Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3136312e302e302f32322d3234203d3e20323632393037.roa
File:                     3133312e3136312e302e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          fx4THKGrhAFy3dgIcEuwcMYWiydslrheqYoPVQRl0AA=
Subject key identifier:   6B:58:3C:F4:61:81:52:72:0B:53:A9:22:B1:CC:C4:01:CF:4A:40:00
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       233D2E53D6032B3F0DA7678C44862F53ADDA6174
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3136312e302e302f32322d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:20 +0000
ROA not before:           Sat 03 Feb 2024 12:48:20 +0000
ROA not after:            Sat 01 Feb 2025 12:53:20 +0000
asID:                     262907
IP address blocks:        131.161.0.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3d:2e:53:d6:03:2b:3f:0d:a7:67:8c:44:86:2f:53:ad:da:61:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:20 2024 GMT
            Not After : Feb  1 12:53:20 2025 GMT
        Subject: CN=6B583CF4618152720B53A922B1CCC401CF4A4000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4a:b5:fb:31:ca:d3:53:07:0b:64:c0:c9:63:
                    27:17:67:ad:72:b9:50:7b:5c:b0:4c:bb:d7:a0:48:
                    a7:2b:c8:4b:61:2c:11:42:f7:d5:a0:ff:67:e9:0d:
                    ff:27:9c:8b:7d:7e:eb:ed:65:71:47:38:b0:91:21:
                    f4:cd:2f:08:83:be:fd:23:f3:66:01:69:45:86:4e:
                    bf:b3:60:f6:81:be:ab:5b:26:1e:10:ff:51:53:41:
                    7f:06:97:ee:6d:67:30:d4:20:ce:a7:3e:c3:c3:79:
                    15:e6:f9:85:01:f3:d6:84:ed:72:ae:ff:59:98:af:
                    b1:59:49:f7:50:15:0d:54:a7:c5:60:05:78:33:b0:
                    6f:79:e3:df:08:3a:d9:1e:c0:83:51:6b:20:61:57:
                    86:a8:0c:f8:64:91:75:b8:66:27:b8:cd:a6:8c:d0:
                    72:a2:ba:e5:92:17:18:b0:9f:88:d2:a3:e3:bb:ea:
                    f5:97:36:0b:06:d3:d0:d1:09:e5:28:41:7d:e3:bd:
                    ea:4c:cc:07:bf:04:37:67:27:4d:ea:89:cf:5f:e2:
                    a2:12:e9:df:0c:37:67:2b:e0:55:a8:49:c6:1f:13:
                    97:b6:b9:f9:70:5a:f8:f8:98:ea:5c:40:6f:72:72:
                    6a:52:58:f1:17:b2:50:b4:26:e9:bd:95:c3:0c:0b:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:58:3C:F4:61:81:52:72:0B:53:A9:22:B1:CC:C4:01:CF:4A:40:00
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3136312e302e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:63:15:c3:78:3f:a7:e5:eb:d5:8b:07:fc:7f:70:16:63:
         3a:50:19:21:38:5d:77:35:e7:f0:db:eb:e3:c2:88:bf:dd:e6:
         c5:74:fc:1a:8a:65:1e:8e:8c:76:f8:74:61:ef:9d:63:9b:03:
         40:bd:0b:47:a5:4b:fa:d0:23:6a:65:42:6d:e9:f6:67:66:b5:
         d0:35:d0:db:c2:ba:a0:5f:4c:58:2b:09:16:8a:e2:29:19:1d:
         59:77:73:62:86:88:9a:b8:96:2d:c4:11:a0:06:d8:b6:bb:fa:
         00:21:0b:fc:7d:79:d0:b5:96:77:90:4e:93:54:03:c5:67:67:
         6e:91:17:d3:e9:5c:b3:8c:6d:46:5d:11:1f:13:5c:46:57:a1:
         a2:fc:fe:fd:3d:60:0d:fd:1f:3e:3e:d0:9f:2e:08:39:dc:41:
         09:29:7c:c2:d3:89:07:cc:58:9c:f5:7c:4c:09:d6:1b:8c:2b:
         e4:f3:4f:f4:b3:9b:1a:e6:63:d6:8a:79:4c:a3:7a:73:a8:12:
         e8:bb:5f:53:f6:b4:fe:a9:b8:76:f7:05:87:1c:51:41:ef:4a:
         a0:ad:ef:53:00:ee:84:f0:b7:9e:cd:ee:47:00:b4:86:34:58:
         7e:e3:f3:24:82:32:02:ba:17:4f:b0:70:23:62:dd:c3:4f:1f:
         ab:c8:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 23:29:24 2024 by rpki-client on console-ams.rpki-client.org