Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36382e302f32332d3233203d3e20323632333136.roa
File:                     3137372e37342e36382e302f32332d3233203d3e20323632333136.roa (raw, json)
Hash identifier:          /uEP/g23EnbiHg/Qu5vIpuuxcz4HAsE/Qv/vrWSAcRs=
Subject key identifier:   07:70:36:71:CD:5F:E1:58:00:C4:7A:BC:BD:54:63:23:87:92:AD:C5
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       32EADD79C2B14F46E385C4D8375F11177E7E5C3B
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36382e302f32332d3233203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:40 +0000
ROA not before:           Mon 21 Aug 2023 13:21:40 +0000
ROA not after:            Mon 19 Aug 2024 13:26:40 +0000
asID:                     262316
IP address blocks:        177.74.68.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ea:dd:79:c2:b1:4f:46:e3:85:c4:d8:37:5f:11:17:7e:7e:5c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:40 2023 GMT
            Not After : Aug 19 13:26:40 2024 GMT
        Subject: CN=07703671CD5FE15800C47ABCBD5463238792ADC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:23:06:8f:cd:2a:26:ac:16:55:90:d0:2b:
                    5b:3d:6e:a3:5d:86:3e:06:bd:85:33:ab:73:df:2d:
                    dc:04:29:67:a8:6e:a2:e1:fe:a0:14:f6:b4:32:41:
                    7d:fd:cf:d5:46:b4:a6:b0:2d:62:64:cb:b0:39:76:
                    e2:2f:ea:d8:db:ce:30:dc:4b:b6:3d:af:4d:ba:c5:
                    4b:a7:eb:ff:df:da:ab:a8:87:c3:83:39:c2:2c:49:
                    4c:b0:19:d2:5b:fe:83:a5:e9:d6:32:39:2b:cf:82:
                    eb:77:1c:2f:61:d3:7e:fc:87:c0:94:82:3f:e8:82:
                    31:a6:34:59:f8:c9:36:fe:4b:af:d9:30:f3:41:b5:
                    66:3f:89:16:f5:0c:ee:cd:88:d0:28:57:b5:ea:3b:
                    29:e5:30:13:ef:b1:04:72:91:4d:65:d8:2b:4c:63:
                    7e:e1:15:1b:24:10:75:05:05:92:72:a5:65:2d:a5:
                    21:45:47:50:d4:89:13:23:cf:91:b6:88:40:22:bd:
                    db:fb:df:16:e8:d9:bc:2b:70:de:8b:34:66:d5:81:
                    a5:7e:44:6c:39:42:53:42:d3:2f:b2:79:32:77:2c:
                    24:ea:94:c0:06:a0:19:31:83:4a:e3:97:61:bd:71:
                    ff:8a:cd:54:ab:21:44:8a:d9:ba:b1:01:87:07:7e:
                    7f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:70:36:71:CD:5F:E1:58:00:C4:7A:BC:BD:54:63:23:87:92:AD:C5
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36382e302f32332d3233203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:47:dd:9e:57:6b:3f:ce:58:6d:c9:f4:79:d3:52:c1:ae:
         4b:d5:c5:d9:f9:09:6d:ce:86:16:2b:fd:d5:8c:99:07:c1:94:
         e9:e8:5a:d0:fa:d9:71:ad:15:f8:88:9c:0a:13:70:d6:b3:59:
         e6:35:f7:89:7e:95:8b:6a:7e:fd:2f:bc:eb:0d:0a:78:3b:88:
         1c:56:82:33:6c:5e:e5:ea:83:14:7d:90:8f:a4:77:25:0f:42:
         c0:69:04:db:a1:db:b2:21:85:57:49:ae:9d:4d:b5:76:b8:29:
         3b:d3:36:4b:8d:f7:02:90:2d:5c:29:64:d3:5e:56:af:b1:8e:
         34:22:b7:bb:c6:63:4a:05:fc:0a:ce:4f:99:97:dd:a0:79:b8:
         89:5b:bc:0a:da:3b:05:b7:e2:54:80:09:7e:a6:ca:d0:a1:76:
         67:81:6a:82:58:22:bf:b4:d2:64:7a:8d:42:b8:e8:55:a2:e3:
         ca:af:ef:3a:df:cf:cb:98:ae:9c:3a:cb:d3:17:04:18:b6:21:
         c4:62:0d:3b:f6:c0:24:f4:ce:7e:31:25:6f:4d:1b:1b:5d:53:
         40:e1:1e:88:83:31:e7:36:af:4a:b1:ee:8b:cc:0d:65:4d:e3:
         5c:f8:7e:86:1b:94:fb:ca:d8:82:ab:85:f5:5a:21:ca:be:9c:
         93:5b:7b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 15:09:07 2023 by rpki-client on console-ams.rpki-client.org