Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3139302e302f32332d3233203d3e20323635383936.roa
File:                     3132382e3230312e3139302e302f32332d3233203d3e20323635383936.roa (raw, json)
Hash identifier:          fq+anQlTVdllMweWCzN8dXddnIumSHbW/AewnWpcTOM=
Subject key identifier:   0B:E1:06:B1:96:15:09:F3:BD:29:30:D2:60:89:BA:1B:33:09:88:E0
Certificate issuer:       /CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
Certificate serial:       680D17ADC7B64780AC392F5CB712340917DC73F1
Authority key identifier: 77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3139302e302f32332d3233203d3e20323635383936.roa
Signing time:             Thu 30 Nov 2023 19:25:13 +0000
ROA not before:           Thu 30 Nov 2023 19:20:13 +0000
ROA not after:            Thu 28 Nov 2024 19:25:13 +0000
asID:                     265896
IP address blocks:        128.201.190.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0d:17:ad:c7:b6:47:80:ac:39:2f:5c:b7:12:34:09:17:dc:73:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
        Validity
            Not Before: Nov 30 19:20:13 2023 GMT
            Not After : Nov 28 19:25:13 2024 GMT
        Subject: CN=0BE106B1961509F3BD2930D26089BA1B330988E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:20:5f:64:36:8e:b0:f0:c5:b3:c7:85:9b:84:
                    2b:ae:70:87:26:84:86:51:b8:21:cf:eb:47:0b:36:
                    b7:c7:82:cc:30:8b:b3:9a:5b:8b:cf:2c:6c:d9:e4:
                    b1:21:3a:1c:ea:e0:0f:ab:61:40:78:4e:9b:b5:10:
                    89:e3:e8:8c:8a:b9:f3:1c:49:f4:22:e3:3a:bf:0a:
                    a5:3f:56:d3:89:41:21:88:74:e0:3a:a1:a1:78:d0:
                    bd:57:0a:ec:8f:08:aa:3f:ba:56:58:f4:12:65:7a:
                    d2:af:e5:6d:3e:0c:7d:6e:28:3c:1c:0d:81:19:30:
                    eb:bf:f2:76:28:9f:1e:81:bf:49:74:32:ff:77:cf:
                    69:9f:c6:78:ab:a9:c6:cd:df:60:d9:f6:a7:37:dd:
                    21:4f:e7:d7:76:b0:fd:0d:9a:dd:48:99:fe:b0:d3:
                    8d:89:22:ec:24:55:5d:b7:04:cd:03:fe:93:a4:31:
                    05:ec:0d:1e:be:f5:3d:b3:bf:cc:81:89:b2:7f:6f:
                    14:9b:1d:30:9b:b1:37:38:82:93:6f:b3:a1:14:04:
                    0b:6d:d4:83:b4:1a:0e:9f:80:22:67:1e:ec:bf:9e:
                    e2:f1:6c:63:e3:50:32:f6:e2:47:7e:8b:a8:2f:18:
                    95:54:19:3f:74:82:82:0f:ab:81:ad:02:bc:8c:59:
                    23:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E1:06:B1:96:15:09:F3:BD:29:30:D2:60:89:BA:1B:33:09:88:E0
            X509v3 Authority Key Identifier:
                keyid:77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3139302e302f32332d3233203d3e20323635383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:83:32:68:77:00:2e:95:65:e4:f1:a4:90:68:59:d7:d6:16:
         a5:02:de:2a:ad:6f:f6:eb:4d:3a:2a:ed:fb:3d:78:6f:07:7a:
         cd:0b:f1:16:88:4d:de:f6:46:b5:1d:d9:a4:88:ad:e1:a4:ae:
         ca:0a:9b:9d:1e:10:dc:eb:2b:c3:bc:bc:2e:31:33:23:25:f8:
         72:c2:4c:14:75:2c:6e:44:3e:f6:a6:f7:cc:12:6b:8d:37:97:
         1b:03:47:c1:89:e5:cf:dd:b5:ba:6d:57:1b:5e:72:06:98:d7:
         a7:41:ad:7d:53:d5:fe:fe:23:1c:c7:70:ca:42:2f:4e:24:46:
         29:27:ac:5e:b9:56:a4:06:52:1c:99:4e:5b:70:18:d3:68:88:
         78:00:a6:dd:63:ea:e1:00:f2:b5:0a:f2:b9:48:9a:46:1b:7a:
         8f:14:db:9a:f7:dd:78:26:3e:a3:cd:d2:05:63:ed:8a:9d:67:
         59:44:79:a5:a3:fc:f9:98:a0:2a:ba:6f:94:ee:37:ef:6b:2e:
         42:98:fa:be:0f:ba:39:42:dc:e5:5c:62:32:3f:51:77:54:25:
         6a:fb:c8:b7:dd:c3:5b:9f:c0:7a:22:5c:fe:5a:db:44:3b:f3:
         69:3d:28:2a:9a:48:cf:29:2a:af:86:87:9c:a7:b7:13:dc:8e:
         cb:a8:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 20:26:15 2024 by rpki-client on console-fra.rpki-client.org