Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3137302e3233332e3230342e302f32322d3233203d3e20323633333231.roa
File:                     3137302e3233332e3230342e302f32322d3233203d3e20323633333231.roa (raw, json)
Hash identifier:          qHk5JkJjJtPR4ztJNAVpht7wZ2RipUMYBNS9hgiUSr8=
Subject key identifier:   D8:71:7A:0A:C6:FF:D5:B5:A3:22:37:BC:E9:C3:76:19:5A:5D:2B:42
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       1C111F039B7B2C3CA30B77506312E9F5EDB7B5F0
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3137302e3233332e3230342e302f32322d3233203d3e20323633333231.roa
Signing time:             Thu 04 Apr 2024 05:23:23 +0000
ROA not before:           Thu 04 Apr 2024 05:18:23 +0000
ROA not after:            Thu 03 Apr 2025 05:23:23 +0000
asID:                     263321
IP address blocks:        170.233.204.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 11:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:11:1f:03:9b:7b:2c:3c:a3:0b:77:50:63:12:e9:f5:ed:b7:b5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Apr  4 05:18:23 2024 GMT
            Not After : Apr  3 05:23:23 2025 GMT
        Subject: CN=D8717A0AC6FFD5B5A32237BCE9C376195A5D2B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7f:00:66:01:3d:a8:2c:81:85:c9:a0:57:61:
                    e2:37:96:0a:37:24:6b:bf:f9:dc:cc:30:c3:f2:ed:
                    89:1b:07:8d:92:c6:6b:4e:53:c7:7e:7f:7e:b3:ee:
                    dd:17:5d:34:12:95:f4:86:fd:1c:52:1a:d4:f2:6c:
                    e1:04:94:79:a5:a2:ce:3b:9e:31:74:9b:15:0b:8f:
                    f9:0b:a7:b5:3e:e2:3e:28:ab:c7:f8:da:57:7f:09:
                    bb:4d:8f:47:ea:dd:72:5b:3b:96:01:94:db:2f:ce:
                    cc:d3:cd:fc:eb:d0:90:3d:49:07:8a:76:7b:8e:6a:
                    e0:46:18:65:d8:27:10:5a:7b:0d:cf:fe:3c:98:e0:
                    62:fc:69:e9:29:58:8a:f6:36:f4:14:51:11:bb:e6:
                    7f:a6:b1:df:4a:0a:e8:91:70:25:bf:4e:34:7a:11:
                    fe:fe:09:7b:80:f6:b2:e2:3d:93:b1:6b:a5:52:b8:
                    10:d5:fa:a3:ba:2b:15:61:82:b6:c0:cd:a7:80:ea:
                    d6:0f:59:c4:55:6c:10:44:70:f4:2a:ea:3b:88:93:
                    e2:4c:4c:67:52:8f:5c:a4:03:d4:0b:0f:88:ac:dd:
                    0f:d7:b9:0e:14:30:5d:bf:99:67:6b:2a:b6:48:7a:
                    87:4a:f1:95:1d:2a:f7:28:d8:39:22:70:9b:84:b6:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:71:7A:0A:C6:FF:D5:B5:A3:22:37:BC:E9:C3:76:19:5A:5D:2B:42
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3137302e3233332e3230342e302f32322d3233203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:10:b4:24:01:5e:a2:ce:0a:4d:0b:dc:f1:6d:67:53:07:60:
         c3:d1:9c:f5:b3:dc:4d:4c:96:b1:16:16:87:de:cc:f8:fc:3e:
         59:02:57:05:9a:19:6c:d2:8f:92:c0:40:bc:42:b1:6e:e8:d5:
         48:30:6b:6e:ee:1e:b2:79:1f:c7:be:ed:a3:15:08:7e:bc:65:
         80:67:96:4c:6c:a1:ac:c1:e2:f7:57:30:d4:3b:b2:55:10:23:
         16:f3:10:01:6d:f3:33:51:38:2e:e3:62:d4:bd:ae:73:42:17:
         00:41:cf:a8:91:75:ed:51:39:38:9b:4f:4b:49:82:17:27:40:
         bd:c5:54:01:4c:99:da:48:da:55:32:b8:3f:7d:2b:1c:e6:26:
         61:66:7e:7d:2a:c8:56:8f:6e:d4:45:89:a8:21:ae:70:ec:22:
         42:57:b8:d8:b7:f4:a8:c5:b0:2d:9f:54:22:49:2e:42:ad:a7:
         65:0d:0e:24:bf:a3:0f:13:8a:bf:9d:ae:5f:1a:c0:18:78:93:
         31:f4:a3:a6:91:51:05:0b:1a:c9:a2:69:cd:62:7a:20:ff:5e:
         a6:55:ad:0d:a1:5e:88:79:d7:8e:a7:bf:06:d8:0c:18:db:b6:
         11:a8:c5:23:36:22:30:98:b8:98:6e:3a:2d:0c:81:49:87:18:
         89:6c:c0:fe
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHBEfA5t7LDyjC3dQYxLp9e23tfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhCRjAzNjdCNTU5MTIxNzc3QTIxQTg0RDk1M0E3MTdE
NkU4MkFFQTAeFw0yNDA0MDQwNTE4MjNaFw0yNTA0MDMwNTIzMjNaMDMxMTAvBgNV
BAMTKEQ4NzE3QTBBQzZGRkQ1QjVBMzIyMzdCQ0U5QzM3NjE5NUE1RDJCNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYfwBmAT2oLIGFyaBXYeI3lgo3
JGu/+dzMMMPy7YkbB42SxmtOU8d+f36z7t0XXTQSlfSG/RxSGtTybOEElHmlos47
njF0mxULj/kLp7U+4j4oq8f42ld/CbtNj0fq3XJbO5YBlNsvzszTzfzr0JA9SQeK
dnuOauBGGGXYJxBaew3P/jyY4GL8aekpWIr2NvQUURG75n+msd9KCuiRcCW/TjR6
Ef7+CXuA9rLiPZOxa6VSuBDV+qO6KxVhgrbAzaeA6tYPWcRVbBBEcPQq6juIk+JM
TGdSj1ykA9QLD4is3Q/XuQ4UMF2/mWdrKrZIeodK8ZUdKvco2DkicJuEtsI9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2HF6Csb/1bWjIje86cN2GVpdK0IwHwYDVR0j
BBgwFoAUuL8DZ7VZEhd3ohqE2VOnF9boKuowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI4S205dEZvOGo5TG42MTVZa2trZzZUOHJCbmJnUGd3c2hiM2doc1Bq
SHEvMS9COEJGMDM2N0I1NTkxMjE3NzdBMjFBODREOTUzQTcxN0Q2RTgyQUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QkYwMzY3QjU1OTEyMTc3
N0EyMUE4NEQ5NTNBNzE3RDZFODJBRUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyOEttOXRGbzhqOUxuNjE1WWtra2c2VDhyQm5iZ1Bnd3NoYjNnaHNQakhxLzEv
MzEzNzMwMmUzMjMzMzMyZTMyMzAzNDJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMy
MzYzMzMzMzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrpzDANBgkqhkiG9w0BAQsFAAOCAQEAUhC0
JAFeos4KTQvc8W1nUwdgw9Gc9bPcTUyWsRYWh97M+Pw+WQJXBZoZbNKPksBAvEKx
bujVSDBrbu4esnkfx77toxUIfrxlgGeWTGyhrMHi91cw1DuyVRAjFvMQAW3zM1E4
LuNi1L2uc0IXAEHPqJF17VE5OJtPS0mCFydAvcVUAUyZ2kjaVTK4P30rHOYmYWZ+
fSrIVo9u1EWJqCGucOwiQle42Lf0qMWwLZ9UIkkuQq2nZQ0OJL+jDxOKv52uXxrA
GHiTMfSjppFRBQsayaJpzWJ6IP9eplWtDaFeiHnXjqe/BtgMGNu2EajFIzYiMJi4
mG46LQyBSYcYiWzA/g==
-----END CERTIFICATE-----
Generated at Tue Aug 13 14:24:58 2024 by rpki-client on console-ams.rpki-client.org