Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32322d3234203d3e20323632333933.roa
File:                     3137372e3132392e38302e302f32322d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          N5GEM3EaNp2KGXk+mk1ZzO16cEnN7VRFW7xw663ZoAU=
Subject key identifier:   6D:7A:68:F0:4D:BE:C5:49:AF:B9:9C:E9:EC:25:22:98:FE:6E:54:76
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       0703199F4D374C625E828CA7B8CF0AF802BB80ED
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32322d3234203d3e20323632333933.roa
Signing time:             Thu 04 Apr 2024 18:32:48 +0000
ROA not before:           Thu 04 Apr 2024 18:27:48 +0000
ROA not after:            Thu 03 Apr 2025 18:32:48 +0000
asID:                     262393
IP address blocks:        177.129.80.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 02 May 2024 20:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:03:19:9f:4d:37:4c:62:5e:82:8c:a7:b8:cf:0a:f8:02:bb:80:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Apr  4 18:27:48 2024 GMT
            Not After : Apr  3 18:32:48 2025 GMT
        Subject: CN=6D7A68F04DBEC549AFB99CE9EC252298FE6E5476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0e:b9:f2:d2:a0:e3:91:aa:ac:12:69:6a:f4:
                    9f:fd:33:37:1e:46:3d:14:05:24:b0:f1:53:09:fc:
                    89:29:03:a1:8d:32:62:4f:b6:e4:40:5e:a7:34:d3:
                    51:33:a5:b4:26:26:83:79:33:f5:89:55:fc:f5:ca:
                    a9:4e:e4:3a:3b:6d:8b:3b:60:29:f6:46:48:80:43:
                    b9:64:8e:02:c1:9b:20:52:86:ee:4a:ed:26:01:36:
                    a1:a9:9e:8c:b7:f6:0e:05:b7:65:8a:5c:0e:7c:10:
                    a3:bd:d8:b7:33:a1:91:44:01:87:e2:a1:bd:30:38:
                    06:42:57:51:e4:ee:b8:43:65:26:5c:c9:c2:7c:4a:
                    fd:1d:e1:8e:0a:c2:fb:20:bb:ac:0a:eb:ca:e7:73:
                    59:f5:99:59:a9:e1:8e:44:4a:79:5e:0b:e7:1e:20:
                    53:87:61:b1:78:ca:db:cc:89:db:2d:77:bd:47:3b:
                    97:c0:74:ad:44:b9:a3:57:67:b5:29:54:21:64:18:
                    63:a9:8c:7a:86:10:3e:77:11:17:a4:e3:47:8f:03:
                    81:d3:1f:c0:56:ba:5a:e5:ab:18:c1:a6:0a:23:6c:
                    ca:33:7d:24:73:a6:c0:11:4d:ae:b7:23:5b:01:cd:
                    17:13:57:4f:87:c4:b8:17:0a:bc:3e:8a:82:71:44:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7A:68:F0:4D:BE:C5:49:AF:B9:9C:E9:EC:25:22:98:FE:6E:54:76
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32322d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:f0:5e:95:1f:64:cf:f3:2e:2a:c3:bf:2e:00:15:92:0f:10:
         71:49:78:a8:6c:1d:a4:69:58:04:84:fe:d7:7b:31:ea:17:7f:
         d0:d1:a2:76:c5:36:1c:70:88:0d:f9:37:d1:54:04:ac:c1:73:
         c5:56:69:50:a5:a8:43:86:46:24:24:36:d3:6f:5b:8e:c9:ce:
         a1:e0:9b:68:a7:d3:aa:42:56:b9:68:f9:3b:fc:bd:ff:f1:b2:
         1f:56:7a:33:3f:d5:ff:98:31:39:18:43:3d:dd:0c:57:bc:b8:
         40:d8:e0:7a:bb:4e:f1:ef:78:97:a4:c8:c6:ac:8b:2b:3f:8d:
         96:b1:0c:42:34:8e:c2:2c:2d:5c:94:ad:50:d5:66:8a:23:18:
         af:74:b5:13:51:2a:5f:e5:26:5f:dc:bf:4d:0d:a2:8f:36:25:
         1d:53:74:12:df:40:bd:32:33:fd:2f:ba:88:e6:c5:68:49:45:
         25:e1:47:91:26:3c:d8:55:b8:5c:cf:a4:11:eb:f5:95:48:28:
         37:da:13:7f:99:9b:6d:91:fc:cb:1c:27:40:6b:b9:85:82:26:
         aa:7d:06:d3:e0:a2:1b:a5:98:7d:30:4a:10:0c:b1:0f:8a:92:
         7d:fb:12:32:c1:1e:e0:c5:98:74:8a:89:3e:1d:bb:ac:a3:e4:
         10:8b:01:fc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBwMZn003TGJegoynuM8K+AK7gO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNDA0MDQxODI3NDhaFw0yNTA0MDMxODMyNDhaMDMxMTAvBgNV
BAMTKDZEN0E2OEYwNERCRUM1NDlBRkI5OUNFOUVDMjUyMjk4RkU2RTU0NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkDrny0qDjkaqsEmlq9J/9Mzce
Rj0UBSSw8VMJ/IkpA6GNMmJPtuRAXqc001EzpbQmJoN5M/WJVfz1yqlO5Do7bYs7
YCn2RkiAQ7lkjgLBmyBShu5K7SYBNqGpnoy39g4Ft2WKXA58EKO92LczoZFEAYfi
ob0wOAZCV1Hk7rhDZSZcycJ8Sv0d4Y4Kwvsgu6wK68rnc1n1mVmp4Y5ESnleC+ce
IFOHYbF4ytvMidstd71HO5fAdK1EuaNXZ7UpVCFkGGOpjHqGED53ERek40ePA4HT
H8BWulrlqxjBpgojbMozfSRzpsARTa63I1sBzRcTV0+HxLgXCrw+ioJxRMJ5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbXpo8E2+xUmvuZzp7CUimP5uVHYwHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzEzNzM3MmUzMTMyMzkyZTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxgVAwDQYJKoZIhvcNAQELBQADggEBALjwXpUf
ZM/zLirDvy4AFZIPEHFJeKhsHaRpWASE/td7MeoXf9DRonbFNhxwiA35N9FUBKzB
c8VWaVClqEOGRiQkNtNvW47JzqHgm2in06pCVrlo+Tv8vf/xsh9WejM/1f+YMTkY
Qz3dDFe8uEDY4Hq7TvHveJekyMasiys/jZaxDEI0jsIsLVyUrVDVZoojGK90tRNR
Kl/lJl/cv00Noo82JR1TdBLfQL0yM/0vuojmxWhJRSXhR5EmPNhVuFzPpBHr9ZVI
KDfaE3+Zm22R/MscJ0BruYWCJqp9BtPgohulmH0wShAMsQ+Kkn37EjLBHuDFmHSK
iT4du6yj5BCLAfw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org