Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132392e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3132392e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          2KWxzUfso84+PPXv1TkIo8gnNOkInN1zAsaEu0lzKu0=
Subject key identifier:   F6:94:1B:06:44:B7:42:24:25:67:7A:72:D5:E3:05:AA:75:B6:6E:B5
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       78C921B904360BC96313E91EF152B1D8470DDAC9
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132392e302f32342d3234203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:52 +0000
ROA not before:           Wed 17 Apr 2024 11:34:52 +0000
ROA not after:            Wed 16 Apr 2025 11:39:52 +0000
asID:                     28182
IP address blocks:        170.231.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c9:21:b9:04:36:0b:c9:63:13:e9:1e:f1:52:b1:d8:47:0d:da:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:52 2024 GMT
            Not After : Apr 16 11:39:52 2025 GMT
        Subject: CN=F6941B0644B7422425677A72D5E305AA75B66EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:f7:23:c5:9b:7c:44:14:77:83:83:6a:1a:
                    ea:f7:76:b6:1f:9e:23:bd:a9:44:00:76:f0:77:f3:
                    41:38:2d:d8:fd:9a:32:76:ee:44:3a:71:92:41:f2:
                    0e:ca:ee:1b:a2:40:af:38:74:bd:dd:5b:10:3b:73:
                    5f:46:a7:ae:03:c7:f7:e5:63:2a:b3:f8:de:a5:8b:
                    90:17:4a:33:da:2c:9c:5c:43:73:48:be:84:ed:d7:
                    f1:2b:30:16:df:80:65:bf:46:97:33:39:06:ce:f4:
                    29:fa:f2:fc:a1:96:e9:18:cd:d0:da:ae:1c:ed:c8:
                    39:0b:cd:52:a1:32:da:d1:55:de:71:7d:76:91:0d:
                    43:87:a0:21:ca:be:db:00:46:3c:5d:b3:95:36:8d:
                    78:a9:2a:6b:01:7b:a7:78:79:1e:6a:7b:4f:e0:ea:
                    d4:31:ee:70:02:ef:7b:9a:4f:ed:04:d9:d9:63:c4:
                    61:9a:f1:93:a7:b2:be:2e:82:de:45:5e:7d:b7:6e:
                    ce:7e:dc:4a:4c:2d:b7:05:37:36:2c:a7:09:f5:c8:
                    4e:8a:67:5d:9a:88:2f:a4:33:0d:a8:4e:15:d3:88:
                    07:5f:ef:b9:98:18:28:71:23:65:06:01:4b:0b:e1:
                    41:fd:4c:c2:ab:92:53:e0:24:0c:c5:b8:b5:fc:30:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:94:1B:06:44:B7:42:24:25:67:7A:72:D5:E3:05:AA:75:B6:6E:B5
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132392e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:e8:1b:5c:a3:a6:53:d9:bf:b7:a1:ca:92:da:5f:cb:12:03:
         d5:f3:5a:83:49:a9:25:e1:56:cb:34:a8:69:6f:22:68:04:27:
         7a:82:1d:fa:2a:b3:3c:d6:0e:d5:76:f1:b3:81:fa:df:4c:e3:
         3e:cc:40:04:c3:01:1a:e6:e7:4a:cb:f3:d4:3c:50:39:0b:dd:
         60:a0:41:1d:54:62:e3:0f:68:31:2a:ac:6b:af:8f:21:6e:97:
         8b:20:53:ed:fa:84:06:10:43:24:13:bc:bf:c1:57:1c:1d:72:
         20:c2:e0:98:19:a4:e0:f4:b1:fc:e9:13:94:67:62:8e:31:45:
         d9:5b:94:03:13:95:48:46:10:35:a7:05:90:57:8e:b3:a8:cb:
         94:71:83:1f:7d:bb:05:39:a0:a8:8c:06:ae:40:e9:5e:e3:9f:
         96:02:c1:02:00:a7:ac:3d:de:f7:3d:d4:bb:57:c3:ea:e6:4a:
         24:0a:3d:72:72:1d:d4:83:3c:d1:2b:6b:5d:d2:c4:48:13:bb:
         bc:1d:c6:d7:9e:13:a8:4c:1c:4e:a6:00:cb:af:95:31:f3:f8:
         67:71:35:4a:bd:2b:ff:68:f6:ef:a9:18:51:5a:90:cb:3c:b8:
         91:fe:b1:d5:d2:a1:d5:05:a9:6d:7f:c8:27:ef:70:dc:c9:68:
         b1:92:6b:3e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeMkhuQQ2C8ljE+ke8VKx2EcN2skwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFM0YwQzdCRTRGQTAxNzUyNENFMjI0NEU0QUE4MzYz
NDQ2RkQwRDAeFw0yNDA0MTcxMTM0NTJaFw0yNTA0MTYxMTM5NTJaMDMxMTAvBgNV
BAMTKEY2OTQxQjA2NDRCNzQyMjQyNTY3N0E3MkQ1RTMwNUFBNzVCNjZFQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCfcjxZt8RBR3g4NqGur3drYf
niO9qUQAdvB380E4Ldj9mjJ27kQ6cZJB8g7K7huiQK84dL3dWxA7c19Gp64Dx/fl
Yyqz+N6li5AXSjPaLJxcQ3NIvoTt1/ErMBbfgGW/RpczOQbO9Cn68vyhlukYzdDa
rhztyDkLzVKhMtrRVd5xfXaRDUOHoCHKvtsARjxds5U2jXipKmsBe6d4eR5qe0/g
6tQx7nAC73uaT+0E2dljxGGa8ZOnsr4ugt5FXn23bs5+3EpMLbcFNzYspwn1yE6K
Z12aiC+kMw2oThXTiAdf77mYGChxI2UGAUsL4UH9TMKrklPgJAzFuLX8MD0dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9pQbBkS3QiQlZ3py1eMFqnW2brUwHwYDVR0j
BBgwFoAUaOPwx75PoBdSTOIkTkqoNjRG/Q0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC82OEUzRjBDN0JFNEZBMDE3NTI0Q0UyMjQ0RTRBQTgzNjM0NDZGRDBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RTNGMEM3QkU0RkEwMTc1
MjRDRTIyNDRFNEFBODM2MzQ0NkZEMEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq54EwDQYJKoZIhvcNAQELBQADggEBAIPoG1yj
plPZv7ehypLaX8sSA9XzWoNJqSXhVss0qGlvImgEJ3qCHfoqszzWDtV28bOB+t9M
4z7MQATDARrm50rL89Q8UDkL3WCgQR1UYuMPaDEqrGuvjyFul4sgU+36hAYQQyQT
vL/BVxwdciDC4JgZpOD0sfzpE5RnYo4xRdlblAMTlUhGEDWnBZBXjrOoy5Rxgx99
uwU5oKiMBq5A6V7jn5YCwQIAp6w93vc91LtXw+rmSiQKPXJyHdSDPNEra13SxEgT
u7wdxteeE6hMHE6mAMuvlTHz+GdxNUq9K/9o9u+pGFFakMs8uJH+sdXSodUFqW1/
yCfvcNzJaLGSaz4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org