Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3137392e302e33322e302f32322d3232203d3e20323731333037.roa
File:                     3137392e302e33322e302f32322d3232203d3e20323731333037.roa (raw, json)
Hash identifier:          Op2IBdJJE8DaNnhqgUElblvzIjV03NGcxrFVam89D50=
Subject key identifier:   8B:E4:2F:44:37:08:B9:3E:D5:92:4F:FC:E1:07:7D:84:73:7E:1A:70
Certificate issuer:       /CN=0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40
Certificate serial:       7FBB2C6AF73A549B0096A0CCF4CB26AB2FDDC869
Authority key identifier: 0C:41:1B:1D:C2:8D:14:EC:9C:2D:6D:35:F8:EC:D2:23:AB:78:ED:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3137392e302e33322e302f32322d3232203d3e20323731333037.roa
Signing time:             Sat 11 Feb 2023 11:58:58 +0000
ROA not before:           Sat 11 Feb 2023 11:53:58 +0000
ROA not after:            Sat 10 Feb 2024 11:58:58 +0000
asID:                     271307
IP address blocks:        179.0.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bb:2c:6a:f7:3a:54:9b:00:96:a0:cc:f4:cb:26:ab:2f:dd:c8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40
        Validity
            Not Before: Feb 11 11:53:58 2023 GMT
            Not After : Feb 10 11:58:58 2024 GMT
        Subject: CN=8BE42F443708B93ED5924FFCE1077D84737E1A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:ec:e7:bd:37:2f:70:b7:7d:d1:f0:15:91:
                    c5:3b:c7:41:00:36:6c:7d:c8:a7:84:e4:19:0a:4e:
                    a4:b0:e5:93:31:ca:60:f6:6a:ed:73:e0:3d:1d:86:
                    3c:ec:55:98:8f:e1:6b:99:da:7a:1b:30:df:74:7e:
                    63:27:e0:40:b6:47:35:32:c4:78:a0:bc:5f:32:4c:
                    d3:5f:0d:4c:17:fe:1d:90:07:17:cd:2c:f1:37:9a:
                    f2:f3:0b:ef:09:46:3b:bf:59:8d:04:d2:eb:c9:18:
                    e4:71:00:a0:19:55:83:72:78:ee:5a:c7:5d:f1:b0:
                    66:1b:d2:5a:ac:3f:16:76:23:e9:48:fc:c4:bc:c3:
                    3f:12:a7:a1:fe:15:f3:50:3a:eb:03:04:39:45:1f:
                    22:5a:2c:ba:c0:f6:b0:f3:2e:6a:b2:9b:16:7f:7c:
                    bc:92:1c:4b:2a:23:a3:17:1b:b6:71:c0:83:35:89:
                    77:78:68:b2:d5:76:55:a6:3a:f9:5f:f1:05:fe:d1:
                    03:19:24:08:b2:85:98:d0:3d:d0:18:84:fe:9a:37:
                    48:5c:e4:d3:79:c5:da:9d:40:4e:58:f6:a4:ba:ab:
                    fb:eb:08:3c:dc:fd:db:43:1b:d7:f4:1c:48:61:c0:
                    50:9c:15:71:9a:5a:dc:07:67:cd:a5:be:d2:b3:86:
                    75:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E4:2F:44:37:08:B9:3E:D5:92:4F:FC:E1:07:7D:84:73:7E:1A:70
            X509v3 Authority Key Identifier:
                keyid:0C:41:1B:1D:C2:8D:14:EC:9C:2D:6D:35:F8:EC:D2:23:AB:78:ED:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3137392e302e33322e302f32322d3232203d3e20323731333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:74:57:34:e8:e4:a9:42:e6:9b:49:d8:a2:47:9c:1d:6d:51:
         35:df:54:41:f0:65:5f:95:88:cd:35:3d:96:7f:00:8b:2f:d1:
         8a:3c:d3:90:9e:a6:80:18:94:cb:ac:e2:7d:70:b0:f9:1e:d9:
         99:58:75:2a:03:05:c7:61:29:74:88:60:81:41:02:e8:b8:cb:
         80:f7:67:bb:83:95:41:b6:d7:4d:a0:bc:e2:34:16:e0:40:85:
         ca:a6:44:8f:0b:0d:7e:b3:00:91:00:75:6a:bf:e3:24:74:54:
         98:1d:e2:03:9a:92:7c:99:f1:c2:d8:7c:17:58:21:02:26:46:
         75:2d:95:8a:98:45:fe:e2:44:87:53:ba:f2:ea:11:c1:63:84:
         44:7c:ca:86:9a:cb:6b:f2:c1:b2:4a:35:01:68:fe:7e:2a:24:
         a8:6b:0f:ca:d2:dc:75:c3:95:db:5c:8a:04:21:5f:ac:d2:5d:
         61:80:cd:04:91:de:45:b9:74:de:a0:81:04:51:3a:cc:d8:d7:
         98:7b:25:8a:c5:f4:7b:2a:20:4e:34:14:e6:cd:85:09:ba:aa:
         11:ad:21:7f:ef:24:93:d5:fc:2f:d4:80:1a:a5:30:b0:38:62:
         b0:22:eb:e0:02:eb:3e:51:aa:f4:9c:6c:13:c0:1f:2a:4c:d8:
         01:22:64:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:03 2023 by rpki-client on console-fra.rpki-client.org