Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3137302e38322e3134302e302f32322d3232203d3e20323634343034.roa
File:                     3137302e38322e3134302e302f32322d3232203d3e20323634343034.roa (raw, json)
Hash identifier:          dxEonL9liAJVlW0+0qLxM6Sp/CNB9gmyVYYZcLO4WUQ=
Subject key identifier:   54:F6:60:3C:6E:80:0A:27:FD:65:AF:FC:33:A9:11:28:B6:03:85:DF
Certificate issuer:       /CN=9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6
Certificate serial:       106C15610CB33B8E08AE30F5BA26983D981294A1
Authority key identifier: 9E:7F:85:E6:64:5B:79:3C:FE:0D:1D:98:7C:09:FB:13:7B:FB:F7:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3137302e38322e3134302e302f32322d3232203d3e20323634343034.roa
Signing time:             Fri 20 Oct 2023 14:40:13 +0000
ROA not before:           Fri 20 Oct 2023 14:35:13 +0000
ROA not after:            Fri 18 Oct 2024 14:40:13 +0000
asID:                     264404
IP address blocks:        170.82.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6c:15:61:0c:b3:3b:8e:08:ae:30:f5:ba:26:98:3d:98:12:94:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6
        Validity
            Not Before: Oct 20 14:35:13 2023 GMT
            Not After : Oct 18 14:40:13 2024 GMT
        Subject: CN=54F6603C6E800A27FD65AFFC33A91128B60385DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:5f:f2:89:cc:a2:20:a4:e7:34:99:5a:a5:
                    60:80:ed:4d:34:00:92:d1:6d:e0:4a:ad:91:04:cf:
                    82:59:86:a4:b3:4f:2e:e5:87:af:68:a8:fa:b7:f2:
                    42:54:7b:9b:51:e9:ee:d0:08:fc:a6:8c:bc:78:0a:
                    e3:64:f3:80:0c:38:91:5b:d6:26:5a:fd:4a:07:99:
                    e0:32:25:09:d1:6f:46:be:0c:4c:4d:7a:95:c5:aa:
                    90:d4:d5:d4:c6:21:b1:ca:b3:e7:14:4b:3e:d8:31:
                    eb:ea:2c:d2:af:1e:1d:b6:ac:44:62:09:e5:20:a4:
                    82:3e:78:f9:11:91:90:a7:92:33:54:36:ed:bf:24:
                    f9:16:28:de:04:65:17:54:55:96:21:d1:a7:91:3f:
                    05:5b:c9:80:d1:b1:83:86:6b:4d:ff:8c:1e:1c:5a:
                    ee:37:fd:cf:0a:03:4e:cd:96:2f:48:1b:97:4c:51:
                    20:ac:92:cf:aa:f8:6c:15:e9:9a:b7:d0:74:22:ad:
                    88:dc:3b:ea:33:05:97:9c:0c:f4:7d:ed:e5:7f:40:
                    90:03:f7:7e:dc:0a:e7:e8:22:55:cd:a4:17:90:bd:
                    22:65:8a:0a:e0:97:fa:40:01:e2:57:c1:02:e1:d4:
                    6b:12:14:a6:31:92:99:2b:d4:67:f3:5d:12:46:79:
                    d0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F6:60:3C:6E:80:0A:27:FD:65:AF:FC:33:A9:11:28:B6:03:85:DF
            X509v3 Authority Key Identifier:
                keyid:9E:7F:85:E6:64:5B:79:3C:FE:0D:1D:98:7C:09:FB:13:7B:FB:F7:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3137302e38322e3134302e302f32322d3232203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:82:a4:6d:b0:4c:03:02:11:ae:f3:27:f6:ae:53:05:63:94:
         f7:46:b6:29:de:e4:53:a4:75:d6:ea:56:f0:1e:2e:2e:2d:2d:
         58:3f:81:3b:3c:98:8f:41:e4:43:70:0a:ad:f0:cd:31:6e:0d:
         88:88:49:9c:61:bc:7a:6a:30:d3:27:99:c0:46:4e:8b:20:51:
         d7:1a:bd:b2:0e:ec:33:6a:5d:1e:a7:c2:22:ce:b8:d1:d9:d0:
         71:a0:c5:35:c1:cd:8f:5d:0d:6a:f1:86:f1:a3:3c:fe:0b:a7:
         eb:2e:81:cb:e6:e3:16:b7:79:37:f2:cc:0a:51:17:1e:87:de:
         32:e0:60:4a:ae:80:cf:bb:80:2a:4e:30:97:15:7f:52:8f:8d:
         40:f0:a9:95:87:db:0d:17:48:6f:c5:d2:e7:f6:22:27:96:de:
         33:aa:e0:91:af:e3:1e:35:1c:2f:bd:34:34:75:e2:db:3c:31:
         c5:2c:9e:6d:c5:ea:36:52:84:4d:82:45:05:c9:65:81:5c:5c:
         51:a5:9a:c2:d4:ac:6a:c8:9c:6a:ae:4c:69:c8:c5:dd:50:c3:
         06:ca:e9:4f:6d:eb:b1:14:b7:5b:4f:59:dd:20:94:c3:e6:e2:
         98:47:2f:ff:69:c6:20:ca:33:12:bc:84:99:e8:d5:c1:d3:4d:
         1d:8d:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 15:38:21 2023 by rpki-client on console-ams.rpki-client.org