Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e35342e3232372e302f32342d3234203d3e20323632343632.roa
File:                     3137372e35342e3232372e302f32342d3234203d3e20323632343632.roa (raw, json)
Hash identifier:          Cf+ZgivLHn8tdEgq2lAGGHO+XQjSlvrdGOjyqNkfbko=
Subject key identifier:   C3:0A:DB:ED:3C:CE:FE:05:7E:D0:BD:B9:9F:84:39:D4:D1:47:1D:19
Certificate issuer:       /CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
Certificate serial:       3C5EF88635A2557FA9717701FC378B835A2540C0
Authority key identifier: 2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e35342e3232372e302f32342d3234203d3e20323632343632.roa
Signing time:             Wed 16 Aug 2023 05:37:02 +0000
ROA not before:           Wed 16 Aug 2023 05:32:02 +0000
ROA not after:            Wed 14 Aug 2024 05:37:02 +0000
asID:                     262462
IP address blocks:        177.54.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5e:f8:86:35:a2:55:7f:a9:71:77:01:fc:37:8b:83:5a:25:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
        Validity
            Not Before: Aug 16 05:32:02 2023 GMT
            Not After : Aug 14 05:37:02 2024 GMT
        Subject: CN=C30ADBED3CCEFE057ED0BDB99F8439D4D1471D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:84:4e:46:1c:31:b7:2c:64:85:4e:f0:84:41:
                    0e:b4:b3:e4:c9:5d:b1:32:aa:26:00:25:ca:d9:79:
                    54:c6:91:28:38:b3:9e:f2:e1:90:db:8e:e7:6b:29:
                    36:a5:b1:d0:08:fa:6f:6e:3f:45:2c:fe:bd:cf:78:
                    8e:39:87:be:1f:99:6f:c6:f2:8f:22:66:02:83:33:
                    e4:2a:0f:ee:75:ac:34:ec:26:31:db:4f:22:4e:e1:
                    d6:af:1b:00:c9:8e:54:26:ea:74:ce:dc:55:a8:6c:
                    d3:88:d9:d9:b9:41:ab:ec:fc:d5:da:1c:2d:2a:78:
                    8c:12:91:47:6c:2b:25:12:e5:3b:f6:f7:b6:e2:fe:
                    c6:1a:0c:b6:92:c1:7b:73:b2:54:6b:58:03:7c:97:
                    b1:f8:a9:72:8e:bf:aa:07:45:f5:b5:95:0d:b5:46:
                    04:80:4f:35:38:8b:ea:00:bc:79:f6:16:3d:e9:f0:
                    93:ce:7e:34:19:cb:73:b1:4f:ed:69:5f:dc:23:3f:
                    95:7b:b7:d9:ab:ad:6b:9c:e7:17:33:34:49:63:81:
                    cf:0d:14:2a:1a:c2:44:b3:31:74:22:3e:76:51:06:
                    97:7e:43:08:81:44:00:c5:59:2b:c8:3e:7e:99:18:
                    31:05:5d:6e:33:d3:0b:ae:30:e2:62:6e:13:45:75:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0A:DB:ED:3C:CE:FE:05:7E:D0:BD:B9:9F:84:39:D4:D1:47:1D:19
            X509v3 Authority Key Identifier:
                keyid:2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e35342e3232372e302f32342d3234203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:b3:4b:b0:75:de:e9:72:9b:d4:75:3a:a7:e9:f8:9b:74:7f:
         54:7a:c7:9a:5f:0b:07:4e:27:b7:0c:1d:ff:d6:d0:ce:ba:15:
         13:7d:34:2f:63:45:d4:00:6a:27:52:16:4d:ff:94:ba:5b:af:
         b6:da:d8:52:cd:72:56:ce:0a:56:b1:c4:4f:58:ed:bc:e7:f5:
         50:1c:c5:45:91:d9:cb:80:93:d8:43:30:26:4a:37:76:22:65:
         1e:a8:9f:84:2d:8f:3a:52:1e:98:f2:35:38:66:76:6e:ff:b7:
         31:11:5f:45:f8:41:a4:75:7b:7d:2d:17:1d:ce:7e:2b:23:20:
         7d:20:cc:f1:e7:2a:24:a5:a6:0f:32:07:01:fc:e1:ff:6b:80:
         38:16:0a:f3:c6:3b:c0:3d:9b:c1:22:97:54:79:75:34:6b:6e:
         d5:91:fd:e8:dc:58:18:56:7d:e2:13:a3:1f:be:9c:4b:16:a4:
         a3:18:e7:57:d1:61:61:87:3a:4f:09:f3:23:7b:40:dd:bc:c5:
         e7:bb:3e:19:52:ad:fd:2d:e1:28:75:36:f2:67:c2:95:55:b4:
         94:1f:3f:00:a2:a0:89:88:f6:f9:12:a8:c7:d0:c7:82:d5:22:
         a1:3a:4f:41:11:6f:fe:87:b3:d6:e2:ca:cc:94:75:0d:e8:29:
         e6:7e:b0:2c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPF74hjWiVX+pcXcB/DeLg1olQMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRGQ0EwNDAzRTVDQTA5RTNGNUFGNEJBNjNFMkNERkRF
QkEwMDMyRDAeFw0yMzA4MTYwNTMyMDJaFw0yNDA4MTQwNTM3MDJaMDMxMTAvBgNV
BAMTKEMzMEFEQkVEM0NDRUZFMDU3RUQwQkRCOTlGODQzOUQ0RDE0NzFEMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDehE5GHDG3LGSFTvCEQQ60s+TJ
XbEyqiYAJcrZeVTGkSg4s57y4ZDbjudrKTalsdAI+m9uP0Us/r3PeI45h74fmW/G
8o8iZgKDM+QqD+51rDTsJjHbTyJO4davGwDJjlQm6nTO3FWobNOI2dm5Qavs/NXa
HC0qeIwSkUdsKyUS5Tv297bi/sYaDLaSwXtzslRrWAN8l7H4qXKOv6oHRfW1lQ21
RgSATzU4i+oAvHn2Fj3p8JPOfjQZy3OxT+1pX9wjP5V7t9mrrWuc5xczNEljgc8N
FCoawkSzMXQiPnZRBpd+QwiBRADFWSvIPn6ZGDEFXW4z0wuuMOJibhNFdcyDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwwrb7TzO/gV+0L25n4Q51NFHHRkwHwYDVR0j
BBgwFoAULfygQD5coJ4/WvS6Y+LN/eugAy0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFpvSE1zUkRBMkdNQjRTVVJkcmk5Y29GblBCUUJHNWVpaEtZZ2hGbWJu
VTQvMC8yREZDQTA0MDNFNUNBMDlFM0Y1QUY0QkE2M0UyQ0RGREVCQTAwMzJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJERkNBMDQwM0U1Q0EwOUUz
RjVBRjRCQTYzRTJDREZERUJBMDAzMkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRab0hNc1JEQTJHTUI0U1VSZHJpOWNvRm5QQlFCRzVlaWhLWWdoRm1iblU0LzAv
MzEzNzM3MmUzNTM0MmUzMjMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxNuMwDQYJKoZIhvcNAQELBQADggEBAEOzS7B1
3ulym9R1Oqfp+Jt0f1R6x5pfCwdOJ7cMHf/W0M66FRN9NC9jRdQAaidSFk3/lLpb
r7ba2FLNclbOClaxxE9Y7bzn9VAcxUWR2cuAk9hDMCZKN3YiZR6on4QtjzpSHpjy
NThmdm7/tzERX0X4QaR1e30tFx3OfisjIH0gzPHnKiSlpg8yBwH84f9rgDgWCvPG
O8A9m8Eil1R5dTRrbtWR/ejcWBhWfeITox++nEsWpKMY51fRYWGHOk8J8yN7QN28
xee7PhlSrf0t4Sh1NvJnwpVVtJQfPwCioImI9vkSqMfQx4LVIqE6T0ERb/6Hs9bi
ysyUdQ3oKeZ+sCw=
-----END CERTIFICATE-----
Generated at Sun Sep 3 15:20:49 2023 by rpki-client on console-fra.rpki-client.org