Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e37362e302f32342d3234203d3e20323632333136.roa
File:                     3137372e37342e37362e302f32342d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          3Z1hwuZtCo2Q+qgqimmiRSKNXOfEYQ0sFWVU0K18pzE=
Subject key identifier:   E6:7E:70:B1:22:BC:13:36:96:21:F3:89:5C:2A:42:B9:63:0F:2D:41
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       2EFFDB97000A478D91497DFD4317039E70E2A8C3
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e37362e302f32342d3234203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:39 +0000
ROA not before:           Mon 21 Aug 2023 13:21:39 +0000
ROA not after:            Mon 19 Aug 2024 13:26:39 +0000
asID:                     262316
IP address blocks:        177.74.76.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ff:db:97:00:0a:47:8d:91:49:7d:fd:43:17:03:9e:70:e2:a8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:39 2023 GMT
            Not After : Aug 19 13:26:39 2024 GMT
        Subject: CN=E67E70B122BC13369621F3895C2A42B9630F2D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:fa:3b:a9:fa:2d:34:dc:3d:d2:74:15:03:
                    2e:43:99:88:95:4d:50:39:9a:61:64:1d:f7:0a:01:
                    d4:08:26:8a:51:63:68:a5:d3:6a:9a:c1:19:d2:2d:
                    b4:99:fa:a2:2b:51:55:e7:6f:bb:f6:80:14:d6:45:
                    aa:3f:0e:a8:d8:7a:08:e8:53:a7:ff:79:1a:d8:2a:
                    ba:29:27:e4:78:e4:fb:28:a3:5f:d7:2f:2e:99:cc:
                    c9:8f:21:96:7d:41:2e:41:0f:5c:72:57:e5:5d:f0:
                    3a:58:5c:0a:34:e4:7e:7d:77:97:0a:10:5d:ae:d1:
                    65:69:e3:c4:54:c1:bb:dc:b6:62:6b:40:00:a4:05:
                    83:52:4e:3b:9d:8d:ae:c5:67:75:9d:90:81:f7:8a:
                    c5:37:52:5e:d4:4f:38:97:2a:8a:bd:a4:2b:8f:4c:
                    fa:40:95:dd:ca:60:b5:56:73:ec:7c:6b:a5:8d:45:
                    d3:f4:0d:27:df:10:c4:29:20:25:e5:fc:29:b8:e4:
                    7d:db:0b:0a:06:85:e0:99:bd:ef:eb:c6:e0:d0:7d:
                    9c:17:ec:c3:3d:e9:61:45:75:5d:26:de:77:6f:32:
                    b3:ac:32:07:94:c2:f6:b6:ef:51:83:45:6e:53:97:
                    91:16:5e:1d:0e:97:72:1c:6d:6c:6c:a6:88:7c:36:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7E:70:B1:22:BC:13:36:96:21:F3:89:5C:2A:42:B9:63:0F:2D:41
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e37362e302f32342d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:80:d8:31:23:bd:90:d8:00:fb:b0:14:3a:30:1f:b2:51:68:
         64:ae:ab:98:cf:de:86:85:ec:2f:98:00:c7:c3:fc:16:1a:78:
         9e:97:d7:eb:37:e6:c9:1d:2a:df:69:93:7c:4c:86:f6:a8:a0:
         b9:c4:34:5e:0f:63:be:35:1f:48:cc:aa:47:60:cb:1a:cf:10:
         c8:dc:49:ad:ca:46:77:5c:33:27:5f:7a:0e:ea:7e:10:8c:5c:
         84:a2:49:64:fd:23:ce:6e:b0:5a:2e:c6:97:b5:ec:bf:23:05:
         6d:56:3b:f6:94:ff:3f:f0:41:a0:a4:f7:22:23:97:f6:5b:63:
         2b:fc:e1:32:6e:23:9d:f9:b0:5f:7e:62:e2:a6:1c:b1:af:87:
         04:44:6d:61:30:25:56:e3:cd:49:30:40:b3:3f:3e:09:10:53:
         c5:f8:d5:f2:3a:16:db:c5:04:18:9b:28:71:5e:d7:6b:49:0c:
         dd:d7:52:9e:46:ca:de:1b:c4:34:fc:d2:90:29:62:6e:49:68:
         26:d0:c4:30:cf:6b:62:83:4a:48:20:b3:90:d2:e2:e2:25:f7:
         37:78:07:73:db:c4:b1:be:d9:7e:fb:0d:ba:5b:96:2a:7c:22:
         11:96:2e:8a:0c:c0:a1:70:d6:fd:b5:df:2d:91:0c:f4:07:67:
         1d:fd:cd:67
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULv/blwAKR42RSX39QxcDnnDiqMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2QTEzMkZCOEY5QzFCOThBOUNEQ0YxNTFFQTgyMzUw
QTFFMDgwODAeFw0yMzA4MjExMzIxMzlaFw0yNDA4MTkxMzI2MzlaMDMxMTAvBgNV
BAMTKEU2N0U3MEIxMjJCQzEzMzY5NjIxRjM4OTVDMkE0MkI5NjMwRjJENDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDORvo7qfotNNw90nQVAy5DmYiV
TVA5mmFkHfcKAdQIJopRY2il02qawRnSLbSZ+qIrUVXnb7v2gBTWRao/DqjYegjo
U6f/eRrYKropJ+R45Psoo1/XLy6ZzMmPIZZ9QS5BD1xyV+Vd8DpYXAo05H59d5cK
EF2u0WVp48RUwbvctmJrQACkBYNSTjudja7FZ3WdkIH3isU3Ul7UTziXKoq9pCuP
TPpAld3KYLVWc+x8a6WNRdP0DSffEMQpICXl/Cm45H3bCwoGheCZve/rxuDQfZwX
7MM96WFFdV0m3ndvMrOsMgeUwva271GDRW5Tl5EWXh0Ol3IcbWxspoh8NkK5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5n5wsSK8EzaWIfOJXCpCuWMPLUEwHwYDVR0j
BBgwFoAUzWoTL7j5wbmKnNzxUeqCNQoeCAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DRDZBMTMyRkI4RjlDMUI5OEE5Q0RDRjE1MUVBODIzNTBBMUUwODA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENkExMzJGQjhGOUMxQjk4
QTlDRENGMTUxRUE4MjM1MEExRTA4MDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAv
MzEzNzM3MmUzNzM0MmUzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzMzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUpMMA0GCSqGSIb3DQEBCwUAA4IBAQCLgNgxI72Q
2AD7sBQ6MB+yUWhkrquYz96GhewvmADHw/wWGniel9frN+bJHSrfaZN8TIb2qKC5
xDReD2O+NR9IzKpHYMsazxDI3EmtykZ3XDMnX3oO6n4QjFyEoklk/SPObrBaLsaX
tey/IwVtVjv2lP8/8EGgpPciI5f2W2Mr/OEybiOd+bBffmLiphyxr4cERG1hMCVW
481JMECzPz4JEFPF+NXyOhbbxQQYmyhxXtdrSQzd11KeRsreG8Q0/NKQKWJuSWgm
0MQwz2tig0pIILOQ0uLiJfc3eAdz28Sxvtl++w26W5YqfCIRli6KDMChcNb9td8t
kQz0B2cd/c1n
-----END CERTIFICATE-----
Generated at Thu Sep 14 15:08:40 2023 by rpki-client on console-fra.rpki-client.org