Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32322d3232203d3e20323733343331.roa
File:                     3138362e3232372e37362e302f32322d3232203d3e20323733343331.roa (raw, json)
Hash identifier:          ev9F3WEUBsW2Vlnor6PsMx7cu35fcIxnEBF0QzN2wJA=
Subject key identifier:   B5:7A:77:65:4E:AB:0D:0C:B1:24:82:1E:13:32:78:28:6F:C4:47:90
Certificate issuer:       /CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
Certificate serial:       3EC6C59DDE07D266F3049FBCAFBDB4AC5424A177
Authority key identifier: 8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32322d3232203d3e20323733343331.roa
Signing time:             Wed 17 Apr 2024 11:37:09 +0000
ROA not before:           Wed 17 Apr 2024 11:32:09 +0000
ROA not after:            Wed 16 Apr 2025 11:37:09 +0000
asID:                     273431
IP address blocks:        186.227.76.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c6:c5:9d:de:07:d2:66:f3:04:9f:bc:af:bd:b4:ac:54:24:a1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
        Validity
            Not Before: Apr 17 11:32:09 2024 GMT
            Not After : Apr 16 11:37:09 2025 GMT
        Subject: CN=B57A77654EAB0D0CB124821E133278286FC44790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:f8:42:14:ee:53:86:81:2e:d5:00:3a:6f:
                    7b:70:96:7e:95:39:5a:b7:10:c1:e3:13:e2:b1:4a:
                    07:8f:86:eb:ef:aa:f8:5d:a7:88:2d:ce:6d:20:bb:
                    32:15:66:c5:d8:ae:c8:40:b2:4a:3f:5c:7d:70:e8:
                    3c:a3:16:21:ba:fc:f0:94:46:9c:65:f1:d2:89:0d:
                    dd:31:42:9b:1c:c8:81:cf:ae:c9:ce:d6:38:5f:52:
                    a4:57:3b:6d:2f:25:22:7e:9e:41:88:0d:88:94:7d:
                    52:a3:da:18:cf:d7:53:d8:3a:ec:37:e9:93:44:9e:
                    e0:73:4b:ba:a6:c2:8d:1c:16:d7:97:be:67:d4:ce:
                    e0:16:71:90:64:f0:fa:c1:48:2c:98:a0:15:84:6b:
                    35:dd:7b:d2:7b:a3:a7:0d:70:eb:9c:e2:ac:c3:84:
                    0f:88:95:b8:12:20:87:9e:a5:fe:e2:e2:24:f0:42:
                    bd:10:8e:88:3a:ce:27:d5:4f:b2:9d:6f:c9:88:bd:
                    10:ec:65:ff:68:4f:a5:6d:ac:f3:1e:98:32:d0:de:
                    91:e3:99:91:d2:4a:d7:1c:4d:35:1e:88:78:4c:84:
                    72:4d:7a:3a:b1:75:1e:a3:8b:a5:83:2f:9c:05:ac:
                    3e:79:b3:12:aa:17:12:3e:0d:02:4a:1f:4b:b4:14:
                    42:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7A:77:65:4E:AB:0D:0C:B1:24:82:1E:13:32:78:28:6F:C4:47:90
            X509v3 Authority Key Identifier:
                keyid:8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32322d3232203d3e20323733343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:e6:f4:b4:b6:50:67:ec:85:52:ef:2c:dc:4a:5e:9e:31:e8:
         27:2c:77:6c:d3:9a:34:a5:88:c7:a4:2c:fb:70:57:e1:54:c8:
         d8:40:28:d5:04:03:be:3b:44:50:c1:4c:64:7a:1b:ae:c2:a4:
         79:4b:75:d9:55:b2:46:4b:72:9c:c5:ae:8f:f6:80:38:94:e4:
         27:28:b3:ea:66:9b:5b:43:7c:72:a1:c8:f5:85:9b:03:f9:4f:
         63:70:32:6d:59:db:a5:f6:63:a1:7b:4d:ac:50:9e:27:a6:d9:
         86:50:ef:1a:1a:19:76:17:dd:66:bb:23:50:16:f7:22:1e:91:
         15:37:53:e9:ac:e8:c2:e8:5b:2f:32:43:33:77:22:a9:d8:ed:
         15:41:f5:bc:f7:31:9d:82:22:f5:d6:d5:bc:02:f9:ff:cf:95:
         3f:5e:62:46:97:59:b7:19:2f:ff:3d:f4:86:c6:f0:33:42:02:
         c4:d8:82:b5:a6:27:00:7b:b9:36:e2:68:66:e7:af:5c:15:c5:
         ed:c0:ee:9a:4d:f2:f2:24:6a:bb:e4:2d:44:ed:86:d7:63:23:
         ec:a4:8c:0d:a0:0b:0b:51:39:a2:5c:97:34:52:89:8c:b8:11:
         35:d5:a2:0d:51:86:00:6c:fc:aa:09:cb:b3:f8:11:ba:7f:99:
         f8:b1:40:79
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPsbFnd4H0mbzBJ+8r720rFQkoXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERFRTBGOEU0Q0RGRkUxMEZEMUUwMDlCQ0JBMEI3Mzc1
RkVDQkY2QzAeFw0yNDA0MTcxMTMyMDlaFw0yNTA0MTYxMTM3MDlaMDMxMTAvBgNV
BAMTKEI1N0E3NzY1NEVBQjBEMENCMTI0ODIxRTEzMzI3ODI4NkZDNDQ3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUfhCFO5ThoEu1QA6b3twln6V
OVq3EMHjE+KxSgePhuvvqvhdp4gtzm0guzIVZsXYrshAsko/XH1w6DyjFiG6/PCU
Rpxl8dKJDd0xQpscyIHPrsnO1jhfUqRXO20vJSJ+nkGIDYiUfVKj2hjP11PYOuw3
6ZNEnuBzS7qmwo0cFteXvmfUzuAWcZBk8PrBSCyYoBWEazXde9J7o6cNcOuc4qzD
hA+IlbgSIIeepf7i4iTwQr0Qjog6zifVT7Kdb8mIvRDsZf9oT6VtrPMemDLQ3pHj
mZHSStccTTUeiHhMhHJNejqxdR6ji6WDL5wFrD55sxKqFxI+DQJKH0u0FEIlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtXp3ZU6rDQyxJIIeEzJ4KG/ER5AwHwYDVR0j
BBgwFoAUje4Pjkzf/hD9HgCby6C3N1/sv2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3Bt
RlgvMC84REVFMEY4RTRDREZGRTEwRkQxRTAwOUJDQkEwQjczNzVGRUNCRjZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhERUUwRjhFNENERkZFMTBG
RDFFMDA5QkNCQTBCNzM3NUZFQ0JGNkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRpcGs0ZVFkOXpVdWN5RXhMa3NDWXh5SzRTcUVkdkdRc0pMTGs5TXNwbUZYLzAv
MzEzODM2MmUzMjMyMzcyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzMzNDMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK640wwDQYJKoZIhvcNAQELBQADggEBAHrm9LS2
UGfshVLvLNxKXp4x6Ccsd2zTmjSliMekLPtwV+FUyNhAKNUEA747RFDBTGR6G67C
pHlLddlVskZLcpzFro/2gDiU5Ccos+pmm1tDfHKhyPWFmwP5T2NwMm1Z26X2Y6F7
TaxQniem2YZQ7xoaGXYX3Wa7I1AW9yIekRU3U+ms6MLoWy8yQzN3IqnY7RVB9bz3
MZ2CIvXW1bwC+f/PlT9eYkaXWbcZL/899IbG8DNCAsTYgrWmJwB7uTbiaGbnr1wV
xe3A7ppN8vIkarvkLUTthtdjI+ykjA2gCwtROaJclzRSiYy4ETXVog1RhgBs/KoJ
y7P4Ebp/mfixQHk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org