Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135382e302f32342d3234203d3e20323634393938.roa
File:                     3137302e38342e3135382e302f32342d3234203d3e20323634393938.roa (raw, json)
Hash identifier:          qg+mfS61oAzvMNgt1e0cnbgGTch/+UokkKaF0qGaICg=
Subject key identifier:   CE:BF:FD:35:E6:19:28:83:A7:35:44:70:A4:15:65:A7:0A:FE:92:F1
Certificate issuer:       /CN=BF74D0DF34465209B429D590F319EC137C0F9331
Certificate serial:       77D5B545217E66E27E9E40AFA068B8307FA96A8D
Authority key identifier: BF:74:D0:DF:34:46:52:09:B4:29:D5:90:F3:19:EC:13:7C:0F:93:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF74D0DF34465209B429D590F319EC137C0F9331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135382e302f32342d3234203d3e20323634393938.roa
Signing time:             Thu 11 Jan 2024 17:45:02 +0000
ROA not before:           Thu 11 Jan 2024 17:40:02 +0000
ROA not after:            Thu 09 Jan 2025 17:45:02 +0000
asID:                     264998
IP address blocks:        170.84.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 16:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d5:b5:45:21:7e:66:e2:7e:9e:40:af:a0:68:b8:30:7f:a9:6a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF74D0DF34465209B429D590F319EC137C0F9331
        Validity
            Not Before: Jan 11 17:40:02 2024 GMT
            Not After : Jan  9 17:45:02 2025 GMT
        Subject: CN=CEBFFD35E6192883A7354470A41565A70AFE92F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:56:cb:4f:b9:ef:07:a5:18:1d:c2:7d:5d:
                    c8:3b:09:3a:e2:32:d9:30:dc:01:80:3e:4e:f4:83:
                    86:5c:db:ae:39:24:b3:28:45:94:47:4b:81:73:02:
                    ef:94:5b:2e:94:1f:e0:b2:ca:fd:a8:0c:a3:08:16:
                    f5:16:09:f5:bd:c4:5f:0f:b2:e8:62:57:de:da:d3:
                    ea:9e:36:a5:ad:d8:73:14:42:a0:2f:14:84:d1:20:
                    7e:9c:92:69:1d:74:5b:54:ae:87:d3:93:e6:4b:56:
                    3e:70:92:74:04:7d:e2:a0:29:f1:2a:e2:0d:f9:c6:
                    5e:2e:f4:8a:0f:28:f4:92:54:05:47:4b:c2:e3:5e:
                    21:a8:33:26:a6:af:79:d6:51:c4:6d:7c:e7:7a:1b:
                    0c:2d:26:11:12:8e:28:af:7f:dd:5b:97:d8:5e:23:
                    cb:da:a3:8e:ce:96:c7:32:e5:43:18:c9:5e:bf:62:
                    1d:38:cd:33:41:2e:21:18:59:26:bc:3c:f2:ee:01:
                    55:54:08:bb:dc:43:ed:aa:eb:c0:fb:01:6d:22:77:
                    a3:80:07:97:5e:18:82:52:f0:8a:59:a5:79:d1:93:
                    1c:5c:46:3d:76:fe:b1:e8:02:bb:50:7e:16:34:a6:
                    e0:94:19:db:69:82:47:b1:42:3a:cd:3d:f9:1d:e9:
                    02:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BF:FD:35:E6:19:28:83:A7:35:44:70:A4:15:65:A7:0A:FE:92:F1
            X509v3 Authority Key Identifier:
                keyid:BF:74:D0:DF:34:46:52:09:B4:29:D5:90:F3:19:EC:13:7C:0F:93:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/BF74D0DF34465209B429D590F319EC137C0F9331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF74D0DF34465209B429D590F319EC137C0F9331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135382e302f32342d3234203d3e20323634393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:d3:27:dc:f4:04:84:16:fc:f6:0f:d0:1c:44:a5:b4:a9:df:
         79:69:ec:32:aa:e5:c7:ef:74:8b:0c:2a:16:80:24:d4:9f:8d:
         84:3a:e1:8f:1d:30:f6:c2:86:5c:cd:a3:34:dc:33:71:49:b4:
         28:51:e5:1b:d8:ce:3c:40:f3:4d:da:f3:22:51:62:d8:aa:96:
         98:47:39:93:20:c6:59:28:8b:31:73:c1:5d:e0:f6:54:7b:4f:
         2a:d7:fb:7c:71:b4:b2:c0:56:54:26:e7:42:ee:d3:0a:85:a3:
         8b:b9:d4:01:a6:74:65:5a:97:6d:a8:bb:75:d3:dd:16:b0:f1:
         ce:17:ab:fd:b4:c3:82:9b:c9:e7:f9:68:a2:11:13:f6:5e:92:
         53:ab:47:48:9d:a5:7c:e3:c0:e0:43:1d:c0:f2:28:73:6f:4e:
         89:87:15:b2:54:23:de:26:c2:85:65:e1:ff:3e:3a:ae:68:48:
         de:3a:bb:6c:d9:dd:8a:24:d1:d2:6f:57:ec:89:08:8d:31:8d:
         d0:47:90:6a:e7:8e:08:f0:7f:56:40:4b:42:a6:60:c8:0b:28:
         06:8d:8a:f7:27:e7:0e:a1:ac:ec:d9:60:9c:83:68:c7:7b:5e:
         cf:41:a6:61:81:cf:2f:ba:85:e5:bd:47:2d:cf:29:32:7d:d7:
         c6:f3:e8:2d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd9W1RSF+ZuJ+nkCvoGi4MH+pao0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY3NEQwREYzNDQ2NTIwOUI0MjlENTkwRjMxOUVDMTM3
QzBGOTMzMTAeFw0yNDAxMTExNzQwMDJaFw0yNTAxMDkxNzQ1MDJaMDMxMTAvBgNV
BAMTKENFQkZGRDM1RTYxOTI4ODNBNzM1NDQ3MEE0MTU2NUE3MEFGRTkyRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi/FbLT7nvB6UYHcJ9Xcg7CTri
Mtkw3AGAPk70g4Zc2645JLMoRZRHS4FzAu+UWy6UH+Cyyv2oDKMIFvUWCfW9xF8P
suhiV97a0+qeNqWt2HMUQqAvFITRIH6ckmkddFtUrofTk+ZLVj5wknQEfeKgKfEq
4g35xl4u9IoPKPSSVAVHS8LjXiGoMyamr3nWUcRtfOd6GwwtJhESjiivf91bl9he
I8vao47Olscy5UMYyV6/Yh04zTNBLiEYWSa8PPLuAVVUCLvcQ+2q68D7AW0id6OA
B5deGIJS8IpZpXnRkxxcRj12/rHoArtQfhY0puCUGdtpgkexQjrNPfkd6QLVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzr/9NeYZKIOnNURwpBVlpwr+kvEwHwYDVR0j
BBgwFoAUv3TQ3zRGUgm0KdWQ8xnsE3wPkzEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3RMeEJGdEJIak1KWUxVWVBhTjRXSzlBVWJDc2ZLZFNrZTZ2RlA0WXJX
eFkvMC9CRjc0RDBERjM0NDY1MjA5QjQyOUQ1OTBGMzE5RUMxMzdDMEY5MzMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGNzREMERGMzQ0NjUyMDlC
NDI5RDU5MEYzMTlFQzEzN0MwRjkzMzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d0THhCRnRCSGpNSllMVVlQYU40V0s5QVViQ3NmS2RTa2U2dkZQNFlyV3hZLzAv
MzEzNzMwMmUzODM0MmUzMTM1MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzOTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqVJ4wDQYJKoZIhvcNAQELBQADggEBAMrTJ9z0
BIQW/PYP0BxEpbSp33lp7DKq5cfvdIsMKhaAJNSfjYQ64Y8dMPbChlzNozTcM3FJ
tChR5RvYzjxA803a8yJRYtiqlphHOZMgxlkoizFzwV3g9lR7TyrX+3xxtLLAVlQm
50Lu0wqFo4u51AGmdGVal22ou3XT3Raw8c4Xq/20w4Kbyef5aKIRE/ZeklOrR0id
pXzjwOBDHcDyKHNvTomHFbJUI94mwoVl4f8+Oq5oSN46u2zZ3Yok0dJvV+yJCI0x
jdBHkGrnjgjwf1ZAS0KmYMgLKAaNivcn5w6hrOzZYJyDaMd7Xs9BpmGBzy+6heW9
Ry3PKTJ918bz6C0=
-----END CERTIFICATE-----
Generated at Fri Jan 12 19:58:25 2024 by rpki-client on console-fra.rpki-client.org