Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132342e302f32322d3232203d3e20323632353138.roa
File:                     3137372e36372e3132342e302f32322d3232203d3e20323632353138.roa (raw, json)
Hash identifier:          z5k217x17bH8SsnReqXN8it1mvH2miVOPG1t0l9lmko=
Subject key identifier:   CF:E0:81:A9:5D:C1:6D:8A:73:DE:EA:84:35:BE:F9:B1:45:39:05:FA
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       3AD34BB89C13DEF2F4816C68C0630FFA2627EC87
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132342e302f32322d3232203d3e20323632353138.roa
Signing time:             Tue 09 Aug 2022 11:05:49 +0000
ROA not before:           Tue 09 Aug 2022 11:00:49 +0000
ROA not after:            Tue 08 Aug 2023 11:05:49 +0000
asID:                     262518
IP address blocks:        177.67.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d3:4b:b8:9c:13:de:f2:f4:81:6c:68:c0:63:0f:fa:26:27:ec:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Aug  9 11:00:49 2022 GMT
            Not After : Aug  8 11:05:49 2023 GMT
        Subject: CN=CFE081A95DC16D8A73DEEA8435BEF9B1453905FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:40:98:2c:92:72:dd:c8:c6:f5:25:08:00:
                    f6:d7:ce:77:23:51:a4:36:f3:e8:e8:27:6d:39:f5:
                    c7:77:52:27:b5:7c:ef:7e:8c:d7:9c:6f:00:dd:d3:
                    2a:1a:5f:6a:59:e9:f0:c8:5b:5e:72:54:fa:d5:ad:
                    bb:ad:d6:10:f4:4b:e9:a2:cc:f5:73:e7:ff:0a:4c:
                    86:27:26:d9:19:f4:ba:46:a1:2c:f8:f4:9a:7e:3a:
                    d1:d5:74:80:37:00:24:99:be:48:b5:3d:10:00:5a:
                    b4:5b:3d:6d:19:24:6b:fa:89:6b:31:91:aa:28:bb:
                    cf:9c:bc:4f:de:27:d9:97:c4:25:8a:d4:d4:73:58:
                    5b:46:19:9e:52:f0:5b:81:29:74:8e:21:f6:28:be:
                    3e:a1:8f:d5:f4:90:35:6b:c5:f0:4a:c4:9b:e5:a8:
                    af:f0:d7:9b:33:36:50:6f:64:c3:81:bd:bc:98:64:
                    5b:12:d6:fc:f8:6f:40:8e:08:29:41:7a:c8:e0:3c:
                    c7:68:70:5d:95:93:e5:fc:ca:95:58:82:48:d5:30:
                    bd:7c:9d:fa:d4:51:b9:38:8f:db:55:0a:5a:02:32:
                    33:92:65:c4:89:69:d6:86:f5:8a:89:c7:94:08:85:
                    f3:31:11:a0:8d:31:53:91:5f:31:c3:9f:93:a0:e1:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E0:81:A9:5D:C1:6D:8A:73:DE:EA:84:35:BE:F9:B1:45:39:05:FA
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132342e302f32322d3232203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:d5:12:68:a7:62:ec:e3:9e:8c:92:cd:d0:f4:2c:c1:b8:7c:
         73:2f:23:07:dd:ed:bc:c3:a4:dc:fa:8f:b3:e4:75:99:6c:78:
         b8:3d:7c:17:3b:81:57:aa:61:e4:87:77:9f:e8:3f:a5:31:08:
         c0:19:3a:13:b5:23:36:8a:01:75:88:b7:ad:d6:29:fe:65:6b:
         5a:53:3c:4b:4a:37:d7:13:b2:54:bf:85:3b:e0:56:aa:09:13:
         13:91:16:96:b0:9f:1f:c0:09:24:b5:14:53:0d:52:84:91:81:
         b4:a6:ab:c3:44:98:9c:4b:c5:da:c1:94:79:da:78:33:3a:df:
         5a:dd:69:53:30:34:a8:fa:1a:d6:04:7f:75:6f:4d:33:02:2a:
         fd:d0:64:7e:56:26:56:c9:71:00:cb:38:79:60:9b:eb:c5:dd:
         b6:79:7a:b0:93:f1:13:8f:22:b2:bc:1a:b3:10:6f:b4:37:2a:
         dd:96:bf:d6:a1:e4:5f:5a:2e:b4:51:6e:b5:05:74:d2:c0:0c:
         6b:07:db:db:b0:0e:50:39:c5:5a:d6:81:76:56:06:50:8e:3a:
         1d:a0:ca:d6:8c:29:61:30:23:11:5e:19:6f:aa:1f:cd:44:27:
         11:6d:8a:81:1b:68:e3:2b:f1:a6:9d:d6:5e:10:47:6c:12:93:
         f9:0a:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:00 2023 by rpki-client on console-fra.rpki-client.org