Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e38342e34382e302f32302d3234203d3e20323632393037.roa
File:                     3138372e38342e34382e302f32302d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          47gWzhjY/hPAL42dRo29gINK/ZYL5aS9qyzQG70oNJc=
Subject key identifier:   86:6C:AF:40:A7:33:54:72:55:03:F1:A6:AC:86:DD:05:67:49:CB:CF
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       3A1171F4019D9FDDCD44BA21D30462F66454D9EB
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e38342e34382e302f32302d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:23 +0000
ROA not before:           Sat 03 Feb 2024 12:48:23 +0000
ROA not after:            Sat 01 Feb 2025 12:53:23 +0000
asID:                     262907
IP address blocks:        187.84.48.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:11:71:f4:01:9d:9f:dd:cd:44:ba:21:d3:04:62:f6:64:54:d9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:23 2024 GMT
            Not After : Feb  1 12:53:23 2025 GMT
        Subject: CN=866CAF40A73354725503F1A6AC86DD056749CBCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:2d:f5:dd:f0:b3:17:5b:1f:0f:db:e3:55:
                    93:db:ea:50:77:43:a4:2d:51:c6:d3:43:5c:99:b9:
                    8e:51:73:52:d4:2c:cf:17:96:b9:5d:1c:f6:2a:1e:
                    71:82:a7:80:fb:4d:a3:90:b0:1b:85:29:19:0a:ab:
                    fc:80:24:10:3f:a1:1d:cf:7d:fc:2f:38:66:4c:97:
                    8d:a1:dd:6c:fd:a4:eb:7b:2f:8d:6c:70:8d:59:ef:
                    a6:c6:6f:1a:22:61:f1:cf:43:ec:05:c6:cd:c1:8d:
                    e7:03:79:ec:37:f7:95:82:b7:76:ea:d6:3b:83:bd:
                    35:77:b8:a2:5e:5e:26:2c:a8:b1:57:1a:99:cb:d6:
                    c2:a7:8c:3d:54:27:79:c5:dc:64:1e:ac:64:0f:e3:
                    d8:3a:91:af:cf:2a:1b:da:03:35:c0:92:24:47:f3:
                    9a:97:76:0e:c5:93:68:1c:a5:e4:2a:1c:37:44:ad:
                    c1:c9:8a:c2:d7:d3:99:b2:68:ff:c2:3b:d3:ce:1f:
                    56:1d:37:c4:64:c1:45:e2:43:2a:fc:86:55:06:bc:
                    26:1d:a8:9d:f0:c4:41:3f:6e:1c:73:e8:dc:9a:12:
                    00:97:9f:ab:89:4a:b9:28:62:2d:5f:50:d3:23:15:
                    0e:a7:2b:00:d4:17:10:e9:58:fc:c2:7b:0e:20:d2:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6C:AF:40:A7:33:54:72:55:03:F1:A6:AC:86:DD:05:67:49:CB:CF
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e38342e34382e302f32302d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:a0:13:e1:30:ab:59:5e:37:f5:c3:ab:27:1d:fa:db:ac:9f:
         37:75:ff:7b:a5:16:08:62:13:cc:99:5d:0a:1f:df:f7:81:56:
         6d:cb:64:74:f5:e1:19:08:51:41:a5:1c:55:4c:61:2a:55:03:
         0e:e6:32:4c:0c:04:cb:8b:22:67:03:74:c7:52:64:97:dc:c5:
         71:3d:8a:4c:9a:be:c8:fb:a9:b4:a6:81:43:7d:55:f9:b4:e1:
         b5:de:ac:72:ee:72:d5:56:e4:5c:c7:be:f6:0d:20:92:58:4a:
         8b:01:49:bd:2d:85:54:3f:79:8f:f2:39:99:5e:ba:0b:cb:71:
         53:78:dd:63:fc:d3:8c:d8:da:94:b5:ec:02:80:ee:c1:28:19:
         74:8b:f8:39:0f:36:01:18:e1:f7:86:7d:2b:b6:ae:a0:62:f2:
         49:c8:b9:e6:a7:8e:3e:ca:1f:fa:24:98:22:03:45:5f:11:c5:
         6e:33:90:3a:12:7d:e6:98:5c:3f:82:2d:c7:2d:bf:e2:57:e1:
         96:1e:8f:a0:e2:0c:c7:7a:cc:e0:ef:18:13:9b:c7:1b:0c:ad:
         18:3c:81:1f:0d:e9:83:89:ae:8e:bc:b9:06:b4:94:2f:f5:57:
         28:e7:ce:57:80:e0:82:e2:25:7c:23:bc:93:53:86:4c:8a:76:
         16:6f:28:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 23:29:25 2024 by rpki-client on console-ams.rpki-client.org