Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32322d3232203d3e20323632343630.roa
File:                     3137372e35332e37322e302f32322d3232203d3e20323632343630.roa (raw, json)
Hash identifier:          GhyZhhQ+C3lUdlOiiTFc6UMSpfZmBsyL14yChs0rU7s=
Subject key identifier:   D9:2A:1C:82:95:60:37:82:4F:C4:AB:1F:DF:AA:5E:1B:94:B0:36:C6
Certificate issuer:       /CN=3A3DF525158206E0B66C8FD23D86B1780F642002
Certificate serial:       4EE019EECE312BB7153FBB35450B436C4EA2A34D
Authority key identifier: 3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32322d3232203d3e20323632343630.roa
Signing time:             Fri 19 Apr 2024 12:37:00 +0000
ROA not before:           Fri 19 Apr 2024 12:32:00 +0000
ROA not after:            Fri 18 Apr 2025 12:37:00 +0000
asID:                     262460
IP address blocks:        177.53.72.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 28 May 2024 13:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e0:19:ee:ce:31:2b:b7:15:3f:bb:35:45:0b:43:6c:4e:a2:a3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3DF525158206E0B66C8FD23D86B1780F642002
        Validity
            Not Before: Apr 19 12:32:00 2024 GMT
            Not After : Apr 18 12:37:00 2025 GMT
        Subject: CN=D92A1C82956037824FC4AB1FDFAA5E1B94B036C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:07:c2:36:7d:8f:e6:6d:03:e7:f5:2f:88:a6:
                    e2:65:d0:21:c2:94:27:02:0b:62:1a:64:86:2a:2c:
                    37:00:3c:86:8b:5d:b0:76:d0:66:06:c5:fb:e7:df:
                    0e:53:32:fe:ff:9a:38:bb:2f:f9:44:7f:a9:c7:c5:
                    05:c0:9c:5a:5c:bb:1e:58:b6:b2:41:74:fd:0d:f9:
                    08:d4:fc:2d:fb:3e:1e:72:de:e7:77:e7:41:ee:bf:
                    09:9d:d2:0f:2e:3e:28:da:11:fd:82:73:e6:93:85:
                    fb:c2:69:cd:85:26:94:ed:3a:b6:e2:ff:5e:37:fa:
                    f1:a8:b3:7a:ff:c2:6c:88:60:6b:d8:bd:b6:c2:d6:
                    42:b6:ac:50:d9:59:22:42:63:02:cc:39:28:a1:7d:
                    0e:7c:91:a7:61:3a:9a:42:c3:fc:d4:22:76:d2:c7:
                    33:7d:ed:ea:d6:db:cb:67:a6:09:3c:db:ba:2e:23:
                    e0:01:48:e8:16:5a:43:37:af:55:5f:67:00:f5:27:
                    93:ea:3c:37:48:b5:0d:e2:fc:8e:02:04:51:c8:76:
                    94:79:34:a6:72:b0:58:2c:28:c4:6d:de:8b:ce:3c:
                    af:10:1a:6b:c5:73:a0:4e:eb:00:03:b0:40:91:81:
                    cf:bc:c5:46:31:a0:de:c0:56:57:71:06:bc:00:fe:
                    3f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2A:1C:82:95:60:37:82:4F:C4:AB:1F:DF:AA:5E:1B:94:B0:36:C6
            X509v3 Authority Key Identifier:
                keyid:3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3A3DF525158206E0B66C8FD23D86B1780F642002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32322d3232203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:23:a6:a2:05:8a:db:81:89:f6:42:8e:9c:e5:75:64:7e:ae:
         df:45:3c:8c:5c:77:a4:70:d1:82:e1:94:f2:89:4b:4b:99:98:
         98:6c:b3:33:35:9d:ee:3f:46:33:c6:94:3c:19:16:dd:b1:1f:
         0b:ee:98:b4:c1:ee:e5:9f:3e:61:8e:b3:cd:35:c7:44:30:8b:
         a3:79:ca:32:85:40:1e:fa:8a:8d:59:35:f3:d4:d0:0f:e6:23:
         cc:08:c7:df:6b:56:b5:ba:1f:2b:b4:42:2f:4d:ab:39:0a:f5:
         bc:5b:1d:29:94:0e:71:ed:44:bd:d4:64:8c:eb:77:c1:e0:c7:
         d1:1a:6d:22:4b:ed:3b:e6:92:af:5e:0c:9a:02:e4:82:02:22:
         fc:af:2b:25:45:fa:23:37:4b:b0:ae:b4:b5:7d:12:a4:1e:b4:
         4f:fc:77:4d:d8:ed:17:bb:0c:10:33:0b:46:08:06:db:fe:44:
         2c:b1:6f:19:a4:0f:11:5c:ef:f8:6d:0a:32:6c:2e:44:99:c1:
         f1:01:4c:80:79:96:a8:be:21:02:6c:96:3d:a8:16:65:c3:20:
         f9:9b:03:40:f8:05:65:2b:24:72:66:22:9e:41:ba:4a:2e:5b:
         b5:0a:1a:da:df:47:0f:17:d1:fb:fe:18:23:a8:13:1c:34:92:
         18:0e:70:91
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTuAZ7s4xK7cVP7s1RQtDbE6io00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EzREY1MjUxNTgyMDZFMEI2NkM4RkQyM0Q4NkIxNzgw
RjY0MjAwMjAeFw0yNDA0MTkxMjMyMDBaFw0yNTA0MTgxMjM3MDBaMDMxMTAvBgNV
BAMTKEQ5MkExQzgyOTU2MDM3ODI0RkM0QUIxRkRGQUE1RTFCOTRCMDM2QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrB8I2fY/mbQPn9S+IpuJl0CHC
lCcCC2IaZIYqLDcAPIaLXbB20GYGxfvn3w5TMv7/mji7L/lEf6nHxQXAnFpcux5Y
trJBdP0N+QjU/C37Ph5y3ud350Huvwmd0g8uPijaEf2Cc+aThfvCac2FJpTtOrbi
/143+vGos3r/wmyIYGvYvbbC1kK2rFDZWSJCYwLMOSihfQ58kadhOppCw/zUInbS
xzN97erW28tnpgk827ouI+ABSOgWWkM3r1VfZwD1J5PqPDdItQ3i/I4CBFHIdpR5
NKZysFgsKMRt3ovOPK8QGmvFc6BO6wADsECRgc+8xUYxoN7AVldxBrwA/j8RAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2SocgpVgN4JPxKsf36peG5SwNsYwHwYDVR0j
BBgwFoAUOj31JRWCBuC2bI/SPYaxeA9kIAIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2N0R1V3MW5hWnhROXc4RERVcVlQZWhCWUZpMndIdDlqTGJ0R0tGaTRU
Wk4vMC8zQTNERjUyNTE1ODIwNkUwQjY2QzhGRDIzRDg2QjE3ODBGNjQyMDAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBM0RGNTI1MTU4MjA2RTBC
NjZDOEZEMjNEODZCMTc4MEY2NDIwMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djdEdVdzFuYVp4UTl3OEREVXFZUGVoQllGaTJ3SHQ5akxidEdLRmk0VFpOLzAv
MzEzNzM3MmUzNTMzMmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsTVIMA0GCSqGSIb3DQEBCwUAA4IBAQAAI6aiBYrb
gYn2Qo6c5XVkfq7fRTyMXHekcNGC4ZTyiUtLmZiYbLMzNZ3uP0YzxpQ8GRbdsR8L
7pi0we7lnz5hjrPNNcdEMIujecoyhUAe+oqNWTXz1NAP5iPMCMffa1a1uh8rtEIv
Tas5CvW8Wx0plA5x7US91GSM63fB4MfRGm0iS+075pKvXgyaAuSCAiL8ryslRfoj
N0uwrrS1fRKkHrRP/HdN2O0XuwwQMwtGCAbb/kQssW8ZpA8RXO/4bQoybC5EmcHx
AUyAeZaoviECbJY9qBZlwyD5mwNA+AVlKyRyZiKeQbpKLlu1Chra30cPF9H7/hgj
qBMcNJIYDnCR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org