Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3139312e362e3136302e302f32322d3234203d3e20323632393037.roa
File:                     3139312e362e3136302e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          2qSt9YHZ0VxTenIeHrVTW9R9uPQMc+OFe5YJ+UAUvBE=
Subject key identifier:   6D:91:F7:EB:A4:44:50:88:68:2B:18:D9:14:D4:D3:FA:A3:70:BA:3B
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       32E6E3BE70CD003C3C8A9529047CD743665C9E43
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3139312e362e3136302e302f32322d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:24 +0000
ROA not before:           Sat 03 Feb 2024 12:48:24 +0000
ROA not after:            Sat 01 Feb 2025 12:53:24 +0000
asID:                     262907
IP address blocks:        191.6.160.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e6:e3:be:70:cd:00:3c:3c:8a:95:29:04:7c:d7:43:66:5c:9e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:24 2024 GMT
            Not After : Feb  1 12:53:24 2025 GMT
        Subject: CN=6D91F7EBA4445088682B18D914D4D3FAA370BA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:e7:95:ca:8f:fc:a8:2f:53:3e:95:ff:aa:
                    ad:27:db:39:48:42:f1:e6:e9:4d:ad:74:95:45:17:
                    aa:14:b4:48:9a:79:31:f9:70:5f:d3:dc:11:f2:bb:
                    84:c2:fd:87:05:4c:bf:8c:4f:e3:83:ac:14:52:ab:
                    aa:ff:3e:dd:39:3c:f4:81:f7:24:41:d0:80:47:71:
                    94:42:81:ac:cd:13:17:5d:0b:92:cc:42:b7:74:c3:
                    98:65:0d:1a:87:06:fb:f4:e5:ac:ca:fc:54:9c:16:
                    5b:70:ba:56:92:ea:c5:0e:be:00:44:2b:7e:8a:cc:
                    9c:cf:23:45:a3:24:a9:95:cb:28:d4:b4:c8:af:a6:
                    f2:44:cb:4e:4e:35:96:cf:f6:05:fc:0d:23:05:34:
                    4e:ef:e1:17:7d:b1:c8:8c:68:9d:20:dd:ab:ea:a1:
                    ba:3c:db:b9:8c:e5:d0:3b:c1:27:9b:0a:6d:1d:4d:
                    4a:a5:f2:40:c3:a3:9c:cc:ac:07:85:f7:f6:6e:0c:
                    07:6e:c3:37:1c:d3:24:3d:e7:8b:f4:b7:04:9f:13:
                    be:4f:87:aa:67:72:b2:00:50:5c:52:37:0f:0b:1f:
                    87:9c:ef:c1:51:13:cf:6c:76:b9:10:a1:a9:06:15:
                    3b:75:9c:92:74:1b:cc:3e:56:95:7c:19:0a:39:31:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:91:F7:EB:A4:44:50:88:68:2B:18:D9:14:D4:D3:FA:A3:70:BA:3B
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3139312e362e3136302e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:3a:52:33:bc:e2:b9:c0:3b:2a:84:f4:85:54:cb:57:bd:f6:
         a5:c7:83:b2:73:f7:5d:65:c7:86:05:de:1e:9b:c6:07:6f:8c:
         08:2f:4b:39:5b:31:42:79:03:de:bd:32:10:4d:7b:9a:53:37:
         75:e5:74:18:61:f3:d9:77:91:69:20:e7:5c:2f:42:04:44:02:
         0b:da:af:c5:cf:9d:c2:7e:32:97:42:14:be:a0:fc:64:7b:90:
         4b:71:e8:08:53:52:8c:f8:a4:c4:8e:5d:87:a9:5f:b7:89:e1:
         2f:75:34:01:10:34:2c:31:0f:6b:a6:06:6d:21:ea:78:36:8d:
         bd:6c:5c:92:62:68:b3:e4:8e:0a:79:f0:ac:9b:3d:55:9a:04:
         52:16:08:2a:ed:b6:4f:77:82:9a:ee:97:a9:73:8e:c7:f6:01:
         0e:dc:2a:9e:17:0d:ce:a6:6d:73:62:1e:ec:e3:4c:70:cd:ed:
         45:e0:5e:fe:6e:54:bd:c3:90:c0:c9:0f:89:0c:29:26:05:71:
         31:7e:0c:c4:31:a5:9c:b4:47:a1:5c:cb:ca:11:de:33:d5:35:
         87:46:ca:77:11:73:be:33:3d:fc:79:10:20:f2:5d:a5:4a:ed:
         1b:49:11:4b:11:c0:56:a5:7b:83:6b:ea:32:b8:20:d0:c2:c5:
         88:79:73:08
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMubjvnDNADw8ipUpBHzXQ2ZcnkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4RTQ4NTVFOEFGNDY4MENDMzgyN0M1RjU0OEQxMUFG
RUVDOTE3ODAeFw0yNDAyMDMxMjQ4MjRaFw0yNTAyMDExMjUzMjRaMDMxMTAvBgNV
BAMTKDZEOTFGN0VCQTQ0NDUwODg2ODJCMThEOTE0RDREM0ZBQTM3MEJBM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TeeVyo/8qC9TPpX/qq0n2zlI
QvHm6U2tdJVFF6oUtEiaeTH5cF/T3BHyu4TC/YcFTL+MT+ODrBRSq6r/Pt05PPSB
9yRB0IBHcZRCgazNExddC5LMQrd0w5hlDRqHBvv05azK/FScFltwulaS6sUOvgBE
K36KzJzPI0WjJKmVyyjUtMivpvJEy05ONZbP9gX8DSMFNE7v4Rd9sciMaJ0g3avq
obo827mM5dA7wSebCm0dTUql8kDDo5zMrAeF9/ZuDAduwzcc0yQ954v0twSfE75P
h6pncrIAUFxSNw8LH4ec78FRE89sdrkQoakGFTt1nJJ0G8w+VpV8GQo5MUcbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbZH366REUIhoKxjZFNTT+qNwujswHwYDVR0j
BBgwFoAUxo5IVeivRoDMOCfF9UjRGv7skXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMC9DNjhFNDg1NUU4QUY0NjgwQ0MzODI3QzVGNTQ4RDExQUZFRUM5MTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2OEU0ODU1RThBRjQ2ODBD
QzM4MjdDNUY1NDhEMTFBRkVFQzkxNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3M3FZUFNLMkRXV2pDQmFtV2hOQzdyZ3JxaENRUEFqZEdIU2RDWm45VjZvLzAv
MzEzOTMxMmUzNjJlMzEzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzkzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvwagMA0GCSqGSIb3DQEBCwUAA4IBAQCOOlIzvOK5
wDsqhPSFVMtXvfalx4Oyc/ddZceGBd4em8YHb4wIL0s5WzFCeQPevTIQTXuaUzd1
5XQYYfPZd5FpIOdcL0IERAIL2q/Fz53CfjKXQhS+oPxke5BLcegIU1KM+KTEjl2H
qV+3ieEvdTQBEDQsMQ9rpgZtIep4No29bFySYmiz5I4KefCsmz1VmgRSFggq7bZP
d4Ka7pepc47H9gEO3CqeFw3Opm1zYh7s40xwze1F4F7+blS9w5DAyQ+JDCkmBXEx
fgzEMaWctEehXMvKEd4z1TWHRsp3EXO+Mz38eRAg8l2lSu0bSRFLEcBWpXuDa+oy
uCDQwsWIeXMI
-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org