Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e3130312e302f32342d3234203d3e20323633333437.roa
File:                     3137372e32332e3130312e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          hsI2FROnAt1Uag9IgvG9a5Oci303NXV78Y9o7ObF/l8=
Subject key identifier:   65:09:75:1F:67:08:E2:33:A7:70:E2:9B:83:0C:00:C6:9D:90:9C:08
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       3B5283FF28715370D16122F039BE5D672E526C13
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e3130312e302f32342d3234203d3e20323633333437.roa
Signing time:             Tue 20 Jun 2023 17:33:29 +0000
ROA not before:           Tue 20 Jun 2023 17:28:29 +0000
ROA not after:            Tue 18 Jun 2024 17:33:29 +0000
asID:                     263347
IP address blocks:        177.23.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:52:83:ff:28:71:53:70:d1:61:22:f0:39:be:5d:67:2e:52:6c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jun 20 17:28:29 2023 GMT
            Not After : Jun 18 17:33:29 2024 GMT
        Subject: CN=6509751F6708E233A770E29B830C00C69D909C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b7:45:80:ca:4e:67:b1:2b:54:20:15:a0:c1:
                    db:4d:dd:d6:35:43:fe:45:17:fd:e9:43:63:4f:b5:
                    f0:db:9f:2c:7b:73:63:48:10:2b:15:d7:8a:13:ba:
                    e1:10:a0:79:46:ca:84:bf:85:75:78:60:6d:1d:47:
                    96:9c:14:91:ed:f0:8c:0f:b9:01:af:b2:06:03:41:
                    8e:5a:98:dc:52:7e:4d:46:48:8e:a1:ac:f6:f8:e8:
                    16:25:e3:48:f3:be:e8:67:fa:3d:d8:cb:e3:4d:db:
                    06:4f:60:9b:65:5e:41:95:21:93:5d:c1:d5:c2:9d:
                    5b:c2:fd:e1:21:01:78:92:e8:ee:c5:19:81:f2:69:
                    a0:ad:4b:69:1e:17:76:f0:b1:a6:ec:6a:f5:50:65:
                    47:70:b1:fb:c3:9d:49:70:19:ad:23:67:51:ba:f7:
                    81:51:10:4c:af:7f:fc:24:e7:60:be:1a:5d:0e:fc:
                    c9:06:17:ae:71:46:f1:5a:1b:20:69:01:f9:16:c2:
                    67:c3:62:84:78:cf:83:52:2c:51:59:06:57:63:54:
                    db:09:c7:28:b7:20:44:5f:73:37:8b:7e:c8:38:58:
                    d3:1b:21:f4:84:64:23:f6:4c:25:40:bd:6d:c4:6d:
                    b4:08:3d:2b:cc:7d:2c:49:05:bd:bf:74:aa:66:da:
                    a4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:09:75:1F:67:08:E2:33:A7:70:E2:9B:83:0C:00:C6:9D:90:9C:08
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3137372e32332e3130312e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:d9:a7:fc:56:11:9e:b3:71:6e:38:ae:8a:a4:61:ae:f7:a4:
         c5:9e:88:24:2f:e1:18:5e:d5:9a:ed:3d:0e:8a:92:4b:ec:e6:
         71:28:bc:82:53:bb:83:44:7f:14:8e:ab:c6:c2:c2:83:21:ba:
         4d:36:f4:64:91:24:cd:e6:c0:28:8a:ab:0b:d4:dc:aa:6a:d4:
         fa:52:a8:7d:4e:99:57:e2:a6:03:3a:b1:04:55:24:06:db:1f:
         3b:a4:ec:ab:90:d6:fb:4a:88:ae:37:21:63:1d:13:82:9a:4e:
         ad:ec:5e:77:2f:d4:71:cf:c5:4f:59:92:2b:16:b9:20:d5:1b:
         65:ff:5e:a6:c7:47:d6:f6:ee:08:ac:e8:aa:47:b6:e1:5a:a5:
         e4:1c:77:a9:6a:7d:2c:be:44:84:a8:d1:89:20:a5:da:61:8c:
         4a:5c:a0:81:cf:bb:a5:c0:ed:e6:ed:e0:ed:fc:1e:dc:a5:00:
         db:d3:51:37:b8:af:85:88:e4:d4:b5:9c:1a:82:d1:ad:08:23:
         f2:52:b0:f9:09:f2:09:6e:c2:e9:13:5c:28:e5:86:e1:35:76:
         83:f6:55:14:dc:01:71:d5:ac:a9:14:93:b2:ab:80:c9:62:cb:
         03:29:f3:ac:f0:45:d8:4a:12:71:5f:70:33:70:de:a8:fb:a1:
         c0:51:4e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:44 2023 by rpki-client on console-ams.rpki-client.org