Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133332e302f32342d3234203d3e20323635333033.roa
File:                     3230312e38372e3133332e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          vs5o8pZdBMJFv2427y57GDWfXis/Yk9dXEt9zVIDgRg=
Subject key identifier:   36:C2:54:FF:E6:C1:3C:58:51:6B:27:7A:CE:A3:4F:B7:06:A2:FA:98
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       2D386EAC4E72353D62A2F5129AECC7899EBD7A11
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133332e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:02:49 +0000
ROA not before:           Mon 08 Apr 2024 13:57:49 +0000
ROA not after:            Mon 07 Apr 2025 14:02:49 +0000
asID:                     265303
IP address blocks:        201.87.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:38:6e:ac:4e:72:35:3d:62:a2:f5:12:9a:ec:c7:89:9e:bd:7a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:57:49 2024 GMT
            Not After : Apr  7 14:02:49 2025 GMT
        Subject: CN=36C254FFE6C13C58516B277ACEA34FB706A2FA98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:95:64:14:e4:26:b4:51:b6:d5:b6:46:08:
                    e2:d0:e0:61:f0:8e:bb:68:44:c6:2f:0e:0d:6d:84:
                    55:f1:72:bd:90:d9:ca:90:42:f6:ec:53:00:a0:7a:
                    d2:01:d3:09:91:0c:5f:85:b1:5d:ba:c4:0f:10:3e:
                    52:47:73:40:2f:94:8c:32:3f:5a:94:71:26:be:fe:
                    9d:26:c0:c6:46:72:80:9a:fe:6c:de:98:3d:1d:94:
                    28:8a:02:52:b4:c2:56:1c:3b:12:33:24:fd:e4:d3:
                    ab:b9:56:78:2f:36:2d:bd:5b:d6:7d:10:50:b8:a3:
                    c0:2d:55:46:e7:e5:7e:aa:ad:5b:5e:d4:2f:7d:9a:
                    db:0b:91:e2:25:db:68:6a:8f:27:9f:af:c3:43:82:
                    5d:73:64:50:41:a2:b6:50:18:86:4c:ae:48:08:bd:
                    f3:09:e5:84:3e:e9:7a:7b:c1:bb:65:da:db:0d:fd:
                    d6:fd:a4:0a:38:f0:51:a3:cc:29:52:7f:17:bb:fd:
                    d0:03:35:3e:f1:92:d6:5c:cd:52:45:db:58:b5:90:
                    42:43:49:a0:c6:cb:21:6f:09:4b:b0:b8:c9:95:a8:
                    46:31:bf:58:1d:4c:bb:df:b1:2d:d9:ee:23:98:15:
                    ee:94:d1:e2:61:a3:22:ed:63:8d:7a:d2:00:b2:1f:
                    c7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C2:54:FF:E6:C1:3C:58:51:6B:27:7A:CE:A3:4F:B7:06:A2:FA:98
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133332e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:bc:8d:6d:ec:a6:63:4b:69:65:93:e2:00:96:3e:ea:57:ed:
         3c:c9:62:49:2e:60:60:69:63:a2:98:4e:91:a0:13:3b:97:02:
         10:15:76:32:6f:18:f7:d7:c3:f0:28:b3:bf:bf:49:04:9a:e3:
         39:6c:6f:39:5f:d3:03:7d:b8:fb:86:84:5b:f1:1a:80:8b:9b:
         f4:9b:9d:e6:18:43:4e:89:34:42:2b:9f:22:f2:48:09:74:93:
         7c:95:86:39:40:80:ac:0d:54:90:99:49:16:db:a8:03:1d:46:
         d8:66:36:d0:18:1c:7e:4d:bd:7a:dd:b9:06:36:77:4d:ca:93:
         df:3d:b6:1d:bb:97:f8:5c:f6:9b:81:eb:0e:4a:76:82:9f:25:
         6f:5f:b1:0e:85:30:a2:a2:38:3b:78:13:5f:8b:58:3b:0b:06:
         d0:17:c7:d2:bc:05:e2:bc:1a:f5:7e:69:4a:38:c9:25:3e:f7:
         e0:b9:06:d3:ed:b3:33:0c:52:5b:73:49:b2:24:3f:5d:f5:c1:
         cb:10:07:34:4a:40:be:91:a3:53:09:ac:fe:1c:03:a5:16:f8:
         51:f9:fc:26:ee:be:b3:69:f4:cb:87:6f:1c:33:40:a3:6d:2e:
         45:01:13:0d:fd:a2:85:c3:c4:c8:ec:b3:83:35:7b:d9:a3:e4:
         05:15:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 23:29:25 2024 by rpki-client on console-ams.rpki-client.org