Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230302e302f32332d3233203d3e203532353837.roa
File:                     3137372e38372e3230302e302f32332d3233203d3e203532353837.roa (raw, json)
Hash identifier:          UQD88++OlmpNg3n4hMPw1x/GCDJngT/tIpnahRJjSEE=
Subject key identifier:   9C:8A:98:1A:D1:9D:75:63:56:BA:3D:BD:2E:8E:01:DD:54:7D:B1:6C
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       0C3B4ADA87C064A840E8386CBAB8F8A346D57E4E
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230302e302f32332d3233203d3e203532353837.roa
Signing time:             Wed 03 Apr 2024 18:50:45 +0000
ROA not before:           Wed 03 Apr 2024 18:45:45 +0000
ROA not after:            Wed 02 Apr 2025 18:50:45 +0000
asID:                     52587
IP address blocks:        177.87.200.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 24 May 2024 18:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3b:4a:da:87:c0:64:a8:40:e8:38:6c:ba:b8:f8:a3:46:d5:7e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Apr  3 18:45:45 2024 GMT
            Not After : Apr  2 18:50:45 2025 GMT
        Subject: CN=9C8A981AD19D756356BA3DBD2E8E01DD547DB16C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:28:c3:d1:8b:83:46:70:db:9e:f2:cf:89:
                    76:7d:cb:47:d7:b8:c7:90:47:d3:bf:35:5d:70:df:
                    1c:bd:c4:44:8f:44:43:16:30:93:d6:6a:92:3b:f7:
                    4d:ff:ef:5d:43:c5:e3:d8:a1:21:15:9a:ae:4d:dc:
                    f3:52:08:e6:eb:d0:17:cb:84:66:32:86:c2:d5:09:
                    56:d5:67:5a:49:71:db:d9:ff:67:b5:06:32:02:36:
                    85:77:28:57:36:80:cd:ae:f5:fb:d6:92:b4:f2:50:
                    b4:6c:3e:3d:e1:48:1c:53:5c:10:33:1c:45:57:e5:
                    fb:29:4d:99:b0:6e:91:7a:b2:90:e7:ab:bc:e0:c5:
                    06:e4:a5:a6:05:61:91:90:49:f1:c1:a4:f2:08:ce:
                    9e:fa:27:77:ff:fa:5c:f0:a0:2a:39:e3:8c:5e:31:
                    95:cd:cf:33:7c:d8:ea:17:b3:6e:de:dc:90:1b:45:
                    36:1a:34:64:90:3c:2e:ca:03:30:6f:b4:54:f5:7a:
                    b4:f1:3b:f7:83:a7:8a:7a:3c:63:3d:c0:13:2f:38:
                    24:0e:0d:b9:24:a0:a5:a6:bb:e4:df:7a:32:e1:27:
                    4d:2a:0b:55:82:f5:d5:6d:6e:62:3f:3c:dc:77:8f:
                    85:49:c0:16:e7:f2:da:db:1d:57:7d:66:0e:8f:36:
                    fd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8A:98:1A:D1:9D:75:63:56:BA:3D:BD:2E:8E:01:DD:54:7D:B1:6C
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230302e302f32332d3233203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:c1:db:f0:5c:ca:f7:54:3d:f6:48:52:ee:18:c3:67:56:94:
         3e:d8:81:cd:8b:27:88:b4:6b:fb:cb:8f:23:da:ca:6c:8e:18:
         48:a7:07:e8:fd:dd:11:69:6e:d2:61:fc:0f:63:a9:c9:53:26:
         4a:5c:97:a0:dd:4c:1a:27:25:b1:44:df:a7:71:39:58:74:23:
         a4:fd:b0:54:17:8a:f5:61:3f:1e:ff:71:cf:73:e7:45:1f:92:
         8e:3e:ef:cd:31:b4:da:58:e8:1b:4d:44:86:3b:87:ca:a5:75:
         8e:64:e7:1d:79:8c:36:2a:59:97:4e:92:0f:49:b6:f5:b0:d8:
         d0:a8:11:7e:cc:88:02:ba:35:09:8f:68:fb:d3:d3:a8:68:79:
         a5:4d:37:ec:88:98:d0:cc:30:05:b2:a4:62:72:54:35:e1:40:
         5c:5e:53:0f:a3:00:a2:35:26:6a:3c:49:16:d5:94:0e:a9:fe:
         25:ed:68:c6:33:cd:0a:3b:82:e5:5c:db:bd:2f:bb:b6:e7:48:
         c3:d9:78:f5:b0:66:3e:8c:0d:0e:30:9d:09:ae:40:d9:1e:7c:
         ac:28:ee:40:32:bc:f6:44:9d:9f:c1:4d:b7:a6:08:5f:07:6a:
         32:3e:e4:59:d8:f4:f5:04:f7:04:f0:07:2a:09:7d:13:ac:4c:
         25:85:8e:22
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDDtK2ofAZKhA6Dhsurj4o0bVfk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENGM0RBREJGNkY0MUREQkZCMjIxMDdENjgyQkFCNDg1
OUVCRUY5NjAeFw0yNDA0MDMxODQ1NDVaFw0yNTA0MDIxODUwNDVaMDMxMTAvBgNV
BAMTKDlDOEE5ODFBRDE5RDc1NjM1NkJBM0RCRDJFOEUwMURENTQ3REIxNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KyjD0YuDRnDbnvLPiXZ9y0fX
uMeQR9O/NV1w3xy9xESPREMWMJPWapI7903/711DxePYoSEVmq5N3PNSCObr0BfL
hGYyhsLVCVbVZ1pJcdvZ/2e1BjICNoV3KFc2gM2u9fvWkrTyULRsPj3hSBxTXBAz
HEVX5fspTZmwbpF6spDnq7zgxQbkpaYFYZGQSfHBpPIIzp76J3f/+lzwoCo544xe
MZXNzzN82OoXs27e3JAbRTYaNGSQPC7KAzBvtFT1erTxO/eDp4p6PGM9wBMvOCQO
DbkkoKWmu+TfejLhJ00qC1WC9dVtbmI/PNx3j4VJwBbn8trbHVd9Zg6PNv11AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnIqYGtGddWNWuj29Lo4B3VR9sWwwHwYDVR0j
BBgwFoAUDPPa2/b0Hdv7IhB9aCurSFnr75YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXJBeXRxWkgxdGlFVFdhbWo4WTgxVk1uUjlDVXB5V3M3U1o1c0Zad2dT
a00vMS8wQ0YzREFEQkY2RjQxRERCRkIyMjEwN0Q2ODJCQUI0ODU5RUJFRjk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRjNEQURCRjZGNDFEREJG
QjIyMTA3RDY4MkJBQjQ4NTlFQkVGOTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlyQXl0cVpIMXRpRVRXYW1qOFk4MVZNblI5Q1VweVdzN1NaNXNGWndnU2tNLzEv
MzEzNzM3MmUzODM3MmUzMjMwMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzUzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVfIMA0GCSqGSIb3DQEBCwUAA4IBAQAcwdvwXMr3
VD32SFLuGMNnVpQ+2IHNiyeItGv7y48j2spsjhhIpwfo/d0RaW7SYfwPY6nJUyZK
XJeg3UwaJyWxRN+ncTlYdCOk/bBUF4r1YT8e/3HPc+dFH5KOPu/NMbTaWOgbTUSG
O4fKpXWOZOcdeYw2KlmXTpIPSbb1sNjQqBF+zIgCujUJj2j709OoaHmlTTfsiJjQ
zDAFsqRiclQ14UBcXlMPowCiNSZqPEkW1ZQOqf4l7WjGM80KO4LlXNu9L7u250jD
2Xj1sGY+jA0OMJ0JrkDZHnysKO5AMrz2RJ2fwU23pghfB2oyPuRZ2PT1BPcE8Acq
CX0TrEwlhY4i
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org