Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e3132342e34392e302f32342d3234203d3e20323632333136.roa
File:                     3137372e3132342e34392e302f32342d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          4Al36xSFs39HfK6juvfO8JoNgYr6DqELd+mIEUGfB7g=
Subject key identifier:   DB:61:D6:D2:B8:39:80:47:98:F0:36:5A:6A:69:69:83:76:BD:1D:8A
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       5EB106A31CD0091C144F5C239C3D1A1E484E8712
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e3132342e34392e302f32342d3234203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:36 +0000
ROA not before:           Mon 21 Aug 2023 13:21:36 +0000
ROA not after:            Mon 19 Aug 2024 13:26:36 +0000
asID:                     262316
IP address blocks:        177.124.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b1:06:a3:1c:d0:09:1c:14:4f:5c:23:9c:3d:1a:1e:48:4e:87:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:36 2023 GMT
            Not After : Aug 19 13:26:36 2024 GMT
        Subject: CN=DB61D6D2B839804798F0365A6A69698376BD1D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0d:12:71:71:67:fb:db:91:2f:3e:9b:99:e3:
                    58:9c:84:d7:b2:61:25:ac:5a:11:89:0c:76:34:07:
                    04:78:79:0e:31:b5:49:28:57:f4:c9:e2:14:97:0f:
                    0f:52:44:83:75:87:d4:22:ae:e8:01:cf:71:df:28:
                    a8:f9:7f:11:05:73:10:b3:94:87:19:49:4d:74:55:
                    85:e4:74:40:43:bc:b7:d7:aa:f6:7c:2f:78:f5:84:
                    08:4a:4f:27:65:81:98:2b:9b:44:b1:e1:ec:08:67:
                    6d:46:7e:8f:12:b9:03:15:45:fb:54:d5:c7:ca:1a:
                    00:b6:da:ef:cc:ab:48:c0:bb:3a:3a:c0:dc:2b:e2:
                    cd:a1:a8:4b:28:e7:74:c9:46:66:96:12:01:c3:2a:
                    1b:71:62:f9:08:6a:4c:28:2c:b2:2b:9b:2e:be:31:
                    2b:bf:3f:4f:37:d8:cb:2b:bf:be:97:7d:6b:5b:cd:
                    19:b5:ff:bd:b8:c9:78:e7:04:c3:9e:61:9f:70:6b:
                    17:57:00:e1:3a:00:e5:06:84:7c:64:a9:3e:d6:8b:
                    e8:12:07:4d:09:69:6e:96:aa:10:4b:cb:e6:90:8b:
                    33:6e:61:83:39:93:8d:93:06:11:24:d2:8c:92:ca:
                    d5:c8:4c:a8:0d:8f:d3:0f:43:8e:76:8b:5d:8b:de:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:61:D6:D2:B8:39:80:47:98:F0:36:5A:6A:69:69:83:76:BD:1D:8A
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e3132342e34392e302f32342d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:9c:a4:b2:d3:5c:b0:cc:56:d0:03:44:7b:f1:bb:02:5e:af:
         bc:76:cd:6c:42:87:71:a3:bc:f4:05:b6:39:6b:f3:43:cb:51:
         33:b4:2b:6b:da:91:d4:13:f6:5a:6c:ee:6a:cc:9e:cf:25:55:
         36:b0:d5:a2:01:bb:93:2a:ee:b4:ee:42:a0:14:a4:18:8e:2c:
         c4:27:96:01:a0:d0:ff:72:53:29:e1:ea:83:50:5e:17:98:4d:
         ef:eb:3a:e2:75:60:a2:4b:27:02:54:ba:b8:fe:1f:c3:59:19:
         0b:92:cb:88:ea:7c:08:f7:4a:86:ce:9e:bc:30:6b:c4:dc:0a:
         ed:0b:d8:ed:73:e1:c5:f2:cc:91:d2:bc:1a:15:46:1e:c1:d8:
         ab:04:2f:ca:c0:21:92:8d:f6:25:66:be:fd:93:bc:d1:19:69:
         67:2f:03:64:34:70:8f:0a:80:b6:15:6c:c3:40:d2:27:2e:7e:
         ec:11:f4:98:91:e3:aa:08:67:94:a4:a2:70:34:20:0f:9d:92:
         d9:10:a0:cb:42:05:7c:f2:2f:70:61:15:26:ee:0e:46:97:41:
         ae:21:ed:7a:51:23:21:c5:a2:d8:14:8f:29:3b:7e:37:ea:fb:
         25:9d:f1:ce:fc:58:14:7d:30:54:81:8d:bf:10:99:9b:3c:5c:
         58:04:5f:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXrEGoxzQCRwUT1wjnD0aHkhOhxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2QTEzMkZCOEY5QzFCOThBOUNEQ0YxNTFFQTgyMzUw
QTFFMDgwODAeFw0yMzA4MjExMzIxMzZaFw0yNDA4MTkxMzI2MzZaMDMxMTAvBgNV
BAMTKERCNjFENkQyQjgzOTgwNDc5OEYwMzY1QTZBNjk2OTgzNzZCRDFEOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDRJxcWf725EvPpuZ41ichNey
YSWsWhGJDHY0BwR4eQ4xtUkoV/TJ4hSXDw9SRIN1h9QirugBz3HfKKj5fxEFcxCz
lIcZSU10VYXkdEBDvLfXqvZ8L3j1hAhKTydlgZgrm0Sx4ewIZ21Gfo8SuQMVRftU
1cfKGgC22u/Mq0jAuzo6wNwr4s2hqEso53TJRmaWEgHDKhtxYvkIakwoLLIrmy6+
MSu/P0832Msrv76XfWtbzRm1/724yXjnBMOeYZ9waxdXAOE6AOUGhHxkqT7Wi+gS
B00JaW6WqhBLy+aQizNuYYM5k42TBhEk0oySytXITKgNj9MPQ452i12L3pcpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU22HW0rg5gEeY8DZaamlpg3a9HYowHwYDVR0j
BBgwFoAUzWoTL7j5wbmKnNzxUeqCNQoeCAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DRDZBMTMyRkI4RjlDMUI5OEE5Q0RDRjE1MUVBODIzNTBBMUUwODA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENkExMzJGQjhGOUMxQjk4
QTlDRENGMTUxRUE4MjM1MEExRTA4MDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAv
MzEzNzM3MmUzMTMyMzQyZTM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxfDEwDQYJKoZIhvcNAQELBQADggEBADmcpLLT
XLDMVtADRHvxuwJer7x2zWxCh3GjvPQFtjlr80PLUTO0K2vakdQT9lps7mrMns8l
VTaw1aIBu5Mq7rTuQqAUpBiOLMQnlgGg0P9yUynh6oNQXheYTe/rOuJ1YKJLJwJU
urj+H8NZGQuSy4jqfAj3SobOnrwwa8TcCu0L2O1z4cXyzJHSvBoVRh7B2KsEL8rA
IZKN9iVmvv2TvNEZaWcvA2Q0cI8KgLYVbMNA0icufuwR9JiR46oIZ5SkonA0IA+d
ktkQoMtCBXzyL3BhFSbuDkaXQa4h7XpRIyHFotgUjyk7fjfq+yWd8c78WBR9MFSB
jb8QmZs8XFgEX8g=
-----END CERTIFICATE-----
Generated at Thu Sep 14 15:09:07 2023 by rpki-client on console-ams.rpki-client.org