Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/3137302e37392e3132382e302f32332d3234203d3e20323633343836.roa
File:                     3137302e37392e3132382e302f32332d3234203d3e20323633343836.roa (raw, json)
Hash identifier:          gmk+8FLi2q5rUd/t8ZN47JRhw5jGKLiUxoO6yQBJlgA=
Subject key identifier:   88:FA:B0:BE:92:5F:11:3D:38:64:C3:55:7E:9E:D9:49:7D:55:0C:7F
Certificate issuer:       /CN=168B11ECD2ABB221671D884FD24056BAADEE2EA3
Certificate serial:       779E5FDE448FA72A9C87236EE40DAAEC4744440C
Authority key identifier: 16:8B:11:EC:D2:AB:B2:21:67:1D:88:4F:D2:40:56:BA:AD:EE:2E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168B11ECD2ABB221671D884FD24056BAADEE2EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/3137302e37392e3132382e302f32332d3234203d3e20323633343836.roa
Signing time:             Thu 04 Apr 2024 18:23:59 +0000
ROA not before:           Thu 04 Apr 2024 18:18:59 +0000
ROA not after:            Thu 03 Apr 2025 18:23:59 +0000
asID:                     263486
IP address blocks:        170.79.128.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sat 27 Apr 2024 14:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9e:5f:de:44:8f:a7:2a:9c:87:23:6e:e4:0d:aa:ec:47:44:44:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168B11ECD2ABB221671D884FD24056BAADEE2EA3
        Validity
            Not Before: Apr  4 18:18:59 2024 GMT
            Not After : Apr  3 18:23:59 2025 GMT
        Subject: CN=88FAB0BE925F113D3864C3557E9ED9497D550C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:bc:d0:54:db:6e:e4:a0:27:4f:5c:d4:01:
                    16:18:7d:2f:a2:26:49:ce:06:01:e6:41:e4:76:8e:
                    f9:9b:35:1b:18:b3:b2:38:5f:77:24:be:5a:a4:85:
                    f9:e7:ea:ac:fc:b3:f6:42:09:64:00:af:5c:9a:de:
                    7d:57:0f:56:f1:05:cc:13:6e:0b:72:e6:16:1f:f7:
                    b5:be:07:29:88:44:a8:1d:93:35:12:ac:68:5c:49:
                    14:4e:33:61:9d:89:1a:64:c4:bf:bf:26:0f:e1:68:
                    97:3b:12:de:10:1b:f4:5d:40:f8:80:dc:7f:5e:e3:
                    d5:f6:2b:13:f9:bb:c7:72:83:a8:91:51:e0:14:c8:
                    99:17:17:7e:67:7c:6f:db:bd:a5:f1:b7:7c:df:92:
                    ee:92:d2:a4:ba:f1:b9:c1:f4:33:37:b1:d2:dd:15:
                    30:56:55:7b:bd:b1:77:b0:90:d5:b7:4c:9d:b2:a8:
                    c5:7f:98:2f:1c:fa:2c:ad:1c:a3:57:f9:71:1b:97:
                    46:9b:dd:d2:ea:9d:ac:b4:56:d4:46:89:5e:4c:60:
                    7a:0a:74:cc:35:c4:b3:b8:77:d2:ae:4d:1b:a5:af:
                    88:f9:97:3e:6e:a8:54:ea:90:88:db:03:e8:71:81:
                    c9:44:ad:22:44:22:10:d3:b3:50:b7:f6:cc:d0:72:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FA:B0:BE:92:5F:11:3D:38:64:C3:55:7E:9E:D9:49:7D:55:0C:7F
            X509v3 Authority Key Identifier:
                keyid:16:8B:11:EC:D2:AB:B2:21:67:1D:88:4F:D2:40:56:BA:AD:EE:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/168B11ECD2ABB221671D884FD24056BAADEE2EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168B11ECD2ABB221671D884FD24056BAADEE2EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/3137302e37392e3132382e302f32332d3234203d3e20323633343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:2d:db:08:d3:d0:07:ed:1c:6d:3e:4b:5e:c4:a6:18:16:52:
         d6:36:1d:47:1c:13:ca:3f:ac:8b:8f:f1:10:6d:fa:a3:f2:64:
         68:73:07:be:58:b0:91:5c:b8:26:40:3e:a3:85:11:85:23:f3:
         28:08:f8:55:92:16:d8:ac:81:50:f8:93:9d:47:6c:cf:f1:2b:
         e5:84:a5:fd:46:88:6f:f4:f9:7b:1b:51:d0:bc:56:78:5e:f6:
         94:39:e1:59:dc:25:8a:ee:a6:d2:02:7a:c0:fd:d3:33:90:7e:
         a9:b0:1f:34:fd:2e:3f:f3:3a:1d:ac:e2:74:65:d6:64:60:6d:
         d7:bd:01:dd:a9:90:c3:27:00:af:35:af:24:89:54:e9:6f:45:
         0e:23:f0:9a:98:33:98:65:f2:41:fb:33:4e:a0:87:85:54:c2:
         b4:8d:5e:50:92:01:05:17:54:cf:0b:74:45:ff:a4:5b:e8:76:
         ab:79:54:7d:04:ed:7c:b0:84:1e:a3:32:d6:47:1a:a9:a9:f0:
         83:68:38:14:42:cc:13:8a:82:23:8e:5b:66:34:a1:f7:2e:de:
         6d:af:00:01:74:9d:6c:b6:f9:59:80:71:bd:b1:22:f5:e2:3e:
         c5:b5:05:39:3e:cd:b6:a3:12:d8:05:46:18:ff:e2:e6:00:94:
         9d:5b:50:98
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd55f3kSPpyqchyNu5A2q7EdERAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4QjExRUNEMkFCQjIyMTY3MUQ4ODRGRDI0MDU2QkFB
REVFMkVBMzAeFw0yNDA0MDQxODE4NTlaFw0yNTA0MDMxODIzNTlaMDMxMTAvBgNV
BAMTKDg4RkFCMEJFOTI1RjExM0QzODY0QzM1NTdFOUVEOTQ5N0Q1NTBDN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+rzQVNtu5KAnT1zUARYYfS+i
JknOBgHmQeR2jvmbNRsYs7I4X3ckvlqkhfnn6qz8s/ZCCWQAr1ya3n1XD1bxBcwT
bgty5hYf97W+BymIRKgdkzUSrGhcSRROM2GdiRpkxL+/Jg/haJc7Et4QG/RdQPiA
3H9e49X2KxP5u8dyg6iRUeAUyJkXF35nfG/bvaXxt3zfku6S0qS68bnB9DM3sdLd
FTBWVXu9sXewkNW3TJ2yqMV/mC8c+iytHKNX+XEbl0ab3dLqnay0VtRGiV5MYHoK
dMw1xLO4d9KuTRulr4j5lz5uqFTqkIjbA+hxgclErSJEIhDTs1C39szQcnwFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiPqwvpJfET04ZMNVfp7ZSX1VDH8wHwYDVR0j
BBgwFoAUFosR7NKrsiFnHYhP0kBWuq3uLqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZUSGRMYTczdUpmVHA1RGFSYTVuSHdMY3hSQmlNRGZvZ3FUdzM3bmkz
ZmEvMS8xNjhCMTFFQ0QyQUJCMjIxNjcxRDg4NEZEMjQwNTZCQUFERUUyRUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEIxMUVDRDJBQkIyMjE2
NzFEODg0RkQyNDA1NkJBQURFRTJFQTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGVEhkTGE3M3VKZlRwNURhUmE1bkh3TGN4UkJpTURmb2dxVHczN25pM2ZhLzEv
MzEzNzMwMmUzNzM5MmUzMTMyMzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNDM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGqT4AwDQYJKoZIhvcNAQELBQADggEBAC8t2wjT
0AftHG0+S17EphgWUtY2HUccE8o/rIuP8RBt+qPyZGhzB75YsJFcuCZAPqOFEYUj
8ygI+FWSFtisgVD4k51HbM/xK+WEpf1GiG/0+XsbUdC8Vnhe9pQ54VncJYruptIC
esD90zOQfqmwHzT9Lj/zOh2s4nRl1mRgbde9Ad2pkMMnAK81rySJVOlvRQ4j8JqY
M5hl8kH7M06gh4VUwrSNXlCSAQUXVM8LdEX/pFvodqt5VH0E7XywhB6jMtZHGqmp
8INoOBRCzBOKgiOOW2Y0ofcu3m2vAAF0nWy2+VmAcb2xIvXiPsW1BTk+zbajEtgF
Rhj/4uYAlJ1bUJg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org