Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3132382e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          U0SYL2+nF9Ur+/HtdGIFig3RKdvPg9HlUfKN+IQ1JFY=
Subject key identifier:   97:22:FD:EB:32:5A:DF:CA:CF:30:F8:A6:5F:48:DA:48:27:18:98:05
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       7DD6435AF884F388566991CFD18D495A1521D69A
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32342d3234203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:50 +0000
ROA not before:           Wed 17 Apr 2024 11:34:50 +0000
ROA not after:            Wed 16 Apr 2025 11:39:50 +0000
asID:                     28182
IP address blocks:        170.231.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d6:43:5a:f8:84:f3:88:56:69:91:cf:d1:8d:49:5a:15:21:d6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:50 2024 GMT
            Not After : Apr 16 11:39:50 2025 GMT
        Subject: CN=9722FDEB325ADFCACF30F8A65F48DA4827189805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:39:00:f1:f2:b3:93:93:1f:3c:c5:af:80:
                    ef:54:79:83:a3:e7:47:14:d4:df:8e:1d:f1:76:b1:
                    18:32:36:94:c5:6d:3e:28:3c:91:62:26:12:63:42:
                    0a:95:e4:7d:7e:a1:c9:48:61:e3:bd:a2:d6:b1:d9:
                    cb:d0:ff:aa:8d:c4:63:ea:8d:9f:f0:8d:e7:7f:4b:
                    e8:49:b2:9c:27:62:df:b7:cf:75:ce:2f:9c:3d:3d:
                    77:3f:5c:1d:87:d8:6c:79:79:86:4f:1e:7c:67:11:
                    9b:3f:b6:0c:be:24:ca:93:b1:a7:0f:cd:17:c9:78:
                    a9:86:75:a1:83:ba:1c:03:51:35:7f:4e:75:c0:ca:
                    d5:5d:2f:f2:93:f4:f2:be:29:4a:2b:4a:12:02:29:
                    2a:d2:38:4c:7a:8d:a8:c4:ff:d5:59:36:f2:76:e5:
                    b6:da:aa:68:4c:4a:60:e8:c6:0b:6c:75:6e:4d:65:
                    4b:14:8d:ef:36:fb:f6:a6:a4:00:35:dd:d0:a2:c1:
                    21:db:92:a4:b6:1f:7c:4d:50:3d:9f:d9:87:77:3c:
                    52:74:5c:0c:dd:69:48:3f:31:58:96:aa:28:68:3f:
                    83:7c:a2:88:ea:68:84:60:26:42:1a:0c:d4:52:be:
                    3c:57:b4:f5:c8:6b:93:6c:25:ac:eb:ef:eb:34:ba:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:22:FD:EB:32:5A:DF:CA:CF:30:F8:A6:5F:48:DA:48:27:18:98:05
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:75:ef:a2:b3:56:c1:fa:99:80:57:8d:66:5b:20:24:f2:11:
         90:dd:fb:84:90:43:61:2b:d6:d5:4b:c2:35:9c:2d:09:4e:63:
         b6:d0:59:f6:4d:6d:ef:16:58:4c:1c:e9:38:00:a9:ca:c6:14:
         49:40:23:34:a5:f3:f4:e1:8f:10:e0:b7:f0:43:d5:29:28:2d:
         5f:9e:e0:56:ba:e2:bb:95:bc:53:a1:56:2c:18:04:bc:05:ac:
         88:a6:dd:56:ac:db:5e:20:e3:1a:75:16:07:3e:89:3e:85:f1:
         b0:0d:6f:54:25:65:26:f7:f2:4c:4c:a3:8e:f9:97:48:65:89:
         ac:05:8f:8a:8d:d8:14:6b:91:5e:e6:c1:df:81:a8:4f:fd:3a:
         c2:8e:27:4c:f1:96:7e:72:32:15:67:38:5f:22:57:e5:b0:46:
         49:2f:6d:a0:33:59:a7:98:63:0a:de:3c:1c:12:2f:da:05:8c:
         7b:d3:53:c9:39:9f:dc:cf:4c:eb:5b:4c:8b:f2:c8:cc:9c:dc:
         61:ad:78:be:ce:36:19:49:2c:88:d7:2e:28:12:be:47:e3:31:
         90:ae:06:a4:76:88:e4:6e:1d:1d:3e:9d:21:86:f7:0c:1d:73:
         1e:bc:7e:39:99:f6:7f:8a:07:22:66:a4:90:6d:c6:bc:bd:34:
         06:45:ed:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org