Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39322e302f32322d3232203d3e20323536363030.roa
File:                     3137302e37382e39322e302f32322d3232203d3e20323536363030.roa (raw, json)
Hash identifier:          DVg2+KbtnDkXuqY6POmYDbHFRyA+JTEftw6PKQ3KrKo=
Subject key identifier:   C2:AB:13:EC:55:34:FC:F0:58:0C:7A:7F:1D:68:06:F4:1C:6E:AC:CA
Certificate issuer:       /CN=2B36FD67FD146F6ABC421C609744891EA7512F17
Certificate serial:       06105F44CEA4EC2E8193B44A146DC14D5FDC58CD
Authority key identifier: 2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39322e302f32322d3232203d3e20323536363030.roa
Signing time:             Thu 04 Apr 2024 05:43:34 +0000
ROA not before:           Thu 04 Apr 2024 05:38:34 +0000
ROA not after:            Thu 03 Apr 2025 05:43:34 +0000
asID:                     256600
IP address blocks:        170.78.92.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 14:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:10:5f:44:ce:a4:ec:2e:81:93:b4:4a:14:6d:c1:4d:5f:dc:58:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B36FD67FD146F6ABC421C609744891EA7512F17
        Validity
            Not Before: Apr  4 05:38:34 2024 GMT
            Not After : Apr  3 05:43:34 2025 GMT
        Subject: CN=C2AB13EC5534FCF0580C7A7F1D6806F41C6EACCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4b:b8:7f:30:55:96:f3:d9:ad:3b:83:44:87:
                    a7:21:82:60:0f:17:9c:23:51:7a:af:8f:7e:d9:d8:
                    6d:d2:09:61:6e:aa:56:3e:d3:82:61:b1:28:e6:38:
                    3d:b2:b0:e1:53:20:2b:0c:54:18:e2:6a:36:08:b1:
                    e4:14:24:db:9f:91:96:0f:56:9b:82:bd:ef:ae:a4:
                    84:3e:72:e5:95:5b:b8:67:ec:40:fc:0e:89:30:39:
                    d1:89:dd:94:c8:52:85:38:ea:8c:56:11:34:99:00:
                    bd:8c:98:94:a6:b8:91:59:9e:62:47:3e:35:86:ce:
                    05:b9:88:7f:82:f1:32:de:6a:94:8a:da:cc:48:55:
                    b8:00:96:27:56:a7:25:16:bc:83:93:02:d9:60:f9:
                    54:7b:87:38:52:fa:a4:46:a2:c3:16:ce:5e:40:5a:
                    5c:68:d4:28:67:79:e3:94:8a:9b:2b:8c:0a:ca:4b:
                    b7:b8:0f:6e:c6:d6:6e:21:55:21:e4:c2:3c:f9:7e:
                    61:93:03:5b:7b:44:49:cc:81:55:aa:ca:a5:a6:98:
                    ac:14:95:21:0c:f8:cc:77:a7:ad:1a:ae:d4:80:4f:
                    80:88:95:18:a2:99:98:73:53:d5:f7:13:ec:aa:f1:
                    0e:fc:75:ac:f9:f6:b5:05:f2:7f:6f:da:16:4e:1e:
                    17:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AB:13:EC:55:34:FC:F0:58:0C:7A:7F:1D:68:06:F4:1C:6E:AC:CA
            X509v3 Authority Key Identifier:
                keyid:2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/2B36FD67FD146F6ABC421C609744891EA7512F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39322e302f32322d3232203d3e20323536363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:5e:37:a2:39:d3:51:3e:6e:87:81:74:b8:7d:7f:4b:5d:8a:
         dc:5c:83:2e:91:d3:25:96:f1:d0:ba:54:47:d2:22:66:98:25:
         ed:11:98:20:bf:2b:6d:18:f6:4c:ee:ff:d7:81:60:dc:96:8e:
         ec:55:a5:18:d2:e1:81:0b:c5:5d:e4:b5:46:ba:dd:46:90:ff:
         bf:5f:42:16:a1:e2:d4:33:dc:10:d3:fe:4d:41:38:55:7f:87:
         48:a1:51:ae:2a:96:28:00:d3:30:06:a3:5c:9d:dd:55:d7:4c:
         31:88:56:1c:c9:a5:ce:e9:bc:46:b1:ec:2f:4d:f6:70:44:51:
         6e:34:b8:f2:fa:28:a9:32:1c:e7:53:7a:17:ed:f9:26:f8:dd:
         76:66:1b:d4:6b:cb:54:e2:13:42:fa:16:cf:cb:59:06:e1:8a:
         06:38:40:69:36:6d:9e:ad:d4:d6:e5:dd:40:4e:8d:5f:f1:53:
         b8:0d:28:9c:c7:e0:cf:21:e8:3c:3c:4d:d7:f8:53:6c:bb:8e:
         6d:95:17:a7:b5:63:71:57:cf:1e:0d:da:6f:9d:0c:80:25:e2:
         bd:5f:2e:8d:a9:a8:21:0e:cf:14:d3:3d:9f:5f:d0:79:ac:1f:
         4e:ce:71:da:6b:a9:98:14:be:8b:60:4e:b7:d8:6c:58:7d:18:
         cf:60:07:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org