Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa
File:                     3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          TJl7q/vm6CV9nLatcVvXLmB1y3Sg19uB2lgb+2XFKk4=
Subject key identifier:   E4:EA:FC:B3:FA:7A:E8:8F:E1:60:ED:CA:09:8A:A5:F6:86:95:F8:BA
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       75E78ADFF3A5946A5B48AD2CD244630D54B70858
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:50 +0000
ROA not before:           Wed 17 Apr 2024 11:34:50 +0000
ROA not after:            Wed 16 Apr 2025 11:39:50 +0000
asID:                     28182
IP address blocks:        170.231.128.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e7:8a:df:f3:a5:94:6a:5b:48:ad:2c:d2:44:63:0d:54:b7:08:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:50 2024 GMT
            Not After : Apr 16 11:39:50 2025 GMT
        Subject: CN=E4EAFCB3FA7AE88FE160EDCA098AA5F68695F8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:e4:62:11:64:83:79:37:32:be:9e:4c:b2:
                    58:6e:d5:4a:27:d5:79:48:89:16:dc:6e:a9:1b:5f:
                    5d:83:4d:94:d7:95:3a:10:13:4e:19:7d:53:92:45:
                    be:d3:3f:f1:fa:5c:18:1f:e4:9e:1b:7e:3e:2e:5a:
                    d6:02:19:62:fc:95:9f:86:10:cb:f3:f6:2f:85:76:
                    e6:80:7e:17:d2:05:42:71:03:fe:ed:71:99:ee:fe:
                    b4:b9:41:0f:f6:cf:51:80:ed:3d:15:9a:65:b8:15:
                    79:8e:00:38:3c:bd:cc:4b:26:cf:00:bf:36:71:9d:
                    2c:c9:57:28:34:9e:ed:69:46:6d:04:48:d1:1e:f7:
                    bd:de:34:cd:03:e1:fa:50:46:08:e1:fe:a6:d6:f3:
                    54:f0:ad:cd:15:01:14:13:19:46:98:cc:36:f2:04:
                    a4:f0:a1:9a:ba:7b:b1:5f:e0:35:39:2d:d8:71:8a:
                    a2:93:ee:01:75:4c:71:0c:64:ce:37:c4:40:28:b2:
                    e9:b9:02:93:58:b2:20:69:9c:96:71:e0:da:26:43:
                    23:56:c3:dc:ff:6f:65:6f:a5:e1:22:41:33:ab:cf:
                    70:1f:cd:04:1c:25:a8:34:0d:85:b6:30:13:86:95:
                    b0:e5:c6:68:18:e0:42:5f:68:95:f8:9e:d9:30:f8:
                    51:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EA:FC:B3:FA:7A:E8:8F:E1:60:ED:CA:09:8A:A5:F6:86:95:F8:BA
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:13:4f:29:19:57:4e:72:43:ce:f7:74:60:8d:ad:da:c0:aa:
         e4:cb:3b:a0:12:a7:3a:c5:99:37:50:ba:91:38:23:dd:7d:f7:
         2a:d0:aa:7e:eb:b2:c6:7b:fc:a4:77:5e:f8:6e:48:4f:b2:1a:
         07:9d:fb:61:8e:5d:6f:17:6e:2c:9a:ea:ae:04:40:1f:e0:bc:
         37:93:2e:b6:93:c7:63:f5:e3:1d:ae:9a:d0:52:af:45:01:fc:
         3e:0d:cc:ca:90:c3:1a:1e:c4:ec:17:af:14:51:ab:66:97:30:
         ff:f3:1a:4e:8a:20:8a:60:72:bd:3d:98:d7:31:0b:11:f7:bd:
         55:ee:30:39:0a:bf:ac:03:24:38:f2:44:ca:21:67:69:d3:32:
         4d:38:6f:31:97:b9:0b:c6:4d:ce:2f:a3:a5:8c:fb:61:7d:51:
         4e:a4:3c:53:c7:b9:a9:a4:fc:07:6c:7d:e1:80:2a:8a:a7:35:
         bd:8f:28:f6:0e:c9:d2:9e:6d:76:fe:0e:01:07:55:ca:75:dd:
         d0:fa:78:f9:bc:d6:f9:db:3e:87:2a:15:e2:08:bc:38:16:ac:
         a0:cf:d1:42:67:c9:41:f9:a4:20:1b:0f:a0:4d:ee:67:c0:25:
         70:44:1f:5d:7d:25:00:59:d6:7d:02:fc:5e:44:11:2a:50:91:
         6d:e0:a5:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdeeK3/OllGpbSK0s0kRjDVS3CFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFM0YwQzdCRTRGQTAxNzUyNENFMjI0NEU0QUE4MzYz
NDQ2RkQwRDAeFw0yNDA0MTcxMTM0NTBaFw0yNTA0MTYxMTM5NTBaMDMxMTAvBgNV
BAMTKEU0RUFGQ0IzRkE3QUU4OEZFMTYwRURDQTA5OEFBNUY2ODY5NUY4QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/eRiEWSDeTcyvp5Mslhu1Uon
1XlIiRbcbqkbX12DTZTXlToQE04ZfVOSRb7TP/H6XBgf5J4bfj4uWtYCGWL8lZ+G
EMvz9i+FduaAfhfSBUJxA/7tcZnu/rS5QQ/2z1GA7T0VmmW4FXmOADg8vcxLJs8A
vzZxnSzJVyg0nu1pRm0ESNEe973eNM0D4fpQRgjh/qbW81Twrc0VARQTGUaYzDby
BKTwoZq6e7Ff4DU5LdhxiqKT7gF1THEMZM43xEAosum5ApNYsiBpnJZx4NomQyNW
w9z/b2VvpeEiQTOrz3AfzQQcJag0DYW2MBOGlbDlxmgY4EJfaJX4ntkw+FG7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5Or8s/p66I/hYO3KCYql9oaV+LowHwYDVR0j
BBgwFoAUaOPwx75PoBdSTOIkTkqoNjRG/Q0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC82OEUzRjBDN0JFNEZBMDE3NTI0Q0UyMjQ0RTRBQTgzNjM0NDZGRDBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RTNGMEM3QkU0RkEwMTc1
MjRDRTIyNDRFNEFBODM2MzQ0NkZEMEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq54AwDQYJKoZIhvcNAQELBQADggEBADMTTykZ
V05yQ873dGCNrdrAquTLO6ASpzrFmTdQupE4I9199yrQqn7rssZ7/KR3XvhuSE+y
Gged+2GOXW8Xbiya6q4EQB/gvDeTLraTx2P14x2umtBSr0UB/D4NzMqQwxoexOwX
rxRRq2aXMP/zGk6KIIpgcr09mNcxCxH3vVXuMDkKv6wDJDjyRMohZ2nTMk04bzGX
uQvGTc4vo6WM+2F9UU6kPFPHuamk/AdsfeGAKoqnNb2PKPYOydKebXb+DgEHVcp1
3dD6ePm81vnbPocqFeIIvDgWrKDP0UJnyUH5pCAbD6BN7mfAJXBEH119JQBZ1n0C
/F5EESpQkW3gpRk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org