Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3135372e302f32342d3234203d3e20323635333033.roa
File:                     3230312e38372e3135372e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          NdYgt5jI79xOA8bXByvBB0a7bz/dXY3GxkEhPeK2qo0=
Subject key identifier:   2D:29:21:80:26:F4:E8:E3:F9:11:23:D1:9D:FC:0E:F8:C3:C3:C2:55
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       367E6A4990295AE485CBD4C4A0ACC84CB9300C0B
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3135372e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:03:48 +0000
ROA not before:           Mon 08 Apr 2024 13:58:48 +0000
ROA not after:            Mon 07 Apr 2025 14:03:48 +0000
asID:                     265303
IP address blocks:        201.87.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7e:6a:49:90:29:5a:e4:85:cb:d4:c4:a0:ac:c8:4c:b9:30:0c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:58:48 2024 GMT
            Not After : Apr  7 14:03:48 2025 GMT
        Subject: CN=2D29218026F4E8E3F91123D19DFC0EF8C3C3C255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:61:e3:8d:70:8e:7f:a3:e4:c4:7c:a7:01:
                    23:be:40:e4:6e:cf:86:df:7b:1f:93:5f:94:b7:ad:
                    6d:90:17:9c:84:31:47:44:f0:71:9d:86:8b:18:d0:
                    7c:fa:d0:ae:e0:fc:43:29:87:a6:44:ab:b1:99:27:
                    0f:85:a9:02:8b:9f:51:20:79:7d:2a:80:a0:c7:7d:
                    fc:e1:d1:0c:66:90:2a:28:d7:9f:f6:17:58:63:c5:
                    eb:d5:49:25:43:bb:0f:2e:18:46:be:97:e7:83:cf:
                    b8:eb:9e:22:70:6f:77:24:c3:16:54:57:46:7c:9c:
                    24:5f:9a:86:74:f1:85:b2:2b:07:aa:f4:b4:7c:30:
                    7e:2f:4a:8f:8f:98:57:29:c0:fe:9f:ec:36:63:e9:
                    74:f2:cb:82:59:14:9f:c5:fc:c2:7f:1c:8d:e7:1c:
                    ec:6c:ee:0e:61:39:31:cb:ac:40:07:bf:0f:4c:50:
                    8e:39:d4:d2:95:20:a9:52:04:34:13:45:fb:51:f9:
                    86:f6:4d:0f:dc:18:ce:d2:99:08:b3:39:fc:de:43:
                    4c:b0:38:6f:21:11:80:9f:85:53:31:2f:7c:9c:93:
                    08:13:df:d7:cd:86:ab:57:c0:12:90:ac:d8:e1:58:
                    54:bd:eb:ff:38:0f:59:e4:99:ad:98:ed:f4:83:da:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:29:21:80:26:F4:E8:E3:F9:11:23:D1:9D:FC:0E:F8:C3:C3:C2:55
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3135372e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:82:4f:20:ac:57:c9:a0:10:b4:23:37:f5:5d:69:21:f9:
         37:43:1b:32:e6:31:9d:32:da:61:87:5a:d3:a4:51:19:0b:9d:
         c9:43:70:02:cb:ba:55:46:c2:1e:e1:91:92:8f:92:ee:21:3e:
         b0:91:52:fc:06:3a:48:a7:e6:f0:2b:82:ea:e8:43:59:98:51:
         b6:fc:4e:99:40:b0:60:fc:ab:08:61:e3:e4:7f:95:5f:71:e6:
         26:fb:d5:2c:1b:44:13:cc:04:89:da:38:ee:13:16:7c:fb:43:
         d0:e1:63:75:40:96:81:07:27:29:3e:bd:b1:00:fa:2e:1d:69:
         ea:b0:09:f1:b6:05:27:99:84:d3:6f:06:f4:1e:31:b1:ac:4d:
         e3:de:3a:57:66:f6:e0:0b:67:b0:3d:13:47:64:38:48:0d:91:
         ab:1c:8f:e7:e4:61:c4:57:de:c4:23:4b:88:77:1d:2d:af:c1:
         fc:72:1a:37:61:41:99:62:d6:23:89:fe:8c:2a:ce:87:4c:d2:
         9a:e2:6d:b8:9e:98:fc:6c:46:9f:d9:8c:c9:c1:6c:11:dd:66:
         57:03:f6:7e:2f:c6:8a:70:c6:5d:dc:b8:ae:05:da:e6:18:a1:
         3e:32:42:7b:23:9c:f6:c0:5d:94:b7:11:1f:a9:b2:7b:af:a3:
         2a:38:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 23:29:25 2024 by rpki-client on console-ams.rpki-client.org