Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3134342e302f32342d3234203d3e20323635333033.roa
File:                     3230312e38372e3134342e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          /Y+PRdsGR/EjxPSaXEMLC/dIQy0IxJwmcUCfPBNDffU=
Subject key identifier:   64:39:BE:C8:5C:9C:A1:8B:45:97:F1:B7:17:47:50:A9:74:F1:E2:5F
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       4440441B4BCC71CCFB3B0F40A4D23D48AEA661C5
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3134342e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:05:34 +0000
ROA not before:           Mon 08 Apr 2024 14:00:34 +0000
ROA not after:            Mon 07 Apr 2025 14:05:34 +0000
asID:                     265303
IP address blocks:        201.87.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:40:44:1b:4b:cc:71:cc:fb:3b:0f:40:a4:d2:3d:48:ae:a6:61:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 14:00:34 2024 GMT
            Not After : Apr  7 14:05:34 2025 GMT
        Subject: CN=6439BEC85C9CA18B4597F1B7174750A974F1E25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:95:c7:e6:aa:71:40:f1:3d:06:b0:a0:a8:
                    00:06:fc:5e:4f:de:f7:1a:6a:b5:0d:9a:d7:c3:35:
                    85:98:23:b2:58:49:bc:20:39:ed:ca:31:89:01:af:
                    c6:2e:db:d0:4a:36:9f:f6:c9:4b:3a:83:f1:5a:5f:
                    1d:61:98:90:6b:f6:21:48:47:2f:b8:da:aa:3f:42:
                    8d:15:9b:2c:11:f2:d7:0a:9b:93:d7:52:cf:d9:9b:
                    d1:28:c1:28:f1:c4:fc:d1:3f:1f:af:5f:50:66:d8:
                    d2:3b:e4:69:74:15:79:72:ae:b3:19:69:f6:36:85:
                    f1:1f:34:f7:1e:12:55:e6:f4:6b:7d:fd:78:71:df:
                    29:cc:82:95:46:06:08:45:5f:54:1d:1d:51:e9:65:
                    74:75:c4:06:9c:72:60:14:6d:d2:63:0b:c5:a6:ef:
                    7d:0c:72:82:99:cf:d4:5e:75:72:6a:8e:53:04:a0:
                    b2:c1:2e:1e:36:56:93:e5:8b:7f:10:e1:30:36:6e:
                    9c:b9:f6:44:22:5c:5c:5b:96:59:2e:ae:fa:83:f4:
                    ce:78:63:35:53:c4:c3:98:84:12:62:7b:61:b5:9d:
                    ee:17:2d:fb:79:ad:97:a6:d5:4a:0d:7b:4e:78:69:
                    54:96:16:99:48:85:45:d0:ab:74:31:86:e2:23:cf:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:39:BE:C8:5C:9C:A1:8B:45:97:F1:B7:17:47:50:A9:74:F1:E2:5F
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3134342e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:e0:cf:1f:58:84:ac:69:ea:89:86:18:e7:e0:7b:46:cc:00:
         0a:fa:c6:be:47:24:8d:78:30:52:07:e7:22:eb:18:5b:29:0a:
         db:3b:d7:bc:e7:f5:2c:f9:55:73:72:8f:7d:37:ea:88:33:a2:
         9f:60:c5:b8:1d:53:27:0b:2b:9d:91:80:2f:74:96:03:c1:8e:
         af:f4:32:26:07:34:35:f8:2d:6a:72:c7:cd:b9:6c:d5:26:12:
         ba:15:6c:ae:8d:c5:a5:e2:6d:0c:78:b8:15:db:af:05:e4:27:
         8b:8f:d3:1b:50:61:a3:62:74:07:00:d0:3f:8c:e3:bf:46:67:
         ff:7d:23:47:5d:b7:50:ff:e5:e5:f3:5c:56:1f:f1:af:98:95:
         0c:94:c3:40:11:3e:71:8e:0e:e9:08:0c:98:dd:e0:80:79:bb:
         0c:e6:a4:6f:4a:99:3f:d4:ac:6a:a4:7f:f6:76:93:93:88:ab:
         fb:ff:0c:c6:5b:ca:5d:df:44:42:0c:15:ec:a0:c0:9e:fe:53:
         a7:15:f7:bb:a5:7e:12:56:c6:78:10:2d:fb:16:ce:26:a1:b9:
         06:28:95:0e:20:27:05:98:76:5d:36:27:9f:2d:af:39:47:da:
         42:d5:6e:e1:80:1b:26:1c:32:ef:5c:be:3f:7e:47:6c:6e:6c:
         a3:04:2d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org