Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32342d3234203d3e20323731353636.roa
File:                     3137392e36332e3137322e302f32342d3234203d3e20323731353636.roa (raw, json)
Hash identifier:          KbK3DqiO25IspkaBntoGwgKrSXHkNEabsEqZinBpqBA=
Subject key identifier:   01:27:46:75:67:70:63:4C:8C:5D:9F:BB:A5:39:D4:99:E7:6B:D4:BF
Certificate issuer:       /CN=8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521
Certificate serial:       13FD5928C6C96F33B13E819097A8AF760EF3AD74
Authority key identifier: 8C:3A:73:A3:F4:E7:E3:89:1D:0D:C6:F8:E4:5F:E4:7C:B0:3D:85:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32342d3234203d3e20323731353636.roa
Signing time:             Sat 24 Feb 2024 17:45:44 +0000
ROA not before:           Sat 24 Feb 2024 17:40:44 +0000
ROA not after:            Sat 22 Feb 2025 17:45:44 +0000
asID:                     271566
IP address blocks:        179.63.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Feb 2024 13:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fd:59:28:c6:c9:6f:33:b1:3e:81:90:97:a8:af:76:0e:f3:ad:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521
        Validity
            Not Before: Feb 24 17:40:44 2024 GMT
            Not After : Feb 22 17:45:44 2025 GMT
        Subject: CN=012746756770634C8C5D9FBBA539D499E76BD4BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:2b:2a:93:47:c1:05:be:29:83:55:e9:4f:
                    c8:b7:8e:54:97:ec:54:ed:36:19:78:c7:74:31:32:
                    ae:60:60:8d:91:cd:60:d0:7c:cb:ba:a9:5f:fe:1b:
                    b5:7a:a9:80:16:48:ab:08:67:31:e7:5d:08:4d:94:
                    a2:d7:78:ed:9d:3a:cd:9c:fb:69:ee:92:ad:19:54:
                    43:d8:32:74:2e:3b:23:ad:2d:5b:f7:e1:72:40:a4:
                    f3:f6:6b:a0:2c:39:eb:9e:1c:ee:50:a4:cd:2b:63:
                    9e:a1:24:11:92:6f:32:46:dd:18:e5:2f:91:55:7c:
                    f1:08:f4:c0:47:a3:dc:7b:dc:ef:8a:6d:05:44:dd:
                    7c:47:cf:32:54:b3:06:c8:70:fc:ff:5a:5a:f3:c1:
                    93:1b:85:d7:ef:16:9c:6d:01:1f:ce:a1:c0:f5:5d:
                    77:72:b5:ec:85:af:e5:51:e7:93:36:5e:68:1c:58:
                    76:28:25:08:b1:fd:98:60:6e:ab:7c:e7:d0:c4:65:
                    88:24:e1:77:cb:b4:32:73:f9:c5:6f:ef:3b:2a:1d:
                    e3:7c:d1:56:76:84:2d:80:eb:c2:70:ef:f1:c3:96:
                    32:6c:93:e9:df:66:76:5b:67:6e:9d:83:c3:0e:90:
                    1d:4e:8c:fb:5a:06:4d:99:b6:89:69:ef:3c:9c:37:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:27:46:75:67:70:63:4C:8C:5D:9F:BB:A5:39:D4:99:E7:6B:D4:BF
            X509v3 Authority Key Identifier:
                keyid:8C:3A:73:A3:F4:E7:E3:89:1D:0D:C6:F8:E4:5F:E4:7C:B0:3D:85:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32342d3234203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:cc:14:90:3e:08:40:2b:40:02:99:de:f8:79:fd:16:58:d2:
         8c:f8:0a:a7:7a:1b:57:43:73:48:b1:62:6b:aa:50:00:b2:24:
         0b:2e:eb:73:bc:49:47:38:af:9b:e9:01:1a:ad:b1:a5:6a:78:
         e2:0a:05:d4:8a:64:7b:97:d7:65:cf:62:4f:f6:e4:f3:00:7c:
         2d:ef:b3:bb:cc:8e:ce:27:d5:bc:3d:1b:7f:ac:80:0f:3a:8b:
         68:7a:9b:87:94:a1:45:1e:57:9b:22:d3:1a:ac:74:0d:3d:15:
         ba:6e:05:0a:4f:41:8d:9d:b5:c9:45:2d:62:98:59:d4:7f:37:
         04:f5:38:02:ed:88:65:e8:ba:d5:19:ae:1a:15:e2:58:6e:75:
         e5:83:ac:ae:67:6c:75:96:ce:5b:85:57:93:83:91:61:ba:4b:
         94:e8:e4:ae:ae:61:e8:a3:ca:85:91:d0:e7:a1:29:fa:f3:bd:
         cb:3c:95:29:cd:68:7c:5e:20:5b:1d:28:e4:a0:3a:7f:ed:3d:
         b2:3b:32:ce:c1:89:4f:09:41:d9:82:c2:06:35:48:4b:eb:03:
         96:43:ef:53:cf:50:e6:af:94:3e:78:85:cb:af:65:7b:fe:94:
         3f:5d:cc:0c:a6:19:c6:30:25:91:03:0f:7e:69:a7:0c:7f:74:
         0a:96:ec:fe
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE/1ZKMbJbzOxPoGQl6ivdg7zrXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMzQTczQTNGNEU3RTM4OTFEMERDNkY4RTQ1RkU0N0NC
MDNEODUyMTAeFw0yNDAyMjQxNzQwNDRaFw0yNTAyMjIxNzQ1NDRaMDMxMTAvBgNV
BAMTKDAxMjc0Njc1Njc3MDYzNEM4QzVEOUZCQkE1MzlENDk5RTc2QkQ0QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQzisqk0fBBb4pg1XpT8i3jlSX
7FTtNhl4x3QxMq5gYI2RzWDQfMu6qV/+G7V6qYAWSKsIZzHnXQhNlKLXeO2dOs2c
+2nukq0ZVEPYMnQuOyOtLVv34XJApPP2a6AsOeueHO5QpM0rY56hJBGSbzJG3Rjl
L5FVfPEI9MBHo9x73O+KbQVE3XxHzzJUswbIcPz/WlrzwZMbhdfvFpxtAR/OocD1
XXdyteyFr+VR55M2XmgcWHYoJQix/Zhgbqt859DEZYgk4XfLtDJz+cVv7zsqHeN8
0VZ2hC2A68Jw7/HDljJsk+nfZnZbZ26dg8MOkB1OjPtaBk2Ztolp7zycNyXPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUASdGdWdwY0yMXZ+7pTnUmedr1L8wHwYDVR0j
BBgwFoAUjDpzo/Tn44kdDcb45F/kfLA9hSEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjZRTUVBU2NvUmZFc1ZkTFlvQlcyWFFrWFVBbjE5RmlSUjN5dHZ4aWhT
Z2gvMC84QzNBNzNBM0Y0RTdFMzg5MUQwREM2RjhFNDVGRTQ3Q0IwM0Q4NTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDM0E3M0EzRjRFN0UzODkx
RDBEQzZGOEU0NUZFNDdDQjAzRDg1MjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y2UU1FQVNjb1JmRXNWZExZb0JXMlhRa1hVQW4xOUZpUlIzeXR2eGloU2doLzAv
MzEzNzM5MmUzNjMzMmUzMTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNTM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzP6wwDQYJKoZIhvcNAQELBQADggEBADXMFJA+
CEArQAKZ3vh5/RZY0oz4Cqd6G1dDc0ixYmuqUACyJAsu63O8SUc4r5vpARqtsaVq
eOIKBdSKZHuX12XPYk/25PMAfC3vs7vMjs4n1bw9G3+sgA86i2h6m4eUoUUeV5si
0xqsdA09FbpuBQpPQY2dtclFLWKYWdR/NwT1OALtiGXoutUZrhoV4lhudeWDrK5n
bHWWzluFV5ODkWG6S5To5K6uYeijyoWR0OehKfrzvcs8lSnNaHxeIFsdKOSgOn/t
PbI7Ms7BiU8JQdmCwgY1SEvrA5ZD71PPUOavlD54hcuvZXv+lD9dzAymGcYwJZED
D35ppwx/dAqW7P4=
-----END CERTIFICATE-----
Generated at Mon Feb 26 17:25:38 2024 by rpki-client on console-fra.rpki-client.org