Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36362e302f32332d3233203d3e20323632333136.roa
File:                     3137372e37342e36362e302f32332d3233203d3e20323632333136.roa (raw, json)
Hash identifier:          5YK4YUTRfA2ytL6s6LwRGM0Epwn+S+b/nrZLV0oUaU0=
Subject key identifier:   CE:79:F3:78:F6:DC:1B:EC:E8:CD:82:9F:5C:C8:23:87:3E:DF:A5:29
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       2DC49D44D53D35AC38B3AED0D22C3294F4AFE744
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36362e302f32332d3233203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:39 +0000
ROA not before:           Mon 21 Aug 2023 13:21:39 +0000
ROA not after:            Mon 19 Aug 2024 13:26:39 +0000
asID:                     262316
IP address blocks:        177.74.66.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c4:9d:44:d5:3d:35:ac:38:b3:ae:d0:d2:2c:32:94:f4:af:e7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:39 2023 GMT
            Not After : Aug 19 13:26:39 2024 GMT
        Subject: CN=CE79F378F6DC1BECE8CD829F5CC823873EDFA529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a8:5f:0c:6d:cb:10:7f:b2:6a:18:7a:9d:74:
                    0c:7c:a5:72:c7:50:95:b6:c8:72:30:d2:59:c2:75:
                    d5:3a:28:99:1c:3c:f6:35:04:48:ca:74:82:d7:a4:
                    9c:20:19:91:6d:c3:0a:fb:66:2a:a5:72:e9:f4:24:
                    84:1a:35:00:e5:b6:09:39:8a:53:ae:7c:5d:3c:1e:
                    f0:81:44:4a:e5:ec:e7:12:5e:2e:6a:eb:05:93:68:
                    3f:5e:96:47:bb:6b:dc:99:ca:f0:bc:56:e7:01:04:
                    98:f1:32:d2:1f:3f:b3:5e:19:6d:4c:59:18:11:90:
                    a0:35:8c:dd:ce:93:96:d2:b5:90:eb:9f:08:36:6b:
                    69:a7:a5:36:0c:c8:60:c1:2f:48:38:1a:c6:ae:f1:
                    1a:68:3b:65:c1:61:4d:e0:28:89:18:83:d1:b0:06:
                    bf:76:db:2a:b2:1d:e7:db:14:cc:b6:f6:ca:12:87:
                    27:28:f7:92:0c:7f:46:41:d8:48:a5:7c:4a:61:e4:
                    0c:24:75:6f:8e:cd:85:fb:be:eb:d3:c5:3b:85:34:
                    c2:c9:0f:41:e8:9e:1a:bd:67:d6:b2:9b:e6:bc:b0:
                    5d:66:85:bc:69:61:19:05:18:0d:8f:25:27:e7:00:
                    af:1e:0e:d0:6b:d9:26:94:6f:63:76:81:7f:2a:23:
                    2b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:79:F3:78:F6:DC:1B:EC:E8:CD:82:9F:5C:C8:23:87:3E:DF:A5:29
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36362e302f32332d3233203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:85:65:1f:16:be:e3:87:63:c9:40:ef:cc:60:3f:dc:ba:07:
         b8:79:f7:86:7b:d2:9c:20:7a:14:3c:61:15:b4:56:d8:d2:f3:
         28:67:ac:12:aa:31:13:69:ba:45:f6:3b:9e:a4:c1:98:73:fa:
         27:2c:62:a6:72:60:a4:d5:45:1f:37:63:c7:bb:8e:04:1e:2f:
         b5:63:24:dd:a4:48:b4:dc:48:ad:5d:79:bc:22:e0:a1:8c:30:
         48:b6:d2:72:d4:98:f3:cd:f5:bf:c8:75:4c:f1:68:a3:b1:f6:
         37:d1:28:54:09:19:27:6f:0d:91:4e:37:d7:bb:3b:e6:ae:76:
         ae:c5:47:85:c5:a3:6f:ec:f0:ef:3d:dc:52:ed:7a:fd:66:ad:
         32:f0:50:e4:4f:00:ca:19:e9:fa:20:cc:23:56:e7:11:d2:c8:
         92:e9:97:24:9e:e7:6e:7e:00:e5:12:8d:7d:d1:fd:b6:75:5d:
         ef:0e:33:07:83:37:9d:02:46:58:8e:a4:33:dd:9d:0a:4c:e7:
         80:9e:5b:c6:4c:ca:79:3d:18:af:74:b8:cf:95:fa:21:9e:4f:
         9b:20:2d:4d:fb:70:da:13:7f:9c:8b:7b:e9:11:22:37:00:1e:
         45:95:76:8e:a4:06:cf:a8:25:83:44:eb:2b:53:17:5b:75:47:
         54:b5:e3:f3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULcSdRNU9Naw4s67Q0iwylPSv50QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2QTEzMkZCOEY5QzFCOThBOUNEQ0YxNTFFQTgyMzUw
QTFFMDgwODAeFw0yMzA4MjExMzIxMzlaFw0yNDA4MTkxMzI2MzlaMDMxMTAvBgNV
BAMTKENFNzlGMzc4RjZEQzFCRUNFOENEODI5RjVDQzgyMzg3M0VERkE1MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgqF8MbcsQf7JqGHqddAx8pXLH
UJW2yHIw0lnCddU6KJkcPPY1BEjKdILXpJwgGZFtwwr7Ziqlcun0JIQaNQDltgk5
ilOufF08HvCBRErl7OcSXi5q6wWTaD9elke7a9yZyvC8VucBBJjxMtIfP7NeGW1M
WRgRkKA1jN3Ok5bStZDrnwg2a2mnpTYMyGDBL0g4Gsau8RpoO2XBYU3gKIkYg9Gw
Br922yqyHefbFMy29soShyco95IMf0ZB2EilfEph5AwkdW+OzYX7vuvTxTuFNMLJ
D0Honhq9Z9aym+a8sF1mhbxpYRkFGA2PJSfnAK8eDtBr2SaUb2N2gX8qIyvjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUznnzePbcG+zozYKfXMgjhz7fpSkwHwYDVR0j
BBgwFoAUzWoTL7j5wbmKnNzxUeqCNQoeCAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DRDZBMTMyRkI4RjlDMUI5OEE5Q0RDRjE1MUVBODIzNTBBMUUwODA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENkExMzJGQjhGOUMxQjk4
QTlDRENGMTUxRUE4MjM1MEExRTA4MDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAv
MzEzNzM3MmUzNzM0MmUzNjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzMzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsUpCMA0GCSqGSIb3DQEBCwUAA4IBAQAKhWUfFr7j
h2PJQO/MYD/cuge4efeGe9KcIHoUPGEVtFbY0vMoZ6wSqjETabpF9juepMGYc/on
LGKmcmCk1UUfN2PHu44EHi+1YyTdpEi03EitXXm8IuChjDBIttJy1JjzzfW/yHVM
8WijsfY30ShUCRknbw2RTjfXuzvmrnauxUeFxaNv7PDvPdxS7Xr9Zq0y8FDkTwDK
Gen6IMwjVucR0siS6ZcknudufgDlEo190f22dV3vDjMHgzedAkZYjqQz3Z0KTOeA
nlvGTMp5PRivdLjPlfohnk+bIC1N+3DaE3+ci3vpESI3AB5FlXaOpAbPqCWDROsr
UxdbdUdUtePz
-----END CERTIFICATE-----
Generated at Thu Sep 14 15:08:39 2023 by rpki-client on console-fra.rpki-client.org