Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e3132312e39322e302f32322d3234203d3e20323632393037.roa
File:                     3136382e3132312e39322e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          7K7Q8jBlrE1Jw9hQZe36Hqmp7XK42VEINhJ9Yi9Z/p4=
Subject key identifier:   E1:AD:BD:F5:6C:DE:57:62:3E:E9:EA:1C:96:31:26:A9:7A:A5:5A:F5
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       7889B4FD2126570830824C9E3E6BE83B4E554F36
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e3132312e39322e302f32322d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:18 +0000
ROA not before:           Sat 03 Feb 2024 12:48:18 +0000
ROA not after:            Sat 01 Feb 2025 12:53:18 +0000
asID:                     262907
IP address blocks:        168.121.92.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:89:b4:fd:21:26:57:08:30:82:4c:9e:3e:6b:e8:3b:4e:55:4f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:18 2024 GMT
            Not After : Feb  1 12:53:18 2025 GMT
        Subject: CN=E1ADBDF56CDE57623EE9EA1C963126A97AA55AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0c:a8:42:df:d4:93:57:97:e0:15:0e:43:37:
                    28:2f:25:f6:9b:01:18:7e:f7:58:ac:fa:25:ea:58:
                    f8:ab:fe:26:b4:39:88:32:80:f2:9c:9d:33:d6:6a:
                    11:a0:ec:8b:05:5b:c7:49:91:ba:04:79:5d:59:9e:
                    46:ba:3d:26:46:52:f1:61:a3:e0:0f:ed:26:bb:b9:
                    a8:61:f4:6c:94:d1:6e:7a:18:d1:ca:74:88:e0:9f:
                    26:1e:3b:6a:ec:85:a1:d1:4c:bf:16:9c:3d:65:a6:
                    26:44:da:c2:fa:67:76:ba:93:d4:32:97:b0:3b:55:
                    33:0b:e8:8d:01:ac:78:72:7d:f8:9b:e6:32:33:ca:
                    38:9c:72:b5:fb:57:69:a3:fb:32:82:45:c5:20:33:
                    a9:18:b6:49:39:8e:1d:d8:ba:74:7b:c4:f4:f8:39:
                    07:53:e1:0c:8d:b8:18:0e:2b:e5:0b:23:6f:ce:95:
                    14:a7:a1:5b:24:16:d1:57:a0:44:19:db:af:b9:e8:
                    0a:06:48:3b:e9:aa:1f:08:27:ff:e7:ed:60:7d:42:
                    b2:e8:9d:0a:10:d9:f7:1c:d5:aa:07:81:59:d2:cd:
                    39:af:fd:aa:f2:3b:af:86:42:c0:75:31:f7:ae:2a:
                    ff:c9:14:5a:89:e1:48:40:fe:87:dc:58:be:2f:d5:
                    88:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AD:BD:F5:6C:DE:57:62:3E:E9:EA:1C:96:31:26:A9:7A:A5:5A:F5
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3136382e3132312e39322e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:c2:24:50:03:2d:0f:5f:5a:28:e8:1a:87:e5:b3:90:3f:1c:
         d1:9a:cb:a2:96:76:e9:75:f0:18:39:be:f7:ce:92:3e:eb:3a:
         18:63:14:dc:ca:1f:1d:fe:3f:75:c4:bc:a2:4c:6b:53:a8:64:
         71:68:eb:42:ef:6e:88:fd:2f:31:ad:2c:76:18:31:e6:e0:17:
         60:ef:ad:cb:19:63:f5:32:2b:45:ab:5f:67:58:d3:f7:02:22:
         81:8f:f7:5a:aa:a6:9c:08:0b:45:30:8a:48:f4:28:2b:0d:e8:
         74:86:ad:cc:99:f9:98:e7:14:f6:84:93:ef:9d:0d:49:8c:ab:
         20:d9:3f:1e:c0:dd:23:09:71:a4:55:7c:10:e0:5c:bd:3f:7d:
         71:51:f3:4d:aa:8b:3b:76:ce:71:c4:bb:06:6c:d4:39:f8:e1:
         c8:42:d7:c4:43:9d:9e:63:b0:d7:06:37:56:b8:ee:f8:00:32:
         c8:85:27:a9:9e:ce:5a:e2:f8:59:8d:1e:55:7d:d4:67:93:8f:
         08:36:18:76:5d:cb:ca:63:35:b5:66:d1:e7:d1:d8:17:8e:36:
         1f:6f:ed:90:cb:09:67:d3:ba:f2:1a:a3:07:79:c1:8a:53:d9:
         f5:b4:57:e6:72:f0:42:55:a3:56:43:4d:91:16:a6:8f:ae:c1:
         18:f3:6e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org