Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36352e302f32342d3234203d3e20323632333136.roa
File:                     3137372e37342e36352e302f32342d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          L1b9OLBrSsLVjfc/I71Y/dq0smXchxHlLm+4zkUILvc=
Subject key identifier:   95:59:87:CF:1B:53:F7:98:C6:8D:05:0A:00:83:5E:58:96:9B:9C:1A
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       5310175AD19215897ECDD80FCBAF82B29AFFA6A0
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36352e302f32342d3234203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:38 +0000
ROA not before:           Mon 21 Aug 2023 13:21:38 +0000
ROA not after:            Mon 19 Aug 2024 13:26:38 +0000
asID:                     262316
IP address blocks:        177.74.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:10:17:5a:d1:92:15:89:7e:cd:d8:0f:cb:af:82:b2:9a:ff:a6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:38 2023 GMT
            Not After : Aug 19 13:26:38 2024 GMT
        Subject: CN=955987CF1B53F798C68D050A00835E58969B9C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ae:95:1f:44:91:ab:b3:d7:0a:3a:36:eb:a1:
                    8e:37:ca:02:c7:2f:65:36:75:9f:eb:90:59:28:de:
                    4f:a4:e1:1d:7c:da:10:2e:b4:85:5f:9c:89:27:cd:
                    ae:84:77:3c:e5:ec:48:8d:b2:52:36:cc:a7:ab:81:
                    84:ab:fd:59:be:5b:18:a6:d2:11:07:c2:8b:17:98:
                    2f:28:2b:5b:18:bb:d8:bc:92:4d:12:51:df:64:7a:
                    ac:8b:dd:c1:50:41:c8:d3:97:c2:63:ac:9f:4c:4a:
                    b6:97:12:c6:06:f6:99:fc:fb:5d:fa:7d:7d:97:6e:
                    97:83:9a:12:67:23:90:60:df:7f:42:59:e5:8c:b0:
                    e8:75:90:77:b8:64:00:2a:9f:f2:4e:2c:00:2b:15:
                    65:32:73:f6:17:38:95:0d:f1:0d:86:de:77:12:59:
                    a6:47:7f:f8:5a:fb:9b:7b:81:73:3f:08:b6:1e:26:
                    bb:b7:69:92:c1:f6:ba:24:39:8c:c7:52:84:de:77:
                    b6:aa:c1:ac:36:36:d0:fc:26:65:16:2c:1f:b1:ea:
                    da:30:25:8c:a4:58:e4:6f:f9:9c:37:54:13:7a:56:
                    19:fd:b1:16:cd:c5:8b:35:99:04:f3:ec:21:ea:68:
                    c3:ca:6d:dd:bf:d2:20:e5:7f:92:49:62:91:d4:92:
                    7f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:59:87:CF:1B:53:F7:98:C6:8D:05:0A:00:83:5E:58:96:9B:9C:1A
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36352e302f32342d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:db:6e:bb:e4:27:dc:2a:dc:5f:0d:16:62:aa:bc:ea:02:cc:
         f2:c2:23:a7:91:30:01:14:d9:21:8a:e5:e6:be:e3:29:39:01:
         25:09:e7:28:30:0f:49:73:b6:a4:1e:e8:b0:48:49:78:b1:f1:
         bd:8b:b9:3d:98:43:4a:b6:54:52:ff:58:44:1e:7c:f7:2d:d6:
         b1:22:74:6c:3a:b1:47:bc:3e:ba:23:c4:95:85:fb:5c:ba:8d:
         32:60:a2:67:04:a6:0f:b8:29:13:98:77:7c:c6:e6:98:7d:7b:
         d4:dd:48:4f:bb:bf:c7:5d:02:b6:95:04:84:38:8a:79:7a:a5:
         29:29:82:d4:e5:8e:98:97:87:58:62:81:6a:25:18:26:1e:85:
         80:44:b6:20:0e:d2:8a:09:42:9e:8e:fb:52:4d:21:4f:29:9a:
         75:07:9d:26:fd:37:06:f6:98:37:14:22:e3:66:ac:09:7e:c6:
         3f:56:ac:d8:36:99:06:1c:7f:cf:4a:b5:60:50:fa:d8:b6:38:
         e4:f3:0f:62:95:8d:5e:1d:58:2c:ad:98:19:47:8d:d0:5b:f4:
         31:67:ed:23:38:67:08:6a:fd:73:50:44:77:6a:d3:d1:5e:b0:
         28:12:50:66:fa:fe:9d:3b:ff:e2:9b:38:a2:58:68:0e:fb:4d:
         82:39:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 15:08:39 2023 by rpki-client on console-fra.rpki-client.org