Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa
File:                     3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa (raw, json)
Hash identifier:          fWUSAnwPCVEnWj8SmW16nkdOVYJ8mNeZXcIF7EQ2sAQ=
Subject key identifier:   BE:69:68:86:DA:40:44:F9:54:F6:ED:BB:54:C2:0E:1B:ED:F5:D5:41
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       60C45E4A8663BFD8853840F00512527D15C245E7
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:49 +0000
ROA not before:           Wed 17 Apr 2024 11:34:49 +0000
ROA not after:            Wed 16 Apr 2025 11:39:49 +0000
asID:                     28182
IP address blocks:        170.231.132.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c4:5e:4a:86:63:bf:d8:85:38:40:f0:05:12:52:7d:15:c2:45:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:49 2024 GMT
            Not After : Apr 16 11:39:49 2025 GMT
        Subject: CN=BE696886DA4044F954F6EDBB54C20E1BEDF5D541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:a6:aa:3a:1d:c7:02:1b:1e:26:69:97:36:
                    59:3c:ae:e0:4a:5d:16:93:e1:cf:77:e9:57:6d:de:
                    b7:61:ea:d7:bc:ec:34:39:bd:38:77:f4:a1:24:53:
                    62:cf:ba:42:99:41:41:79:3c:ad:91:74:37:b3:43:
                    86:08:92:ca:7d:7e:cd:38:cc:a4:32:2b:3d:9c:d4:
                    59:ec:36:10:60:ca:4d:75:85:e2:13:98:96:b2:fe:
                    46:17:8d:40:8f:f4:c1:a5:bd:f1:21:58:c7:0a:e8:
                    db:31:fe:a0:b9:7d:10:5e:20:b4:74:6a:87:b7:10:
                    d3:69:0f:c5:21:f9:63:15:97:5e:02:3f:2e:87:77:
                    42:9b:86:8d:5c:16:ba:19:13:2e:db:ee:1a:5a:c1:
                    3f:c8:8c:2c:55:ee:b9:ce:f9:94:8f:ab:92:b5:05:
                    f6:77:6c:17:f2:07:b0:6b:a9:c8:4d:1d:59:c2:91:
                    8e:1a:24:69:df:b6:69:00:38:6d:7e:17:65:23:26:
                    5d:c5:2d:5e:6b:98:21:21:0e:85:c3:59:97:a7:bb:
                    96:6b:f7:8d:fb:d3:c3:e9:8a:ea:35:a9:e7:60:39:
                    0a:e2:b8:07:eb:f1:8c:6d:ec:05:bf:14:99:76:0e:
                    b5:0a:8f:59:13:50:f0:c8:91:d9:36:d3:96:72:b2:
                    cf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:69:68:86:DA:40:44:F9:54:F6:ED:BB:54:C2:0E:1B:ED:F5:D5:41
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:e5:c8:1b:ed:53:9c:62:32:72:86:de:da:94:6b:66:c0:e0:
         51:6d:a4:73:51:c1:20:2a:1e:ef:57:ec:ec:ed:e8:39:f8:2a:
         22:52:d8:cf:f7:cc:8a:4c:dc:5f:b7:a9:39:ad:00:8b:2e:7b:
         46:e1:8b:61:f1:0b:ad:85:3c:36:8d:4d:5c:5b:24:df:79:b8:
         30:90:bd:18:9e:07:ae:51:12:51:61:cc:01:5e:ec:91:3d:59:
         38:49:58:f3:d6:10:32:2a:77:ac:b0:ef:49:63:da:aa:a6:2a:
         c8:22:c4:90:f9:56:30:ff:94:bb:ff:1e:0c:a0:18:57:a0:d9:
         8f:21:eb:72:d8:46:d4:bd:54:e3:dc:99:df:f6:dd:60:53:38:
         bc:4b:a4:0f:e3:ff:c5:60:69:a1:25:eb:58:fb:d2:2c:10:fb:
         61:e1:38:9d:2c:24:99:77:f0:b9:7a:ba:3f:18:23:1e:ef:f0:
         8d:36:af:e2:88:f9:78:4d:69:17:a4:eb:0d:b8:cb:50:a9:22:
         a8:4f:70:19:a3:e0:b1:14:79:a9:44:7d:09:15:8d:ba:21:ad:
         8c:fd:db:69:05:01:dd:b9:e3:e4:ad:ed:13:10:24:c2:14:b6:
         73:10:b9:30:7b:f2:61:d3:91:ae:d0:82:61:1b:c6:2f:d9:62:
         c7:40:b7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org