Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133392e302f32342d3234203d3e20323635333033.roa
File:                     3230312e38372e3133392e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          c2LDACjPQCdgjbQ3gNKn22S5hjzeNKc+jdV1PxJup60=
Subject key identifier:   0D:C7:DE:46:DF:C3:61:74:18:A2:8A:65:87:3F:93:D8:B4:9B:DC:66
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       0D2D8CF7DB4E01626EB43B463FEC28D1254DD3EB
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133392e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:01:39 +0000
ROA not before:           Mon 08 Apr 2024 13:56:39 +0000
ROA not after:            Mon 07 Apr 2025 14:01:39 +0000
asID:                     265303
IP address blocks:        201.87.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2d:8c:f7:db:4e:01:62:6e:b4:3b:46:3f:ec:28:d1:25:4d:d3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:56:39 2024 GMT
            Not After : Apr  7 14:01:39 2025 GMT
        Subject: CN=0DC7DE46DFC3617418A28A65873F93D8B49BDC66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:fc:95:8a:6d:1a:92:05:c9:6e:3d:84:6f:
                    10:c4:57:46:62:03:f2:07:ef:00:97:f3:23:1d:d1:
                    76:b7:74:22:3b:e1:8b:eb:b6:c1:0e:a1:ca:7c:a2:
                    a2:f5:13:17:72:7a:75:e9:df:d1:08:a5:2d:0d:07:
                    72:47:39:88:39:8b:bc:2f:4d:a8:72:0a:be:bc:19:
                    10:78:86:86:02:76:59:aa:fe:df:cc:65:c5:55:71:
                    29:cb:65:76:b8:e7:4c:2e:af:69:9f:b5:32:e7:bb:
                    72:f7:c6:65:6a:71:be:c0:cb:83:8f:47:ff:4d:9b:
                    c2:8c:ef:1c:88:ba:14:4e:25:a5:73:97:36:a9:6e:
                    f5:c3:b7:27:88:5f:99:0b:0b:26:31:72:67:4a:bf:
                    5d:76:3b:5c:60:67:59:98:92:ad:b5:40:18:22:74:
                    1b:61:d3:80:cc:42:cf:62:a5:90:05:9a:76:19:07:
                    7f:e9:1a:0a:53:35:ac:4a:05:fb:33:75:ba:5e:aa:
                    da:0c:be:10:19:08:34:5e:38:3d:bb:11:2d:b8:db:
                    92:c8:36:b4:6e:ae:b9:2b:aa:d7:02:5e:e6:3a:2f:
                    fd:b2:01:1d:5d:53:e3:dd:f2:af:87:34:fe:c3:26:
                    db:b5:33:f0:5b:e7:d4:a4:2c:11:3c:38:c1:8a:a0:
                    3d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C7:DE:46:DF:C3:61:74:18:A2:8A:65:87:3F:93:D8:B4:9B:DC:66
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133392e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:2f:b3:3c:60:bd:b0:05:d1:7f:8f:a9:2d:a5:77:94:4f:a9:
         19:5a:97:ef:70:dc:2a:66:e2:22:c7:d5:88:f4:39:5e:47:fe:
         ce:e0:5a:ec:67:af:3b:f4:9c:8c:2e:37:cb:03:1c:4c:b1:bd:
         da:25:9b:18:63:12:85:f0:0a:1d:12:42:d9:b7:77:60:a2:f9:
         54:d8:8c:f4:19:5b:e9:69:99:49:fb:ac:9b:9b:c4:7b:a9:a9:
         dc:84:45:5d:0c:6e:88:37:cf:6a:b6:d7:c9:4a:96:e8:5d:e6:
         96:09:67:05:cf:4a:62:b8:79:66:c3:8b:70:8e:cf:e8:60:bf:
         e0:a4:18:f1:1d:ec:1b:b7:40:ff:70:f1:2f:41:d7:8b:0c:3d:
         f8:84:44:59:d6:0e:db:ed:0c:e7:90:b8:49:ba:f6:4a:9c:7f:
         cb:18:bc:27:14:42:a2:14:50:5b:18:ca:7f:47:74:85:53:f2:
         4c:42:2b:06:1c:63:e8:f9:0b:7d:12:e1:4f:e3:50:44:44:d1:
         43:72:65:d2:78:9a:84:b8:16:5c:82:da:98:44:54:50:e6:cb:
         48:67:b9:56:e2:04:b1:c3:b1:0d:e5:a3:80:38:62:43:1d:73:
         a9:60:04:e9:a3:6a:ff:c4:03:4f:8a:b6:39:9c:0d:17:13:1a:
         29:13:e9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 23:29:25 2024 by rpki-client on console-ams.rpki-client.org