Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137302e3234342e3136342e302f32322d3232203d3e20323636353033.roa
File:                     3137302e3234342e3136342e302f32322d3232203d3e20323636353033.roa (raw, json)
Hash identifier:          /EG/rCM+L5U38+pF5+rqhcUFYjvX30o8ty8i1juymZc=
Subject key identifier:   93:E1:01:EA:5C:70:25:59:7D:21:7F:7A:EC:90:A9:18:DE:30:81:C8
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       664913548D1E8AE303F1857B2C125DB43405DC1E
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137302e3234342e3136342e302f32322d3232203d3e20323636353033.roa
Signing time:             Thu 21 Dec 2023 20:55:36 +0000
ROA not before:           Thu 21 Dec 2023 20:50:36 +0000
ROA not after:            Thu 19 Dec 2024 20:55:36 +0000
asID:                     266503
IP address blocks:        170.244.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:49:13:54:8d:1e:8a:e3:03:f1:85:7b:2c:12:5d:b4:34:05:dc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Dec 21 20:50:36 2023 GMT
            Not After : Dec 19 20:55:36 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d9:ca:43:21:e2:c8:d7:f7:24:04:44:54:b7:
                    d3:d8:ec:67:c8:6c:50:7e:87:73:2b:2f:09:00:7e:
                    75:81:c2:e5:58:7b:7e:2f:0c:47:65:aa:c3:3d:92:
                    97:93:08:0c:e9:a2:b0:86:1e:fe:23:6f:80:60:a4:
                    ec:53:1c:78:49:0b:24:8c:61:cc:f7:f3:e0:90:7e:
                    f6:f2:de:6d:2b:7f:40:f8:bd:2e:3c:53:12:a6:dc:
                    f8:ab:f6:10:81:36:5b:6f:f7:d9:06:ba:c6:cb:b5:
                    d3:97:42:e6:5f:ae:3d:e1:8b:8a:00:84:03:75:37:
                    8d:bf:e9:ca:06:a1:9d:97:5d:22:32:e4:51:09:a6:
                    2f:fa:c0:e1:ce:83:2d:68:15:d6:e1:94:a3:ca:8f:
                    29:50:db:44:ac:4c:3c:b4:11:31:af:35:26:ce:d8:
                    7b:6c:b4:c9:22:91:ec:3e:9c:45:dd:7d:1a:7e:06:
                    9d:1c:f5:fe:6c:86:66:92:9c:53:ca:ac:9f:77:e2:
                    35:cf:b0:50:c8:19:79:d9:f0:91:11:6d:08:42:1c:
                    7c:2b:ed:d7:1a:57:f6:6a:18:ce:07:7b:9c:4a:98:
                    d4:b1:31:d9:35:f8:a2:4e:12:a6:a7:b4:b9:a6:51:
                    57:d1:a8:e0:45:b8:83:94:14:21:ee:c2:c8:00:9d:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E1:01:EA:5C:70:25:59:7D:21:7F:7A:EC:90:A9:18:DE:30:81:C8
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137302e3234342e3136342e302f32322d3232203d3e20323636353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:1c:59:60:d7:22:97:0c:a6:74:95:0a:e5:db:3c:11:f4:cc:
         67:f4:e7:82:99:d7:ff:81:cc:2f:c9:75:e8:ce:39:2b:a0:58:
         f6:d8:ca:a1:a0:76:ca:6e:3b:81:3c:ef:60:f6:2b:20:a6:05:
         24:b7:63:49:d6:1d:58:72:dd:e1:99:da:36:f1:64:36:73:43:
         fb:ca:3e:ec:69:35:b7:21:fc:44:5e:10:94:db:bc:66:83:67:
         78:53:83:2c:e7:37:01:2b:3e:5f:37:0c:13:67:e9:17:ca:1e:
         1f:5c:3e:ea:d0:6b:9b:ab:bc:fa:7f:53:e6:2e:07:a6:c0:01:
         45:cf:40:db:fa:2d:75:a8:e3:bc:e5:2f:20:a8:6b:7e:bd:1a:
         de:b6:92:7b:d1:78:a7:a5:e8:d0:e4:7e:49:f0:df:76:2d:85:
         32:09:48:c6:10:05:42:de:25:55:c3:6f:6f:4e:9e:f7:b9:50:
         34:e2:9b:37:77:35:2d:9a:b4:bb:68:b7:f7:a5:b4:dc:2d:93:
         81:3c:45:24:6d:1c:8d:4a:3c:d2:fd:63:75:eb:20:cf:0e:66:
         7b:c2:8f:f0:81:71:ae:02:63:fc:22:70:c5:8f:ab:d1:6c:d7:
         f2:60:5d:7f:59:60:90:83:b9:c0:4c:7a:46:c2:f4:c5:f4:3b:
         33:79:13:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 15:03:20 2023 by rpki-client on console-fra.rpki-client.org