Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3139322e302f32302d3234203d3e20323632393037.roa
File:                     3230312e38372e3139322e302f32302d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          T2/xOPTqYddxHYseTZFBOX+cgkiGBkM5syBYZ0qSwOo=
Subject key identifier:   E1:6E:7D:59:65:B9:65:83:24:85:8D:D2:7F:E1:EB:A8:4F:88:A8:9F
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       266A2B1494F3E3978E5A5E49FE98B15463768A23
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3139322e302f32302d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:18 +0000
ROA not before:           Sat 03 Feb 2024 12:48:18 +0000
ROA not after:            Sat 01 Feb 2025 12:53:18 +0000
asID:                     262907
IP address blocks:        201.87.192.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6a:2b:14:94:f3:e3:97:8e:5a:5e:49:fe:98:b1:54:63:76:8a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:18 2024 GMT
            Not After : Feb  1 12:53:18 2025 GMT
        Subject: CN=E16E7D5965B9658324858DD27FE1EBA84F88A89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:ee:03:5f:31:2b:15:62:47:80:dd:49:cd:
                    38:0e:76:a4:9c:fa:65:85:d5:12:4f:b0:8b:96:3f:
                    82:f3:3a:41:c3:38:a1:48:5b:6a:f2:a4:af:e8:e1:
                    2e:96:60:8c:e4:bb:26:25:c1:ee:a3:3f:bf:0e:03:
                    4c:e3:2b:2c:3e:dd:38:ef:24:8b:85:06:3f:a9:86:
                    1b:f7:c3:28:4d:48:f0:78:46:b4:ec:37:04:30:f6:
                    a2:2f:c2:a6:a3:09:6c:6f:05:09:8a:e5:a9:08:8f:
                    0d:c1:aa:c2:b2:10:14:eb:74:e4:e6:83:99:9c:b0:
                    f7:08:3f:16:46:d1:f6:44:92:a2:04:cc:66:18:c4:
                    f1:23:ff:90:f6:69:46:ab:88:20:e5:35:77:82:60:
                    10:34:71:e2:26:35:fb:56:06:1d:ca:84:37:6a:11:
                    e6:b2:d5:8e:59:6d:4a:81:15:98:8a:e2:62:b8:aa:
                    71:ba:30:a6:be:c9:92:25:6d:97:eb:d4:7f:a7:52:
                    bd:87:42:7e:2e:de:e1:d4:20:68:d5:91:2f:07:84:
                    9f:09:e0:2c:a9:b7:d4:b1:ac:b8:6a:a2:97:56:9e:
                    3a:7a:c5:65:90:16:50:24:c5:b4:8c:66:47:88:6c:
                    65:e1:35:d3:f1:0a:8a:ed:eb:8f:a7:9e:19:89:b2:
                    cf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6E:7D:59:65:B9:65:83:24:85:8D:D2:7F:E1:EB:A8:4F:88:A8:9F
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3139322e302f32302d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:69:47:f0:ef:23:84:47:40:f8:11:6f:bb:3b:d5:d2:a7:46:
         2e:9b:41:2d:0d:c6:7b:99:8a:c8:76:bc:7c:d7:76:d4:14:9d:
         a6:55:d3:69:12:18:e8:d3:1c:c7:26:7e:76:c5:03:42:b5:23:
         c9:c9:40:2c:e9:94:c4:aa:36:87:89:3f:05:e7:e4:5d:a2:5a:
         fe:18:2b:61:16:46:d5:7f:9e:49:80:6a:b1:13:1d:fb:f5:32:
         bd:2e:ef:0d:f1:fb:2d:4f:33:88:5b:c6:c2:8f:e4:7d:e8:19:
         35:8d:03:c5:e4:b2:7d:20:f6:23:62:95:c6:77:26:61:00:db:
         2a:f6:3e:83:d5:f9:7a:43:43:5d:f6:bc:09:b2:fb:da:ca:a5:
         7e:67:4e:83:f9:97:df:2b:71:3d:ea:1e:57:dc:85:ad:32:fc:
         1e:5c:52:dd:ab:ce:27:0f:c3:f7:b8:28:d1:0c:a8:c1:0c:b3:
         85:3d:bf:e5:12:7b:e7:0d:73:b8:82:5e:de:b7:5f:21:05:a2:
         61:48:c2:7c:4a:83:7e:d7:66:e4:1a:99:ee:9f:db:2c:82:f3:
         fb:49:85:fe:9b:93:16:f4:86:02:c3:a6:fa:36:94:e3:e1:3e:
         ef:46:02:b0:15:cd:0a:6a:20:ac:30:2e:ec:1f:91:38:05:5e:
         c4:ef:8b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org