Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133312e3232312e35372e302f32342d3234203d3e20323632373635.roa
File:                     3133312e3232312e35372e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          Wer/vNRCz29VWQEF81YUZbRGKb0uaglqiFh71WWhL5U=
Subject key identifier:   4C:16:27:A8:CD:6F:6A:B2:1E:A8:21:C7:2D:BB:FF:5F:43:DF:1F:ED
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       51BCAA8FD42CC0F8B6C5FB4E47CCA8A28C3656E0
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133312e3232312e35372e302f32342d3234203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:43 +0000
ROA not before:           Thu 04 Apr 2024 20:42:43 +0000
ROA not after:            Thu 03 Apr 2025 20:47:43 +0000
asID:                     262765
IP address blocks:        131.221.57.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bc:aa:8f:d4:2c:c0:f8:b6:c5:fb:4e:47:cc:a8:a2:8c:36:56:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:43 2024 GMT
            Not After : Apr  3 20:47:43 2025 GMT
        Subject: CN=4C1627A8CD6F6AB21EA821C72DBBFF5F43DF1FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:ba:28:cd:29:31:21:ea:39:1d:c6:a1:89:
                    03:6b:68:be:d4:40:43:e1:12:67:17:25:5c:4a:dd:
                    ab:12:25:40:77:d8:2a:d5:72:f1:c1:9b:63:55:79:
                    3f:65:39:14:45:64:c7:e7:bc:13:a7:78:37:fc:62:
                    30:17:d7:96:16:84:28:2b:b3:33:2d:b2:5d:04:c9:
                    43:fc:93:6a:98:19:6c:72:9f:08:ea:66:8a:bb:8e:
                    0f:3d:4b:bd:63:7b:04:7d:4e:dc:e2:e1:5d:93:01:
                    83:f1:a4:c4:ff:d5:ad:83:b8:12:d9:0a:6e:aa:50:
                    a5:64:3a:3c:8e:ee:ca:57:30:51:29:24:aa:46:ca:
                    cf:16:5e:a5:ed:30:ea:ab:5b:5e:76:24:c6:0f:1f:
                    19:98:bf:05:98:aa:04:91:3a:9d:f6:d8:aa:ac:ea:
                    88:77:ba:1a:24:fc:0f:07:44:b5:82:36:9e:05:47:
                    be:58:3a:da:b6:28:78:77:7c:65:6e:62:6f:22:4f:
                    99:99:e3:3d:9e:0c:cc:16:09:19:9c:68:d8:5c:88:
                    9b:c2:32:fe:c1:3b:ba:52:bf:c5:40:fc:9f:85:36:
                    0b:10:a8:9a:7e:51:bf:1f:8c:b3:88:b8:ea:bd:40:
                    99:06:64:3f:22:4c:26:4a:e9:2d:19:d0:a9:78:79:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:16:27:A8:CD:6F:6A:B2:1E:A8:21:C7:2D:BB:FF:5F:43:DF:1F:ED
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133312e3232312e35372e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:a4:eb:b7:91:66:c5:3b:08:f3:bd:44:bc:80:d3:fa:62:b7:
         fb:1f:dc:20:ef:2e:11:81:f2:43:f1:2b:dc:b0:ce:2e:83:a9:
         db:1a:70:d1:2b:3f:3f:46:e6:47:9c:79:82:31:0e:aa:a6:db:
         7a:50:8e:c5:1a:37:f4:26:8c:3f:6b:a2:ba:59:bf:6c:57:b8:
         60:2b:02:28:68:78:ad:75:e5:39:69:e3:c7:da:44:5f:27:34:
         48:a7:d6:dc:4e:79:d4:25:42:82:38:7a:d2:e6:bf:e1:db:bd:
         f2:f0:36:15:03:a7:b4:59:d4:ea:33:27:d0:33:e2:49:d4:0f:
         7b:01:f5:fc:12:ab:c9:c1:06:11:18:74:34:46:49:06:6f:ef:
         83:0e:69:08:7e:78:58:71:ae:aa:59:d1:db:50:78:ea:c5:41:
         d4:fd:3f:cf:17:6a:3c:fe:3c:1b:03:17:a9:d9:2d:3d:15:49:
         a3:4e:7f:b2:7c:be:93:0e:a1:2b:26:74:a0:b3:69:f8:36:58:
         1a:ea:5d:8d:e2:f6:ef:a2:19:86:0d:50:cf:2f:8e:7a:26:e4:
         5a:6e:b2:5f:ca:87:01:30:e2:21:d8:ff:88:e4:fb:0f:95:53:
         c6:04:ef:49:b4:16:b5:a7:3e:07:f1:6d:0b:79:67:e0:15:b7:
         2e:33:24:01
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUUbyqj9QswPi2xftOR8yooow2VuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENG
QzhBRjI4RDAeFw0yNDA0MDQyMDQyNDNaFw0yNTA0MDMyMDQ3NDNaMDMxMTAvBgNV
BAMTKDRDMTYyN0E4Q0Q2RjZBQjIxRUE4MjFDNzJEQkJGRjVGNDNERjFGRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSroozSkxIeo5HcahiQNraL7U
QEPhEmcXJVxK3asSJUB32CrVcvHBm2NVeT9lORRFZMfnvBOneDf8YjAX15YWhCgr
szMtsl0EyUP8k2qYGWxynwjqZoq7jg89S71jewR9Ttzi4V2TAYPxpMT/1a2DuBLZ
Cm6qUKVkOjyO7spXMFEpJKpGys8WXqXtMOqrW152JMYPHxmYvwWYqgSROp322Kqs
6oh3uhok/A8HRLWCNp4FR75YOtq2KHh3fGVuYm8iT5mZ4z2eDMwWCRmcaNhciJvC
Mv7BO7pSv8VA/J+FNgsQqJp+Ub8fjLOIuOq9QJkGZD8iTCZK6S0Z0Kl4eQp3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUTBYnqM1varIeqCHHLbv/X0PfH+0wHwYDVR0j
BBgwFoAUj4AOHOJ7h/JP1912w0tp3PyK8o0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzEvOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENGQzhBRjI4RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84RjgwMEUxQ0UyN0I4N0YyNEZE
N0RENzZDMzRCNjlEQ0ZDOEFGMjhELmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzEvMzEz
MzMxMmUzMjMyMzEyZTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
NzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACD3TkwDQYJKoZIhvcNAQELBQADggEBAJyk67eRZsU7
CPO9RLyA0/pit/sf3CDvLhGB8kPxK9ywzi6DqdsacNErPz9G5keceYIxDqqm23pQ
jsUaN/QmjD9rorpZv2xXuGArAihoeK115Tlp48faRF8nNEin1txOedQlQoI4etLm
v+HbvfLwNhUDp7RZ1OozJ9Az4knUD3sB9fwSq8nBBhEYdDRGSQZv74MOaQh+eFhx
rqpZ0dtQeOrFQdT9P88Xajz+PBsDF6nZLT0VSaNOf7J8vpMOoSsmdKCzafg2WBrq
XY3i9u+iGYYNUM8vjnom5Fpusl/KhwEw4iHY/4jk+w+VU8YE70m0FrWnPgfxbQt5
Z+AVty4zJAE=
-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:57 2024 by rpki-client on console-ams.rpki-client.org