:1c:58:ee:a6:ae:98:03:85:44:5f:43:
         50:27:9e:18:b6:87:71:be:a5:08:71:6f:2b:0c:aa:c2:4c:7d:
         dd:af:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 15:09:07 2023 by rpki-client on console-ams.rpki-client.org