Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3134382e302f32332d3234203d3e20323635333033.roa
File:                     3230312e38372e3134382e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          wP94Vz9f8l4nZ7NVgiGH4n9EjngRjlSphvNkbMJ7Ono=
Subject key identifier:   7A:32:34:A5:4E:9C:75:74:6B:F5:3A:FF:C4:4A:A3:63:AD:B4:59:FE
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       6D268B7BAB8EF9054EDB5995B04F138D7108585F
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3134382e302f32332d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:04:57 +0000
ROA not before:           Mon 08 Apr 2024 13:59:57 +0000
ROA not after:            Mon 07 Apr 2025 14:04:57 +0000
asID:                     265303
IP address blocks:        201.87.148.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:26:8b:7b:ab:8e:f9:05:4e:db:59:95:b0:4f:13:8d:71:08:58:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:59:57 2024 GMT
            Not After : Apr  7 14:04:57 2025 GMT
        Subject: CN=7A3234A54E9C75746BF53AFFC44AA363ADB459FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:21:e0:a0:39:81:e7:5c:78:f9:83:76:57:
                    eb:89:a7:43:57:5c:c0:e1:c0:ff:f4:f6:6a:46:ac:
                    88:20:47:6d:51:2e:f6:57:da:1b:95:3b:b0:34:67:
                    ab:c6:f5:e2:57:d6:a1:8a:37:97:7d:75:11:7f:aa:
                    fa:03:b1:1e:65:dc:b7:94:16:1e:b1:b4:7d:65:cb:
                    d9:fc:2e:17:07:a4:5e:bc:28:da:70:2b:d9:0c:b2:
                    d7:47:91:14:b4:de:d8:4f:c1:ca:92:4b:0f:a5:29:
                    c5:58:bb:ec:72:2a:d9:8c:71:2f:dd:06:a2:6f:e9:
                    9c:d0:f8:c0:c9:70:ad:52:43:ba:8e:29:1d:9c:0f:
                    38:27:9f:8a:46:34:97:e4:ac:11:9b:ef:f1:71:e7:
                    e9:52:07:0d:1b:3f:6a:83:66:96:3b:ee:c8:7e:2b:
                    85:7b:05:63:dd:a5:76:f9:38:42:19:3a:fc:99:f2:
                    38:88:ec:41:91:48:16:c7:10:1a:28:1e:22:ea:aa:
                    87:38:95:f8:32:35:3f:22:25:fc:52:17:89:28:b7:
                    b9:d9:35:06:7e:93:98:2a:e6:fc:66:cc:a0:cc:7e:
                    c1:fe:73:7f:3a:03:91:d6:a6:42:ae:9b:45:24:70:
                    75:49:79:69:a0:40:63:d3:0a:87:2c:87:05:a8:e4:
                    11:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:32:34:A5:4E:9C:75:74:6B:F5:3A:FF:C4:4A:A3:63:AD:B4:59:FE
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3134382e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:1b:e6:bc:1d:b3:9c:27:c3:a6:bc:f0:1f:81:ed:d6:d5:79:
         ec:af:3d:35:5f:f2:3b:2e:a3:28:ea:8c:49:76:c4:6f:cf:2b:
         2b:2f:9e:64:54:31:d1:52:36:27:0f:1c:ee:d8:40:3f:ad:53:
         72:d4:ec:f2:d5:df:d6:be:de:61:9b:c8:26:24:8c:03:b0:df:
         be:5e:c3:ba:95:83:e7:f2:33:49:f0:67:ed:ec:4c:58:b8:5c:
         22:c6:b3:76:44:92:17:4b:18:dc:fa:c2:51:df:fa:aa:27:34:
         bd:d0:76:af:01:a2:8b:c9:44:5d:eb:66:22:ab:43:78:d0:54:
         71:c8:25:89:ee:d1:12:09:d4:50:5b:c2:c2:b5:17:4b:69:00:
         3d:b2:a2:df:b0:cf:6f:92:ff:9b:31:65:bd:1b:27:83:22:4a:
         08:f5:1c:e8:96:b5:99:3e:d8:3a:f0:7c:4a:77:bf:a9:d5:26:
         0b:bf:2e:4f:05:6e:b2:f7:dc:59:27:f6:cc:09:a8:90:57:94:
         32:61:4c:ca:31:59:6e:ce:18:93:e9:d6:05:55:ec:d9:ff:22:
         ad:08:f3:1d:3c:9d:9b:3b:42:cd:3b:b7:67:d1:fd:ad:76:5d:
         ca:40:cd:95:45:80:c8:41:c6:4a:bd:a7:a1:5c:54:1c:51:da:
         57:78:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org