Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3139302e38332e33322e302f32322d3234203d3e20323635393131.roa
File:                     3139302e38332e33322e302f32322d3234203d3e20323635393131.roa (raw, json)
Hash identifier:          IAi+ZN9dwj+coqiYUrYNQwYJM9cCsox/VdkfEPEO6/w=
Subject key identifier:   A3:8C:0A:09:1C:BE:23:2D:05:D1:45:4F:E8:75:8D:3F:85:11:8B:DB
Certificate issuer:       /CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
Certificate serial:       17F4B48C5C8D9663CA1D463B41E1DDFFAFCB96B9
Authority key identifier: 1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3139302e38332e33322e302f32322d3234203d3e20323635393131.roa
Signing time:             Sat 22 Jul 2023 15:47:19 +0000
ROA not before:           Sat 22 Jul 2023 15:42:19 +0000
ROA not after:            Sat 20 Jul 2024 15:47:19 +0000
asID:                     265911
IP address blocks:        190.83.32.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f4:b4:8c:5c:8d:96:63:ca:1d:46:3b:41:e1:dd:ff:af:cb:96:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
        Validity
            Not Before: Jul 22 15:42:19 2023 GMT
            Not After : Jul 20 15:47:19 2024 GMT
        Subject: CN=A38C0A091CBE232D05D1454FE8758D3F85118BDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:b8:82:c4:fe:fb:af:0d:dc:91:b2:24:82:
                    d9:f3:f8:31:0d:20:eb:02:83:62:25:0a:d8:50:3e:
                    fe:c0:7e:1b:60:cf:0c:72:de:ee:66:38:e5:6a:ee:
                    4f:d6:39:73:4a:dd:c6:3b:dc:0f:60:37:2b:af:5f:
                    2d:53:e4:e6:32:38:9c:b6:06:ca:66:f8:a4:d9:1f:
                    d8:1f:31:50:73:35:79:a6:61:ac:3e:56:a5:c8:16:
                    77:9a:09:df:03:45:ae:a4:ab:b3:01:6a:1d:e0:31:
                    5b:79:2e:81:26:51:07:fd:81:42:b6:b6:c1:77:97:
                    25:2b:e6:6f:b3:84:b5:a6:c4:c1:9d:9b:a3:d4:dc:
                    05:c4:44:2a:41:17:a4:09:37:2c:4e:e1:9f:1f:ac:
                    94:04:e9:3b:35:1f:9c:dc:1f:d0:25:eb:bc:94:f7:
                    0e:3b:0f:3d:27:b0:75:03:13:cc:e4:79:23:2d:34:
                    ba:2c:e8:85:a5:71:4b:32:0d:33:72:fb:91:57:29:
                    0c:e8:c4:8d:e4:7f:d4:3d:3d:7a:6d:87:02:1c:78:
                    c7:dd:1c:f3:4d:3e:ae:59:1e:46:b9:77:1d:b6:1c:
                    31:7d:c7:41:5d:a3:1b:d6:b6:31:66:d4:23:b4:b0:
                    a1:48:c6:78:b1:d3:39:82:03:5b:3f:8b:8a:91:83:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8C:0A:09:1C:BE:23:2D:05:D1:45:4F:E8:75:8D:3F:85:11:8B:DB
            X509v3 Authority Key Identifier:
                keyid:1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3139302e38332e33322e302f32322d3234203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:53:7b:87:88:a7:dd:7d:a1:69:80:66:1c:07:6d:c5:00:4e:
         3d:f3:54:3e:fe:c5:fc:ae:15:98:65:6e:33:68:f1:c4:aa:5c:
         5d:2d:56:3d:94:0f:8f:93:c7:3b:32:00:30:84:85:5c:dd:c5:
         db:32:07:d9:e1:3a:90:3e:13:59:42:ef:d9:2c:d5:36:0b:2e:
         16:a1:0d:03:5c:db:fe:26:c3:91:b1:3c:96:7b:d3:f2:4d:73:
         61:00:80:f9:27:88:6d:13:da:f5:1b:70:b5:f3:af:61:80:47:
         32:4b:44:8c:08:d0:59:fd:19:82:12:3e:96:76:65:c7:44:9b:
         da:c0:f4:8d:c9:12:55:69:8f:9b:4f:e1:1e:56:ec:80:e4:25:
         e7:26:2d:02:98:c6:29:0c:25:84:d1:8e:62:a6:de:ab:b1:38:
         0e:1a:3e:98:9f:d6:37:3f:55:67:43:be:24:e0:81:2a:b5:97:
         a9:e3:f7:6b:a4:da:a5:b5:40:75:c2:3b:c3:28:6c:bd:ab:af:
         46:14:6b:07:4f:e3:f7:3a:7f:3a:4e:50:93:78:7a:5a:cc:e2:
         39:3b:5b:37:34:65:b8:c8:8b:e4:a9:0c:a6:f0:e0:d6:21:3d:
         84:21:ee:a5:2b:4d:1f:12:40:8e:ac:8d:42:f8:48:c8:3f:fa:
         d2:15:9d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 19:02:23 2023 by rpki-client on console-ams.rpki-client.org