Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133312e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3133312e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          7QHF/wXI2BXry4V7oqnFvXPZFNNaSziBR6EEzt9RmhA=
Subject key identifier:   65:EF:2A:D3:8D:2E:D1:97:A7:88:B2:82:09:B4:93:61:3A:FB:56:75
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       7442ABBA5AA7D1188D66D3D7D9475806EF12B13F
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133312e302f32342d3234203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:52 +0000
ROA not before:           Wed 17 Apr 2024 11:34:52 +0000
ROA not after:            Wed 16 Apr 2025 11:39:52 +0000
asID:                     28182
IP address blocks:        170.231.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:42:ab:ba:5a:a7:d1:18:8d:66:d3:d7:d9:47:58:06:ef:12:b1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:52 2024 GMT
            Not After : Apr 16 11:39:52 2025 GMT
        Subject: CN=65EF2AD38D2ED197A788B28209B493613AFB5675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:54:f4:01:7b:26:e0:e7:8e:53:e3:60:8c:
                    4c:a6:2f:fd:9e:4e:b0:93:f2:0b:c1:e8:7b:45:71:
                    3c:0a:ca:18:31:24:71:5f:3f:56:f0:6c:c4:5a:dc:
                    a4:84:de:51:56:97:59:d7:ab:ce:5f:bd:df:f1:5b:
                    8a:e9:f7:fd:0f:cf:75:4a:54:be:06:a0:41:63:0a:
                    b6:93:d3:98:17:d4:53:f9:cb:d5:93:9e:31:5f:0a:
                    1c:b4:e4:8f:60:ca:1b:b0:93:cc:9b:75:f2:3d:93:
                    26:6d:df:8c:29:ef:a5:a4:f9:5c:cc:51:ed:3b:7a:
                    a5:38:06:7f:90:99:7e:3e:2d:fe:9a:e1:1a:a2:80:
                    02:02:e1:cd:60:cb:9a:74:6e:09:47:ea:99:02:e3:
                    f2:c8:e3:44:e8:a6:7a:de:fc:40:a3:d9:56:34:ff:
                    36:f3:65:09:5b:34:bd:9a:5d:e7:1f:a4:23:8c:bf:
                    00:e7:16:69:91:e4:d5:10:e7:b1:14:7d:4e:eb:ba:
                    d2:22:18:c7:8a:61:b6:40:e5:c3:b5:1e:e4:bf:3c:
                    46:6a:5a:e1:d5:89:24:84:fa:89:37:98:1e:bf:93:
                    05:09:da:89:26:37:4d:08:7c:b0:ae:c2:4d:8d:b0:
                    6a:d5:65:19:a2:fb:1e:03:d7:ce:e5:fa:36:de:aa:
                    a0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EF:2A:D3:8D:2E:D1:97:A7:88:B2:82:09:B4:93:61:3A:FB:56:75
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133312e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:bb:6e:81:fa:8b:47:46:75:e9:9e:80:10:38:e1:6c:5e:e3:
         fa:3f:49:c5:80:11:3a:b2:59:67:c7:ea:56:b2:18:3f:38:52:
         58:76:04:fd:11:0e:62:c8:f8:0a:65:23:4f:85:a1:c4:78:ac:
         57:9a:d5:16:66:38:49:d4:5f:74:49:9d:2b:5e:a5:6c:ab:30:
         ae:40:70:24:05:3f:07:7c:86:cd:4d:df:eb:94:c6:f4:cd:fb:
         0f:92:06:a0:01:52:84:2f:07:6b:f2:4a:65:bf:ac:72:db:34:
         fe:87:f4:0d:9c:da:75:ea:55:28:f9:66:e5:9b:10:32:60:41:
         02:09:52:ed:e1:23:c1:08:37:6d:d3:25:12:fb:3e:e7:13:c2:
         b5:30:18:67:b6:a2:4b:1d:f4:00:eb:93:7c:0c:83:df:84:63:
         8b:09:de:e7:c3:34:b3:8a:d1:8c:4a:04:00:41:a1:bd:9a:9b:
         3e:33:ed:a3:e1:ff:65:b0:87:45:e1:02:04:71:d6:d9:27:65:
         f1:2f:2d:12:d5:86:3b:04:28:5c:6a:1b:e9:e5:70:1b:1a:cf:
         69:a9:93:38:c4:ec:56:d5:28:28:b8:8d:d3:2b:30:bb:de:ae:
         bb:7f:e0:24:60:7a:fd:2e:88:7f:4d:81:0b:ab:ab:21:59:b3:
         a5:27:cc:3e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdEKrulqn0RiNZtPX2UdYBu8SsT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFM0YwQzdCRTRGQTAxNzUyNENFMjI0NEU0QUE4MzYz
NDQ2RkQwRDAeFw0yNDA0MTcxMTM0NTJaFw0yNTA0MTYxMTM5NTJaMDMxMTAvBgNV
BAMTKDY1RUYyQUQzOEQyRUQxOTdBNzg4QjI4MjA5QjQ5MzYxM0FGQjU2NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSV1T0AXsm4OeOU+NgjEymL/2e
TrCT8gvB6HtFcTwKyhgxJHFfP1bwbMRa3KSE3lFWl1nXq85fvd/xW4rp9/0Pz3VK
VL4GoEFjCraT05gX1FP5y9WTnjFfChy05I9gyhuwk8ybdfI9kyZt34wp76Wk+VzM
Ue07eqU4Bn+QmX4+Lf6a4RqigAIC4c1gy5p0bglH6pkC4/LI40Topnre/ECj2VY0
/zbzZQlbNL2aXecfpCOMvwDnFmmR5NUQ57EUfU7rutIiGMeKYbZA5cO1HuS/PEZq
WuHViSSE+ok3mB6/kwUJ2okmN00IfLCuwk2NsGrVZRmi+x4D187l+jbeqqBXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZe8q040u0ZeniLKCCbSTYTr7VnUwHwYDVR0j
BBgwFoAUaOPwx75PoBdSTOIkTkqoNjRG/Q0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC82OEUzRjBDN0JFNEZBMDE3NTI0Q0UyMjQ0RTRBQTgzNjM0NDZGRDBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RTNGMEM3QkU0RkEwMTc1
MjRDRTIyNDRFNEFBODM2MzQ0NkZEMEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq54MwDQYJKoZIhvcNAQELBQADggEBAJS7boH6
i0dGdemegBA44Wxe4/o/ScWAETqyWWfH6layGD84Ulh2BP0RDmLI+AplI0+FocR4
rFea1RZmOEnUX3RJnStepWyrMK5AcCQFPwd8hs1N3+uUxvTN+w+SBqABUoQvB2vy
SmW/rHLbNP6H9A2c2nXqVSj5ZuWbEDJgQQIJUu3hI8EIN23TJRL7PucTwrUwGGe2
oksd9ADrk3wMg9+EY4sJ3ufDNLOK0YxKBABBob2amz4z7aPh/2Wwh0XhAgRx1tkn
ZfEvLRLVhjsEKFxqG+nlcBsaz2mpkzjE7FbVKCi4jdMrMLverrt/4CRgev0uiH9N
gQurqyFZs6UnzD4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org