Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32332d3233203d3e203532363031.roa
File:                     3137372e3132342e37322e302f32332d3233203d3e203532363031.roa (raw, json)
Hash identifier:          RQ/vtkWgxxQBgz5qBposl9vgSugXpkbcqZmDQOibBNg=
Subject key identifier:   0F:37:B2:7B:6C:FE:B7:76:A9:E3:9A:97:0C:25:30:60:63:E7:D8:D8
Certificate issuer:       /CN=393C05C5D41432E0C49D28B3830034F3BD93985A
Certificate serial:       44E0CA67AC9BC29827370EEF0037B9D12A38CA17
Authority key identifier: 39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32332d3233203d3e203532363031.roa
Signing time:             Thu 16 Nov 2023 15:26:18 +0000
ROA not before:           Thu 16 Nov 2023 15:21:18 +0000
ROA not after:            Thu 14 Nov 2024 15:26:18 +0000
asID:                     52601
IP address blocks:        177.124.72.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e0:ca:67:ac:9b:c2:98:27:37:0e:ef:00:37:b9:d1:2a:38:ca:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=393C05C5D41432E0C49D28B3830034F3BD93985A
        Validity
            Not Before: Nov 16 15:21:18 2023 GMT
            Not After : Nov 14 15:26:18 2024 GMT
        Subject: CN=0F37B27B6CFEB776A9E39A970C25306063E7D8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:fc:a6:a1:98:c5:8d:be:c7:dc:a2:2a:79:
                    3e:03:73:c1:65:fa:8d:09:2a:a1:86:01:54:6e:2e:
                    da:f9:78:be:db:d1:cc:01:d8:9c:5f:28:00:26:50:
                    99:e9:bc:54:61:a4:8c:6e:19:2d:97:6c:54:40:65:
                    03:14:4c:de:b5:df:83:4d:25:c3:df:02:08:ee:0c:
                    a3:02:f3:e5:03:b1:86:b5:e5:d5:1e:c6:3e:fc:8c:
                    5f:0a:9b:6f:42:b9:c8:16:10:bf:6c:ad:28:27:08:
                    3f:af:9f:71:b2:6d:4e:87:df:4c:6a:b3:4c:53:f1:
                    2a:79:ef:a3:5c:0f:f9:82:39:69:ed:d8:8e:00:aa:
                    2e:11:4f:77:17:11:41:30:61:59:ee:22:47:f9:c4:
                    6c:d5:00:ff:2a:4d:72:ac:b6:38:8c:ce:e7:4c:4f:
                    7a:19:63:ad:c6:0c:75:51:a4:d2:43:b7:1b:7f:ac:
                    9c:7d:6b:d9:2f:60:91:91:41:40:94:93:f2:5c:7f:
                    21:21:50:6e:86:e0:ce:ab:5b:d8:86:a2:65:17:51:
                    53:00:80:9c:33:15:c5:e5:5d:0e:15:67:ec:5c:85:
                    c7:3d:53:75:b3:74:6d:b5:97:f5:15:15:0e:c1:96:
                    d7:f4:c9:92:87:b6:89:42:67:c9:83:06:e2:29:54:
                    74:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:37:B2:7B:6C:FE:B7:76:A9:E3:9A:97:0C:25:30:60:63:E7:D8:D8
            X509v3 Authority Key Identifier:
                keyid:39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/393C05C5D41432E0C49D28B3830034F3BD93985A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32332d3233203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:7b:ea:ca:b6:67:0a:5c:76:31:f6:4b:8d:b9:04:23:e5:
         f9:62:3f:8a:dd:ff:72:0c:bb:49:ea:18:ec:05:22:8d:40:39:
         07:75:24:63:3c:2a:36:94:9d:d3:e0:24:b4:c4:bf:77:8e:57:
         ba:1a:dd:cd:88:1f:b5:27:ba:88:8f:4e:e5:23:4d:83:83:4c:
         d1:13:30:c5:be:7c:08:68:14:a0:27:32:41:fd:d5:9b:c7:2b:
         c7:5b:78:19:c7:9e:1d:fd:29:1c:69:93:fd:b1:4a:d3:b0:44:
         a0:0f:b8:da:36:d2:73:90:d9:44:32:44:a5:0e:cf:a6:08:a8:
         1c:40:a7:c5:ad:c6:ee:14:b3:19:28:a6:59:70:2a:34:16:70:
         d0:1a:17:69:b2:08:d6:8f:ce:0b:ec:7d:cc:14:25:3d:99:d9:
         fb:d5:83:d5:1e:0e:0f:8d:0c:5e:8d:6f:86:90:f1:17:2a:7c:
         44:1e:99:64:a3:cc:0d:87:f3:c1:d0:90:88:83:32:99:d9:bc:
         21:59:c7:ce:c9:68:62:33:c8:d6:8a:5a:e4:bd:53:39:d8:6c:
         48:ef:b4:7c:70:81:fe:28:37:42:e1:63:0b:47:79:f8:89:03:
         56:49:cb:2b:a2:13:e5:27:fc:40:da:fa:4f:80:39:3b:f3:3d:
         21:62:d9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----