Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133352e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3133352e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          CaAwxQA/BdPqJRc58UoOw6ANLPOWPslr+s3PcVlWzvw=
Subject key identifier:   35:5C:97:7B:58:39:9A:A9:7D:A1:5E:AF:A1:08:9F:28:A1:A2:10:1C
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       B387BA92B679871F2A6110D55DB418F3A72909
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133352e302f32342d3234203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:50 +0000
ROA not before:           Wed 17 Apr 2024 11:34:50 +0000
ROA not after:            Wed 16 Apr 2025 11:39:50 +0000
asID:                     28182
IP address blocks:        170.231.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b3:87:ba:92:b6:79:87:1f:2a:61:10:d5:5d:b4:18:f3:a7:29:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:50 2024 GMT
            Not After : Apr 16 11:39:50 2025 GMT
        Subject: CN=355C977B58399AA97DA15EAFA1089F28A1A2101C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:da:44:04:33:6a:f8:c9:d3:66:85:c7:b8:
                    42:1d:53:a3:c8:2e:db:92:32:6b:a6:e0:60:80:ac:
                    f0:35:53:44:76:db:c4:d8:5c:34:9c:60:f1:ca:cd:
                    90:d3:d4:d0:77:ba:11:56:12:f3:e3:35:6a:cd:3a:
                    71:e2:bb:de:cc:25:3a:65:15:ef:3b:77:63:20:ef:
                    41:ba:65:33:ab:c8:1c:57:e5:6b:94:56:e0:67:f9:
                    ea:2a:86:44:d7:50:d1:88:3a:a5:7d:43:e8:aa:d7:
                    1a:3c:44:45:21:56:f3:9c:94:bd:a5:8f:2d:9f:7e:
                    b0:90:e8:7d:9a:4e:d2:7b:14:cb:1e:ff:da:48:6c:
                    46:7f:f7:92:6a:7a:15:5b:9a:15:60:c6:e3:8a:a6:
                    fd:6a:9f:3d:d9:5c:f7:fb:e2:b2:22:52:a6:f6:0e:
                    a2:0b:d5:3d:2b:53:ff:9e:2e:98:cd:b1:ce:1f:9b:
                    dd:19:86:1b:36:82:fe:1b:d8:60:fa:b3:cb:b6:5d:
                    cb:2d:ee:dd:64:26:e7:20:12:b6:3f:69:fe:15:ab:
                    2f:89:6f:c6:be:d5:42:54:8b:02:39:e8:31:1f:f8:
                    84:04:2e:9e:8b:d8:4f:51:d2:43:3e:56:7e:c0:1f:
                    ae:bd:4d:44:87:1a:47:ac:1c:ba:82:4f:20:32:79:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5C:97:7B:58:39:9A:A9:7D:A1:5E:AF:A1:08:9F:28:A1:A2:10:1C
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133352e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:32:95:f1:f2:0c:bd:cd:83:93:73:73:d8:77:b0:4f:b8:39:
         eb:66:1a:3d:69:cc:3c:c1:c2:14:32:f7:7c:50:31:5d:d4:e2:
         74:db:c7:50:f3:24:5d:a7:d8:b0:31:e0:ff:17:5c:bc:78:bd:
         64:49:28:20:aa:a8:49:5b:36:39:7f:6e:9e:a1:14:b8:e9:25:
         a3:fd:80:10:41:0e:14:6b:13:44:1e:34:0d:35:b5:3b:0c:5d:
         78:d8:b5:fd:2b:20:ba:a3:f9:29:d3:94:c7:59:d7:2d:42:f0:
         15:4d:88:f2:8f:30:1f:34:2f:97:e2:cb:18:a3:b9:5f:72:6a:
         85:46:fa:57:1c:47:1a:01:bc:10:10:6b:ae:f9:b3:6e:18:d7:
         6d:fb:2f:b7:39:ef:a4:36:d1:27:2c:e2:df:fd:14:6c:a1:ab:
         64:ff:f1:e4:8c:f3:2c:2d:86:ac:34:ec:3b:85:73:10:fe:b9:
         04:02:3d:24:1d:7b:29:fb:5e:55:5a:d1:71:8d:7f:5d:fa:63:
         0c:ca:c7:26:ed:9f:cc:72:e3:f9:bf:02:13:4d:19:eb:22:28:
         04:8a:14:27:9e:43:3e:b6:64:e2:f3:d6:c1:73:d5:75:30:4c:
         9c:3c:90:0e:28:2e:13:c9:bc:f6:04:b4:28:f3:2e:5e:07:43:
         c7:0e:4b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org