Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3232203d3e203532363031.roa
File:                     3137302e38332e3130302e302f32322d3232203d3e203532363031.roa (raw, json)
Hash identifier:          mzECoxOtU+kIkVaRzbmXg91TzWf/N1wBWjKxPTGOdHA=
Subject key identifier:   92:6D:D1:6E:AB:AB:BD:4D:C9:C8:23:56:04:B2:AE:2B:A9:D7:85:D1
Certificate issuer:       /CN=393C05C5D41432E0C49D28B3830034F3BD93985A
Certificate serial:       5A3A39F784D1F73CFB25F6FA3895DFDDAF4DAA33
Authority key identifier: 39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3232203d3e203532363031.roa
Signing time:             Thu 16 Nov 2023 15:26:17 +0000
ROA not before:           Thu 16 Nov 2023 15:21:17 +0000
ROA not after:            Thu 14 Nov 2024 15:26:17 +0000
asID:                     52601
IP address blocks:        170.83.100.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3a:39:f7:84:d1:f7:3c:fb:25:f6:fa:38:95:df:dd:af:4d:aa:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=393C05C5D41432E0C49D28B3830034F3BD93985A
        Validity
            Not Before: Nov 16 15:21:17 2023 GMT
            Not After : Nov 14 15:26:17 2024 GMT
        Subject: CN=926DD16EABABBD4DC9C8235604B2AE2BA9D785D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fb:eb:50:2c:c1:a6:ac:c6:28:f0:75:f4:72:
                    a5:b5:a2:e0:1b:df:9b:a0:4e:b9:0c:63:4b:22:e8:
                    ac:c8:67:8a:d1:1a:bd:53:37:65:d8:f9:b0:c1:68:
                    37:c7:81:18:07:45:f5:02:86:4f:28:03:78:b1:03:
                    94:9c:67:3d:54:8b:81:d8:6e:f7:a6:22:11:a9:01:
                    92:43:09:df:17:73:dd:0c:34:3f:6b:ce:13:b9:0e:
                    32:41:17:ab:cc:eb:a9:3d:db:92:1a:a7:bd:08:16:
                    43:79:05:9e:85:c8:74:f4:d8:b1:53:5b:27:91:f4:
                    54:d4:91:d3:b4:ac:37:f8:fa:82:0c:9f:92:43:5b:
                    12:08:4e:94:ae:64:5f:c4:6e:64:ca:45:ca:3a:f5:
                    47:91:2a:3f:93:da:89:7e:1d:88:fa:eb:5b:d0:55:
                    1a:6e:cc:dd:f8:88:d5:f8:ad:68:3c:f5:ec:f4:29:
                    41:48:b2:dc:7b:c4:c7:b4:50:35:78:d6:45:5c:3d:
                    70:78:a0:7c:59:12:e6:ad:e0:60:0c:ba:a3:e2:cc:
                    a2:89:27:b5:7a:64:d5:36:0f:db:e2:ee:1a:09:a9:
                    b3:32:2c:ce:8b:11:ec:54:3f:2f:6b:cc:19:75:0d:
                    f5:93:98:58:5b:37:a7:bf:ac:ee:4b:9f:9b:73:fa:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6D:D1:6E:AB:AB:BD:4D:C9:C8:23:56:04:B2:AE:2B:A9:D7:85:D1
            X509v3 Authority Key Identifier:
                keyid:39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/393C05C5D41432E0C49D28B3830034F3BD93985A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3232203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:fc:ca:ea:93:c6:08:1b:03:35:5c:19:a6:6f:8e:fa:88:3b:
         7d:7e:6e:aa:73:1d:6b:cb:27:8d:62:9f:7e:d4:cb:56:de:92:
         a8:10:1d:02:b0:44:ad:df:27:53:0b:22:89:df:07:b9:47:8b:
         49:88:46:52:8a:17:6b:aa:8c:45:5c:de:43:9b:b6:ec:ba:97:
         6a:86:b3:65:e1:f4:1b:00:37:22:0f:9a:c5:f1:8e:24:bf:7e:
         08:33:fc:46:85:b0:ce:ea:f0:b1:81:b2:57:0f:17:97:58:c7:
         7f:95:8b:c7:72:94:24:9b:8c:61:9f:6c:41:6b:61:5b:f0:b4:
         08:7d:61:f8:e8:c5:d7:52:3d:84:2c:d6:39:8c:8d:61:74:83:
         b8:85:94:df:98:85:0f:f2:47:90:c2:95:bc:2c:51:07:9d:97:
         c0:c1:19:25:d0:05:03:6b:84:35:aa:1a:bb:eb:9c:45:c3:1d:
         00:18:ce:d1:77:dc:41:13:d7:49:18:7f:4d:a9:33:49:70:ae:
         9c:e2:30:51:98:c5:5e:89:57:9f:8b:f7:f4:9b:d5:7a:b8:e3:
         d2:f5:ae:f5:3f:8e:5a:e3:ce:9b:71:be:bd:fd:c2:75:8d:cb:
         2b:12:19:e6:03:dc:e7:23:14:24:a8:32:39:00:cd:ab:1c:43:
         92:41:3b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 03:16:47 2023 by rpki-client on console-fra.rpki-client.org