Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32332d3233203d3e20323733343331.roa
File:                     3138362e3232372e37362e302f32332d3233203d3e20323733343331.roa (raw, json)
Hash identifier:          4cITnHZ0wwy30LhbqEIHY5XtguG/aIWLOxBfRau57uY=
Subject key identifier:   70:B6:39:2F:10:1F:12:13:29:69:17:31:49:81:20:78:D0:0E:10:45
Certificate issuer:       /CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
Certificate serial:       35E32B5DCCBE4E102C061E2755F9818A18EE4158
Authority key identifier: 8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32332d3233203d3e20323733343331.roa
Signing time:             Wed 17 Apr 2024 11:37:10 +0000
ROA not before:           Wed 17 Apr 2024 11:32:10 +0000
ROA not after:            Wed 16 Apr 2025 11:37:10 +0000
asID:                     273431
IP address blocks:        186.227.76.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e3:2b:5d:cc:be:4e:10:2c:06:1e:27:55:f9:81:8a:18:ee:41:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
        Validity
            Not Before: Apr 17 11:32:10 2024 GMT
            Not After : Apr 16 11:37:10 2025 GMT
        Subject: CN=70B6392F101F12132969173149812078D00E1045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:52:7a:c2:c1:dd:87:60:83:d8:5d:58:62:
                    53:6c:e2:71:64:1f:87:68:f9:b4:36:2d:88:a1:c9:
                    e8:49:41:81:70:15:c7:f9:60:4e:54:e4:4e:2f:e2:
                    bb:b2:ba:0b:b3:00:62:fc:a0:d7:15:d5:dc:6d:38:
                    cf:e1:71:3f:ef:92:70:06:d4:ff:97:65:68:5c:d8:
                    19:fc:2a:e7:63:1f:d4:30:e9:f2:1f:5c:05:d9:a4:
                    21:f3:20:a5:5b:b1:40:cd:a3:88:f2:83:0e:36:37:
                    fe:84:83:25:98:e3:0f:b4:53:43:23:5c:8e:38:fe:
                    34:38:84:0d:cf:10:65:8d:a8:ce:e1:db:41:dd:e3:
                    bc:6b:19:d5:3a:03:7e:a9:53:51:38:dc:4f:6b:36:
                    ad:29:d2:08:e2:3c:8d:69:d0:16:8b:73:9d:c8:9a:
                    24:63:ad:4c:47:f5:c9:9e:6a:83:47:2c:0f:c9:b8:
                    fc:ea:26:9d:f1:02:d7:6d:12:2c:94:4c:3f:74:d2:
                    a3:b1:1c:ef:de:17:ae:25:80:d6:57:e9:73:4f:7c:
                    99:e6:ed:4f:e2:5f:ce:4e:b3:3e:72:b5:75:cb:38:
                    e2:1c:7b:1a:3b:14:03:4f:5f:b9:39:7c:52:68:a9:
                    2d:3f:04:5e:6d:12:f2:db:49:31:79:85:47:bd:35:
                    ee:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B6:39:2F:10:1F:12:13:29:69:17:31:49:81:20:78:D0:0E:10:45
            X509v3 Authority Key Identifier:
                keyid:8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32332d3233203d3e20323733343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:cb:56:7f:6e:b1:05:5c:73:72:06:51:2c:42:2c:ac:f2:
         6d:de:79:bb:1d:4e:7a:89:89:9b:e1:ae:ae:6c:4b:3d:1d:cb:
         bd:24:cb:55:e1:c7:0a:b0:f6:1e:4c:de:07:dd:47:63:c8:d6:
         98:af:08:65:96:11:63:84:b4:84:15:91:56:29:68:48:1b:06:
         8a:57:b9:3f:a4:fd:06:f3:87:71:e2:15:ba:99:3b:de:6d:23:
         cc:0d:34:77:d9:e7:c7:d3:e3:55:77:9b:85:9d:7f:11:fa:b0:
         84:24:58:21:48:cf:bd:e9:b2:69:23:52:72:89:ba:0d:ae:7d:
         68:65:df:dc:e6:41:0a:f0:62:03:f1:5d:d0:81:a0:6b:86:24:
         18:73:f9:cb:30:ba:71:1d:68:37:87:36:3f:0d:b9:5a:66:b9:
         7d:19:b4:c5:70:c0:05:19:d5:a3:b5:73:ed:25:fe:39:4f:a1:
         59:e1:97:07:0c:e4:3a:0a:92:0d:0f:78:fd:fa:df:e4:34:03:
         b1:94:22:cf:1f:05:3a:1f:2a:f5:1a:71:85:3e:37:4d:12:ad:
         04:5d:96:d5:f2:ae:c2:65:32:52:69:29:92:4a:b0:e6:fe:77:
         f9:65:f6:5e:f3:e6:4f:95:eb:f8:9c:c7:1a:2e:55:a9:7d:36:
         a1:e6:cf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org