Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/3137302e38342e3134382e302f32322d3232203d3e20323635303131.roa
File:                     3137302e38342e3134382e302f32322d3232203d3e20323635303131.roa (raw, json)
Hash identifier:          DmtOQqH4SIKyE1qx5JebS3xDn14j9FssCFuB60ueAbY=
Subject key identifier:   4B:D8:36:35:AB:47:6A:9B:9F:17:C3:27:C9:5C:F4:E4:12:F9:98:9C
Certificate issuer:       /CN=1855AAC48B259BBADA08BA3C6D6EA02E1786C76E
Certificate serial:       0753419ED0F3498281B0F2D7BA1DB9878C0714B4
Authority key identifier: 18:55:AA:C4:8B:25:9B:BA:DA:08:BA:3C:6D:6E:A0:2E:17:86:C7:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/3137302e38342e3134382e302f32322d3232203d3e20323635303131.roa
Signing time:             Thu 04 Apr 2024 11:41:49 +0000
ROA not before:           Thu 04 Apr 2024 11:36:49 +0000
ROA not after:            Thu 03 Apr 2025 11:41:49 +0000
asID:                     265011
IP address blocks:        170.84.148.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 18:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:53:41:9e:d0:f3:49:82:81:b0:f2:d7:ba:1d:b9:87:8c:07:14:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1855AAC48B259BBADA08BA3C6D6EA02E1786C76E
        Validity
            Not Before: Apr  4 11:36:49 2024 GMT
            Not After : Apr  3 11:41:49 2025 GMT
        Subject: CN=4BD83635AB476A9B9F17C327C95CF4E412F9989C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c3:33:26:83:1d:08:b2:5e:e2:69:1f:8f:d4:
                    01:fc:9a:7d:23:e6:2e:25:a0:71:c7:43:64:9c:fb:
                    1e:38:c6:4a:9d:83:9d:4a:39:62:5e:8a:a4:65:57:
                    a6:d1:60:db:86:37:1f:a1:6f:6b:f8:88:07:14:52:
                    5c:60:3a:6f:68:b6:2b:92:54:d7:b6:8c:63:1a:73:
                    93:48:d5:2b:30:ec:5e:ec:bf:6a:14:0e:d1:25:c3:
                    97:b7:55:fa:02:31:13:55:74:ed:29:dc:87:a0:80:
                    f2:a2:a8:e0:8f:af:be:c6:cb:43:dc:1d:0b:67:e6:
                    f5:07:18:f9:2b:f7:bb:28:5f:ea:00:eb:70:ec:e6:
                    bd:52:20:90:98:e8:29:ed:12:1b:69:c7:1f:8b:e4:
                    2f:1e:51:43:9e:ad:6c:ef:91:df:e4:3d:fd:b8:be:
                    e2:48:91:a0:ce:4f:f6:38:d4:e1:54:dc:11:6d:f2:
                    8f:32:d6:54:dc:d6:b0:95:76:16:11:74:56:71:b9:
                    48:a4:c6:8a:73:b2:95:ba:8b:6d:1b:34:e3:d1:83:
                    04:57:71:e3:7d:ad:93:fc:6b:1f:4f:3d:b5:15:f8:
                    56:ce:78:a4:8f:a8:e1:98:39:49:e0:0c:03:21:db:
                    e7:31:a7:01:d5:5f:a4:35:94:87:53:17:93:14:3a:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D8:36:35:AB:47:6A:9B:9F:17:C3:27:C9:5C:F4:E4:12:F9:98:9C
            X509v3 Authority Key Identifier:
                keyid:18:55:AA:C4:8B:25:9B:BA:DA:08:BA:3C:6D:6E:A0:2E:17:86:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/3137302e38342e3134382e302f32322d3232203d3e20323635303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:e8:52:97:ac:12:f9:27:7c:3f:52:2c:eb:f0:19:ee:c7:c1:
         c6:ad:98:cb:2c:b3:c0:d5:9e:36:3f:07:09:f7:1e:e2:01:1f:
         30:62:fe:f0:b2:31:45:7d:1e:8a:9d:07:1e:35:7a:4b:55:bc:
         c0:cf:7c:6f:40:97:49:6d:6f:a9:5a:38:73:ec:14:85:ea:ae:
         17:b8:09:0a:b8:0a:32:54:39:21:d8:c5:79:c5:41:ab:44:8c:
         42:1f:3e:73:85:63:47:0d:51:96:e4:e9:da:0b:c9:81:d7:f7:
         d4:f8:5f:e7:77:c4:e1:10:d6:ad:a0:5a:9d:39:3e:07:d4:a5:
         93:f6:e4:52:92:42:5f:e4:8a:e6:55:52:51:63:ab:e0:7c:e4:
         65:96:ff:21:f0:60:dd:5c:ab:28:75:82:bd:fd:ea:5f:d3:83:
         79:df:24:0e:a4:96:f4:93:b3:cd:97:99:b2:3f:7e:46:84:ac:
         54:1b:31:df:a1:10:95:e8:ac:2d:eb:2d:b0:f8:ce:aa:68:55:
         5e:72:9e:e0:4f:0e:44:4a:d1:19:56:62:da:01:83:5f:48:ca:
         bf:fd:ec:72:21:b3:57:fd:d7:c0:a3:75:ed:47:77:4c:34:d1:
         79:80:ea:9e:b5:a1:07:7d:65:dd:d0:c8:66:fc:22:c4:69:40:
         3b:a1:17:2e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUB1NBntDzSYKBsPLXuh25h4wHFLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg1NUFBQzQ4QjI1OUJCQURBMDhCQTNDNkQ2RUEwMkUx
Nzg2Qzc2RTAeFw0yNDA0MDQxMTM2NDlaFw0yNTA0MDMxMTQxNDlaMDMxMTAvBgNV
BAMTKDRCRDgzNjM1QUI0NzZBOUI5RjE3QzMyN0M5NUNGNEU0MTJGOTk4OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVwzMmgx0Isl7iaR+P1AH8mn0j
5i4loHHHQ2Sc+x44xkqdg51KOWJeiqRlV6bRYNuGNx+hb2v4iAcUUlxgOm9otiuS
VNe2jGMac5NI1Ssw7F7sv2oUDtElw5e3VfoCMRNVdO0p3IeggPKiqOCPr77Gy0Pc
HQtn5vUHGPkr97soX+oA63Ds5r1SIJCY6CntEhtpxx+L5C8eUUOerWzvkd/kPf24
vuJIkaDOT/Y41OFU3BFt8o8y1lTc1rCVdhYRdFZxuUikxopzspW6i20bNOPRgwRX
ceN9rZP8ax9PPbUV+FbOeKSPqOGYOUngDAMh2+cxpwHVX6Q1lIdTF5MUOhJ9AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUS9g2NatHapufF8MnyVz05BL5mJwwHwYDVR0j
BBgwFoAUGFWqxIslm7raCLo8bW6gLheGx24wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BV2Q0TndKVTVNeGYzeWVRM2lKaXh5QjJuemljMXY4NGJxMmhzOUVxUWhn
LzEvMTg1NUFBQzQ4QjI1OUJCQURBMDhCQTNDNkQ2RUEwMkUxNzg2Qzc2RS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xODU1QUFDNDhCMjU5QkJBREEw
OEJBM0M2RDZFQTAyRTE3ODZDNzZFLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
V2Q0TndKVTVNeGYzeWVRM2lKaXh5QjJuemljMXY4NGJxMmhzOUVxUWhnLzEvMzEz
NzMwMmUzODM0MmUzMTM0MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzUz
MDMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKqVJQwDQYJKoZIhvcNAQELBQADggEBAHnoUpesEvkn
fD9SLOvwGe7HwcatmMsss8DVnjY/Bwn3HuIBHzBi/vCyMUV9HoqdBx41ektVvMDP
fG9Al0ltb6laOHPsFIXqrhe4CQq4CjJUOSHYxXnFQatEjEIfPnOFY0cNUZbk6doL
yYHX99T4X+d3xOEQ1q2gWp05PgfUpZP25FKSQl/kiuZVUlFjq+B85GWW/yHwYN1c
qyh1gr396l/Tg3nfJA6klvSTs82XmbI/fkaErFQbMd+hEJXorC3rLbD4zqpoVV5y
nuBPDkRK0RlWYtoBg19Iyr/97HIhs1f918Cjde1Hd0w00XmA6p61oQd9Zd3QyGb8
IsRpQDuhFy4=
-----END CERTIFICATE-----
Generated at Thu Sep 19 21:35:30 2024 by rpki-client on console-fra.rpki-client.org