Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e36382e302f32322d3232203d3e203631373534.roa
File:                     3137302e38332e36382e302f32322d3232203d3e203631373534.roa (raw, json)
Hash identifier:          cDKHL5kshuEDMktPETLmSLiJ+bulfV1q6XgIAUYVKH4=
Subject key identifier:   0B:85:87:F0:B3:65:39:6E:83:25:DF:EA:B2:2B:8A:AF:EC:74:DA:49
Certificate issuer:       /CN=107B680E5B5FB305DB89311B48605A8468508948
Certificate serial:       058EC993CDE5826A3ADBF3B5E8968A2D0874BA00
Authority key identifier: 10:7B:68:0E:5B:5F:B3:05:DB:89:31:1B:48:60:5A:84:68:50:89:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/107B680E5B5FB305DB89311B48605A8468508948.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e36382e302f32322d3232203d3e203631373534.roa
Signing time:             Wed 24 Jan 2024 14:54:12 +0000
ROA not before:           Wed 24 Jan 2024 14:49:12 +0000
ROA not after:            Wed 22 Jan 2025 14:54:12 +0000
asID:                     61754
IP address blocks:        170.83.68.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 23:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8e:c9:93:cd:e5:82:6a:3a:db:f3:b5:e8:96:8a:2d:08:74:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107B680E5B5FB305DB89311B48605A8468508948
        Validity
            Not Before: Jan 24 14:49:12 2024 GMT
            Not After : Jan 22 14:54:12 2025 GMT
        Subject: CN=0B8587F0B365396E8325DFEAB22B8AAFEC74DA49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:5b:f3:ee:e4:96:92:fe:db:db:81:63:f7:
                    85:b7:a7:5a:01:11:33:96:17:60:75:b1:0d:3a:69:
                    41:24:88:f0:d8:5f:13:a7:f9:fc:bc:85:c9:98:82:
                    9b:a8:41:44:c2:a3:77:66:74:5f:1a:eb:29:8a:79:
                    a5:db:c7:a1:25:d2:a9:06:08:47:a9:ac:a9:b3:e7:
                    6f:c7:49:84:f6:49:af:33:d9:85:72:67:06:c0:7a:
                    ac:73:01:3b:7c:54:be:22:e6:0e:dc:b3:4d:96:3d:
                    ee:c6:24:4e:2e:c8:37:e1:ef:13:95:a9:6b:7a:49:
                    89:98:75:c4:fc:52:86:09:e4:5d:90:2a:97:5f:e8:
                    70:60:87:10:47:9c:d9:79:eb:3a:86:b7:6e:ac:2a:
                    c0:13:f3:f0:b9:5a:32:9f:d9:34:36:14:9f:a6:55:
                    df:80:d6:fd:46:34:05:63:06:a7:0b:bf:17:8c:7f:
                    13:25:25:c7:ce:4b:1d:03:14:96:68:6a:8b:49:4e:
                    4e:9f:47:52:56:78:5a:8e:ff:81:ca:45:c6:63:0f:
                    c2:8c:01:69:2f:e7:24:85:c9:4b:fa:56:c3:34:53:
                    fe:2f:a2:85:37:de:df:aa:b0:db:41:5f:ea:42:81:
                    d9:4a:7b:3d:d0:b7:3c:d0:53:68:47:fc:53:f8:1b:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:85:87:F0:B3:65:39:6E:83:25:DF:EA:B2:2B:8A:AF:EC:74:DA:49
            X509v3 Authority Key Identifier:
                keyid:10:7B:68:0E:5B:5F:B3:05:DB:89:31:1B:48:60:5A:84:68:50:89:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/107B680E5B5FB305DB89311B48605A8468508948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/107B680E5B5FB305DB89311B48605A8468508948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e36382e302f32322d3232203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:3e:cc:c1:a7:33:cb:c9:fd:a4:b0:1e:69:1f:c5:00:18:e6:
         95:e6:08:f6:86:b8:90:8b:d6:3c:5b:3b:ab:b8:bf:e7:47:d8:
         cc:69:3d:98:97:e2:22:63:a0:ab:b7:6d:05:8a:c6:25:47:5d:
         67:0f:0e:75:f2:68:3e:0e:cf:24:77:89:3c:54:1a:5e:60:c8:
         60:eb:8f:3f:f2:10:8f:33:9d:7e:51:1a:c6:d4:eb:8c:34:f2:
         da:23:9c:92:6c:99:8f:c9:73:85:87:c4:ba:bd:5d:a3:97:af:
         03:46:eb:c7:2a:e2:ce:61:3c:ad:3d:f8:56:50:f7:d1:f1:40:
         15:56:62:60:4b:6b:64:18:00:29:3b:d9:76:98:c1:b5:fd:88:
         72:25:4e:79:86:b1:c0:a6:65:71:66:a4:4e:6e:b9:7d:02:bf:
         6d:9c:ee:b4:4f:16:a3:3c:a1:c0:db:1d:f5:cd:85:fc:06:66:
         4d:d6:b9:1d:bb:e0:b5:f2:00:47:af:a8:55:91:f0:32:fb:8c:
         68:27:7c:3b:48:71:e2:2b:ef:54:b3:8b:66:c5:01:aa:f0:8f:
         3f:46:d2:99:66:4d:d8:4f:43:47:2e:d8:67:08:22:21:03:55:
         0d:5a:19:56:84:1a:ac:d6:b7:af:4f:93:c5:1c:90:db:9f:96:
         2a:7a:0d:2b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBY7Jk83lgmo62/O16JaKLQh0ugAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA3QjY4MEU1QjVGQjMwNURCODkzMTFCNDg2MDVBODQ2
ODUwODk0ODAeFw0yNDAxMjQxNDQ5MTJaFw0yNTAxMjIxNDU0MTJaMDMxMTAvBgNV
BAMTKDBCODU4N0YwQjM2NTM5NkU4MzI1REZFQUIyMkI4QUFGRUM3NERBNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQlvz7uSWkv7b24Fj94W3p1oB
ETOWF2B1sQ06aUEkiPDYXxOn+fy8hcmYgpuoQUTCo3dmdF8a6ymKeaXbx6El0qkG
CEeprKmz52/HSYT2Sa8z2YVyZwbAeqxzATt8VL4i5g7cs02WPe7GJE4uyDfh7xOV
qWt6SYmYdcT8UoYJ5F2QKpdf6HBghxBHnNl56zqGt26sKsAT8/C5WjKf2TQ2FJ+m
Vd+A1v1GNAVjBqcLvxeMfxMlJcfOSx0DFJZoaotJTk6fR1JWeFqO/4HKRcZjD8KM
AWkv5ySFyUv6VsM0U/4vooU33t+qsNtBX+pCgdlKez3QtzzQU2hH/FP4G/7PAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUC4WH8LNlOW6DJd/qsiuKr+x02kkwHwYDVR0j
BBgwFoAUEHtoDltfswXbiTEbSGBahGhQiUgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW1uUmphc2I2R2JWdzU3cURxQ0RjZER2Q3Y1WGVYaHVGSmdpNDNyTmJE
ZEIvMC8xMDdCNjgwRTVCNUZCMzA1REI4OTMxMUI0ODYwNUE4NDY4NTA4OTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwN0I2ODBFNUI1RkIzMDVE
Qjg5MzExQjQ4NjA1QTg0Njg1MDg5NDguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VtblJqYXNiNkdiVnc1N3FEcUNEY2REdkN2NVhlWGh1RkpnaTQzck5iRGRCLzAv
MzEzNzMwMmUzODMzMmUzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMTM3
MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqpTRDANBgkqhkiG9w0BAQsFAAOCAQEAFz7Mwaczy8n9
pLAeaR/FABjmleYI9oa4kIvWPFs7q7i/50fYzGk9mJfiImOgq7dtBYrGJUddZw8O
dfJoPg7PJHeJPFQaXmDIYOuPP/IQjzOdflEaxtTrjDTy2iOckmyZj8lzhYfEur1d
o5evA0brxyrizmE8rT34VlD30fFAFVZiYEtrZBgAKTvZdpjBtf2IciVOeYaxwKZl
cWakTm65fQK/bZzutE8WozyhwNsd9c2F/AZmTda5HbvgtfIAR6+oVZHwMvuMaCd8
O0hx4ivvVLOLZsUBqvCPP0bSmWZN2E9DRy7YZwgiIQNVDVoZVoQarNa3r0+TxRyQ
25+WKnoNKw==
-----END CERTIFICATE-----
Generated at Sat Feb 17 00:17:19 2024 by rpki-client on console-fra.rpki-client.org