Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133312e3232312e35382e302f32332d3233203d3e20323632373635.roa
File:                     3133312e3232312e35382e302f32332d3233203d3e20323632373635.roa (raw, json)
Hash identifier:          ICS7zoWMc/5g/n9rU8M3ybl6lt5VbxboPxBg21tNcjk=
Subject key identifier:   6D:A6:D9:25:13:2C:B2:15:77:AA:90:3A:B2:F0:3F:80:19:29:E7:66
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       6F74BFEB27E17F1B87E90F0215B4990141C99A93
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133312e3232312e35382e302f32332d3233203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:43 +0000
ROA not before:           Thu 04 Apr 2024 20:42:43 +0000
ROA not after:            Thu 03 Apr 2025 20:47:43 +0000
asID:                     262765
IP address blocks:        131.221.58.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:74:bf:eb:27:e1:7f:1b:87:e9:0f:02:15:b4:99:01:41:c9:9a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:43 2024 GMT
            Not After : Apr  3 20:47:43 2025 GMT
        Subject: CN=6DA6D925132CB21577AA903AB2F03F801929E766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:08:9f:59:df:2b:b4:3e:d7:da:4b:9a:ff:
                    4b:98:2d:4b:1e:48:ee:6e:1e:c1:b7:df:5c:ba:0e:
                    3b:bc:4c:72:34:ba:e9:23:e3:d4:6a:8d:2c:65:59:
                    f5:77:17:89:8d:4b:1c:84:83:62:9e:05:ef:20:8e:
                    a8:fc:33:cb:fb:f3:fa:2a:8c:f1:3f:f4:c4:fc:f1:
                    62:dd:1d:94:10:3a:0a:10:63:9f:d5:f2:d5:b0:6c:
                    da:7d:bd:3d:32:02:36:78:35:10:44:b9:3f:fc:03:
                    df:d2:14:a8:7f:53:3e:ab:29:cb:56:79:54:94:53:
                    60:a9:81:4f:d9:c7:20:e9:01:0c:81:ee:aa:d3:81:
                    13:bd:82:60:3a:0a:06:c9:a3:60:b2:51:ba:fd:97:
                    4b:99:a8:f0:7e:8a:6b:1d:cd:af:43:51:85:c7:b3:
                    66:65:ce:2e:69:00:db:dd:c0:37:be:76:87:f7:91:
                    8c:fb:7c:31:22:9d:a3:2d:6c:cf:fd:e0:f5:eb:e6:
                    d1:db:3a:29:f6:c3:68:11:b0:d0:72:7c:58:64:23:
                    7c:a9:6a:15:71:9c:91:cf:b5:c9:a6:14:57:98:72:
                    3c:32:1c:14:89:23:ee:ee:30:85:ee:75:e7:89:a9:
                    9d:13:9a:b3:59:12:d0:03:16:bc:66:2a:e2:61:45:
                    ea:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A6:D9:25:13:2C:B2:15:77:AA:90:3A:B2:F0:3F:80:19:29:E7:66
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133312e3232312e35382e302f32332d3233203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:24:14:f0:d8:82:3b:7e:77:3e:5a:b9:af:7c:ab:96:f7:a5:
         e6:f7:1d:9c:8c:7e:1d:4f:fe:d2:78:3c:89:cc:36:63:fc:69:
         ee:5d:9b:a5:2f:e0:3b:2c:56:43:b6:98:e9:a1:4f:fd:a7:18:
         f8:ea:3a:64:0b:72:db:1a:09:3a:68:47:6a:7f:65:0a:1f:48:
         17:64:cb:6c:ae:c2:4b:41:ee:fb:d8:b0:93:a2:1f:30:bc:e6:
         38:01:11:cd:e2:fe:80:4c:34:7d:64:eb:74:0a:cd:60:28:b9:
         bf:6b:1f:1c:80:55:1b:03:64:b5:e7:9a:ef:f0:6a:7f:59:d2:
         66:b4:20:f5:9a:34:6e:76:bc:45:cb:55:ff:72:47:5c:39:2e:
         0e:3a:ab:27:da:dd:f4:2d:30:8d:74:fe:94:1b:81:dc:0f:e2:
         49:50:ad:8a:fc:9f:3e:61:5c:10:cb:d2:0b:08:50:21:5f:29:
         27:30:ea:ae:f5:dd:c1:bf:df:a2:0f:b9:eb:f3:66:6f:92:0b:
         21:6a:d6:13:63:a4:19:59:b3:47:4d:70:dc:aa:4d:5e:39:1c:
         5b:56:df:72:f5:a2:01:36:76:17:ae:47:43:a4:5e:da:69:11:
         de:11:da:fa:05:5d:3e:ef:76:97:60:da:58:3a:2e:e1:9f:38:
         39:d3:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 14:34:50 2024 by rpki-client on console-fra.rpki-client.org