Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137302e38302e3130342e302f32322d3234203d3e20323632363035.roa
File:                     3137302e38302e3130342e302f32322d3234203d3e20323632363035.roa (raw, json)
Hash identifier:          z9unSM76C3ORafnejmDoB4/x/1klooPaOGXfRXlpdqk=
Subject key identifier:   93:D2:31:B0:60:14:78:E8:22:88:20:F0:5D:92:67:C5:1D:F4:72:C9
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       13C8AEB73E6DDDF1FC7018F06668FB71912BC7CD
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137302e38302e3130342e302f32322d3234203d3e20323632363035.roa
Signing time:             Sat 03 Feb 2024 12:53:20 +0000
ROA not before:           Sat 03 Feb 2024 12:48:20 +0000
ROA not after:            Sat 01 Feb 2025 12:53:20 +0000
asID:                     262605
IP address blocks:        170.80.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c8:ae:b7:3e:6d:dd:f1:fc:70:18:f0:66:68:fb:71:91:2b:c7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:20 2024 GMT
            Not After : Feb  1 12:53:20 2025 GMT
        Subject: CN=93D231B0601478E8228820F05D9267C51DF472C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:ad:b6:f9:76:49:08:77:75:c6:1c:18:77:
                    89:1e:a4:91:33:96:eb:31:ce:1c:e7:2d:04:85:24:
                    0e:e7:79:83:a8:f8:9e:6f:26:b5:f3:cb:8c:32:99:
                    9d:8f:7e:68:aa:0f:5d:6d:49:90:67:41:a8:ae:79:
                    15:bd:aa:e6:e1:0c:c8:df:47:32:10:5c:a0:44:fc:
                    76:bd:d7:66:60:3d:82:25:1a:6b:b4:d6:30:1f:75:
                    7a:9d:f4:fe:eb:55:80:9e:2b:76:43:0d:22:69:52:
                    4e:22:4c:b2:fe:c8:33:25:b1:81:ad:1e:0f:b6:89:
                    53:c7:11:81:bf:1d:d3:97:71:66:9f:d0:40:54:65:
                    42:58:c8:e4:ad:8c:da:5d:4a:db:30:91:0c:9b:9d:
                    d6:3a:48:ad:48:b9:4b:30:09:2f:0b:1e:72:7c:89:
                    81:84:21:ef:05:ef:f2:d7:75:17:d7:f0:06:8d:e4:
                    93:10:4e:c6:08:ca:17:b4:c9:17:e2:00:b5:21:3c:
                    da:cc:b8:bb:12:d4:d4:2b:43:e1:20:f6:a6:a1:39:
                    d2:80:55:76:29:b6:74:2b:69:f7:f4:fe:7a:b8:13:
                    5e:1f:a6:b1:57:57:7e:d5:fa:c3:22:88:13:0e:82:
                    40:18:90:52:64:3f:4a:0a:0c:7a:f1:44:bf:01:56:
                    b4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D2:31:B0:60:14:78:E8:22:88:20:F0:5D:92:67:C5:1D:F4:72:C9
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137302e38302e3130342e302f32322d3234203d3e20323632363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:8d:eb:1b:32:10:ed:5f:73:c3:e1:1e:db:58:2e:49:22:05:
         5d:2a:d1:dc:c0:70:93:89:9c:1d:ba:6d:e8:9f:09:60:cf:72:
         8a:04:24:c5:cd:25:05:18:7c:70:b6:72:05:fd:10:e4:5c:96:
         eb:63:f1:11:b2:df:3a:e5:f6:ec:ee:68:92:4c:4d:1c:07:7c:
         50:3f:c4:56:12:05:f8:86:bf:cb:81:40:df:50:d7:5e:53:8e:
         79:a5:4d:62:73:b9:cb:d9:a1:25:93:c1:8a:98:c5:60:4f:95:
         3a:ba:67:11:a5:c1:4c:c2:18:76:f6:7a:47:0b:0d:54:9c:5e:
         52:46:e6:0d:f8:64:12:4f:0d:9a:6f:fe:a7:31:b2:0b:d3:0c:
         a5:ac:13:19:50:91:c2:16:8b:46:76:05:8d:cb:a3:13:6b:0e:
         b9:b9:b8:44:04:b5:36:c8:40:89:dd:0d:12:6f:43:66:3b:2f:
         9a:76:35:f5:39:b6:61:83:4b:01:ed:fb:d7:f5:b1:b7:32:18:
         b4:66:8b:60:41:42:1c:a7:42:c5:17:a0:9b:73:68:47:93:b2:
         1b:80:d8:34:42:bc:37:6d:7a:b3:39:b7:cd:01:94:32:21:4d:
         74:90:d1:11:b6:5a:23:76:68:86:25:f6:48:f5:72:fb:40:14:
         4c:6e:ac:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 23:29:24 2024 by rpki-client on console-ams.rpki-client.org