Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3132382e302f32342d3234203d3e20323635333033.roa
File:                     3230312e38372e3132382e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          +HUNaPlYrTInGQMI2wzFX8foMdDKCE5fZSEMIz/a8kI=
Subject key identifier:   88:CE:99:49:D5:2B:48:61:25:88:44:CE:3F:32:1C:D0:AF:A5:8C:05
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       66A0DE2636CF2A13B29667043F8136533556EA3F
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3132382e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:03:27 +0000
ROA not before:           Mon 08 Apr 2024 13:58:27 +0000
ROA not after:            Mon 07 Apr 2025 14:03:27 +0000
asID:                     265303
IP address blocks:        201.87.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a0:de:26:36:cf:2a:13:b2:96:67:04:3f:81:36:53:35:56:ea:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:58:27 2024 GMT
            Not After : Apr  7 14:03:27 2025 GMT
        Subject: CN=88CE9949D52B4861258844CE3F321CD0AFA58C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:91:db:9c:d3:0a:ae:33:ef:26:d4:bf:de:
                    be:3f:ea:aa:d8:de:50:75:3d:a6:1a:c8:6d:c8:12:
                    b6:9d:0c:3a:d1:d2:6b:26:44:ab:98:31:57:ea:fb:
                    cb:47:5e:d6:79:eb:6f:9b:d2:62:f0:fa:f6:82:fa:
                    7b:20:ac:44:59:b6:39:09:a9:2c:c2:52:03:a4:51:
                    35:99:ff:21:09:19:2e:16:94:14:03:bd:1d:3a:81:
                    16:bf:ef:64:de:68:15:1c:75:f7:88:3c:bd:2c:bc:
                    dd:8f:76:cd:2d:2f:42:e3:13:bc:62:d3:0f:66:90:
                    84:b3:79:b9:e7:72:f9:1d:f0:1a:87:10:35:17:b6:
                    b6:51:d9:50:e0:54:15:6f:88:e2:0e:83:b6:f8:b5:
                    93:e6:13:08:fd:36:5d:77:8b:16:34:5c:0f:d6:48:
                    73:4c:4c:d9:8a:67:1e:8a:02:4a:4c:d3:35:b9:cf:
                    3d:61:0d:f5:ca:ad:7a:81:9b:19:df:47:bb:fa:60:
                    26:7e:a9:fc:a6:4e:01:5c:ad:c3:a8:76:28:7d:52:
                    33:cc:cf:d2:be:fb:3e:21:21:c9:d7:c3:d5:af:67:
                    98:9f:a0:38:0e:d3:29:7d:83:e5:fb:fa:6c:44:81:
                    1f:59:bd:2c:d1:1c:be:7c:17:e2:44:2b:2e:84:3f:
                    b4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CE:99:49:D5:2B:48:61:25:88:44:CE:3F:32:1C:D0:AF:A5:8C:05
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3132382e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:14:93:f0:49:bb:a0:7e:49:74:24:9e:ed:f9:ff:2f:72:3d:
         76:40:bf:f8:8e:c6:7c:d1:a5:35:dd:cb:8e:67:58:ab:d7:6e:
         ed:22:36:dd:6c:04:dd:3f:96:23:db:61:71:c5:1a:d3:bc:9a:
         21:39:8d:35:ee:10:ae:33:78:53:49:0c:c7:79:ac:0b:4d:d1:
         b2:3b:f7:93:f8:0e:d9:eb:d6:55:f7:13:da:8e:58:65:7b:49:
         31:44:c9:0d:ec:d1:8a:b2:e2:c5:ad:12:8b:ec:e0:84:c4:f2:
         aa:f4:ad:7c:45:0d:e8:10:c9:73:55:51:18:f5:70:d7:ca:2c:
         1f:79:71:ac:ac:76:29:65:3f:f5:22:4c:42:69:42:f4:e3:46:
         2c:44:5a:14:d1:95:d2:90:ab:e4:69:5c:f5:60:22:c1:c4:db:
         4f:f9:f4:b6:78:47:99:c7:35:98:7c:c7:8c:dd:59:a3:3e:a4:
         b5:64:eb:09:67:bc:36:9f:39:0b:0d:fe:20:6b:9f:ac:d6:19:
         31:89:68:07:91:66:70:62:fc:ab:30:05:0b:58:ed:7b:dc:4d:
         6c:b3:ea:c2:92:da:99:35:08:5b:52:80:6c:1e:fa:7c:d2:9d:
         8b:2b:c3:b8:e2:2a:ce:dc:56:06:b9:09:57:08:bd:68:da:c3:
         bb:dc:4f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 23:29:25 2024 by rpki-client on console-ams.rpki-client.org