Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/0/3137302e3233382e3138342e302f32322d3234203d3e20323636333338.roa
File:                     3137302e3233382e3138342e302f32322d3234203d3e20323636333338.roa (raw, json)
Hash identifier:          kOG/XM8aWyA0TF0B7XdMeyR7da46m6Q34blREghGqMQ=
Subject key identifier:   C2:73:5A:87:F5:57:C5:A2:22:35:60:89:61:37:39:F5:1C:E1:B2:DE
Certificate issuer:       /CN=8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5
Certificate serial:       4FF7601D8B8524053157CE96BD6F71F74E72A744
Authority key identifier: 8F:24:F4:01:F7:CE:9F:43:05:EE:7F:5E:EE:78:60:B4:0E:10:2C:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/0/3137302e3233382e3138342e302f32322d3234203d3e20323636333338.roa
Signing time:             Mon 15 May 2023 17:00:00 +0000
ROA not before:           Mon 15 May 2023 16:55:00 +0000
ROA not after:            Wed 15 May 2024 17:00:00 +0000
asID:                     266338
IP address blocks:        170.238.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f7:60:1d:8b:85:24:05:31:57:ce:96:bd:6f:71:f7:4e:72:a7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5
        Validity
            Not Before: May 15 16:55:00 2023 GMT
            Not After : May 15 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:02:bd:dd:fe:07:6a:f7:1f:6f:85:cd:c7:
                    87:b5:5a:b2:77:68:1a:27:09:bc:94:b5:96:97:d8:
                    2c:fe:09:4c:e0:42:4d:40:e7:d4:c7:a9:15:c4:7d:
                    36:3b:16:a5:2a:9c:f9:8c:61:09:21:d7:e9:bf:85:
                    0d:ab:35:a3:2c:d5:21:98:33:8f:54:39:11:39:87:
                    b8:7b:41:0d:41:eb:ab:87:be:cc:5c:dc:f0:a1:d3:
                    4b:02:df:14:7b:b1:15:2a:53:c3:9e:2a:6c:04:80:
                    f1:87:04:77:bb:cf:1c:98:35:56:0e:ea:b7:bf:89:
                    13:f7:8b:79:01:50:81:51:0f:0e:ac:2f:52:34:64:
                    73:02:09:6a:1c:a5:1b:47:57:5c:fe:90:05:fc:35:
                    52:d4:82:e9:b2:28:42:8d:1f:ea:33:8d:0d:df:11:
                    bf:38:13:8a:68:db:cd:92:75:ee:5d:dd:0a:94:b5:
                    32:a5:f1:4a:e4:77:13:23:bb:01:2e:d3:bb:1e:86:
                    f5:8d:52:e8:04:72:9d:6a:87:1b:4b:45:37:dd:7c:
                    26:f3:d0:bb:45:9e:2e:0e:fa:a6:c8:75:0d:30:39:
                    93:3b:33:b2:0a:56:c1:a1:70:3e:ff:d8:ec:9d:dd:
                    6c:51:a6:af:87:a7:1b:45:71:5c:2c:b6:bb:c2:83:
                    4c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:73:5A:87:F5:57:C5:A2:22:35:60:89:61:37:39:F5:1C:E1:B2:DE
            X509v3 Authority Key Identifier:
                keyid:8F:24:F4:01:F7:CE:9F:43:05:EE:7F:5E:EE:78:60:B4:0E:10:2C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/0/8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/0/3137302e3233382e3138342e302f32322d3234203d3e20323636333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:b4:7d:d1:44:0d:35:c4:29:f4:f0:c3:03:2d:69:da:d9:8e:
         3a:c4:47:94:14:fa:99:82:b0:2f:06:e5:cd:bb:58:2a:91:2c:
         4d:29:57:b1:b2:51:d8:63:43:64:42:df:54:ac:28:9f:ad:6d:
         36:59:d4:25:d0:21:c2:25:75:44:42:68:04:58:12:65:3a:d5:
         1c:d8:4f:92:72:26:19:a0:65:67:b6:43:f0:ba:82:8c:ea:88:
         92:33:49:0a:b7:7d:f4:0b:cf:9c:1f:76:91:11:f7:fa:1c:7c:
         d6:a2:ac:38:bc:30:d2:f4:16:16:3b:e9:79:15:86:41:5a:0e:
         2a:da:bc:84:bd:96:03:81:d9:e6:4a:f9:8a:22:c7:7c:eb:b7:
         4e:df:61:72:24:68:08:03:18:d9:86:25:60:f1:fb:44:0b:2b:
         61:f9:2c:1c:83:ed:cf:98:b7:7e:60:0b:45:f6:b3:c3:3a:11:
         5a:a6:a3:94:5c:dc:fe:d2:67:50:8f:5d:6f:a7:66:0b:6e:68:
         ba:ef:4c:e4:10:e2:e3:f1:26:ec:86:be:fb:eb:cf:8a:86:be:
         16:62:39:15:c1:6d:ae:c2:21:54:07:03:f6:f7:1f:9f:79:f5:
         4d:55:db:3c:37:8a:4c:a3:26:bb:e7:cf:e2:68:7f:19:21:35:
         ef:8a:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 23:38:17 2023 by rpki-client on console-ams.rpki-client.org