Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133312e3232312e35392e302f32342d3234203d3e20323632373635.roa
File:                     3133312e3232312e35392e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          EYs9lbSuH0l8OEPBRxHOtYJhWZzvMfknaLhOlu2rkho=
Subject key identifier:   03:33:C4:C6:F4:04:70:BC:A0:C9:B9:08:28:9A:84:7A:4B:11:AB:95
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       628A45BF683DB588579E556456DD8FDBB26A6AE5
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133312e3232312e35392e302f32342d3234203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:45 +0000
ROA not before:           Thu 04 Apr 2024 20:42:45 +0000
ROA not after:            Thu 03 Apr 2025 20:47:45 +0000
asID:                     262765
IP address blocks:        131.221.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8a:45:bf:68:3d:b5:88:57:9e:55:64:56:dd:8f:db:b2:6a:6a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:45 2024 GMT
            Not After : Apr  3 20:47:45 2025 GMT
        Subject: CN=0333C4C6F40470BCA0C9B908289A847A4B11AB95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:d9:ef:d0:72:ea:b2:a3:58:93:e3:10:82:
                    03:de:0f:d6:e8:1e:a8:9a:91:93:19:e9:76:a2:29:
                    7d:1b:29:f7:a2:c9:74:9f:84:53:c1:87:d9:62:bc:
                    e6:54:73:cb:64:9d:e7:a9:ba:54:9e:e7:b4:6d:e6:
                    fb:60:ef:fb:a2:43:b9:65:dd:f9:bd:4e:7d:27:f0:
                    64:0c:4e:c5:6d:fb:f8:a6:24:42:58:aa:a0:3b:f0:
                    d3:3f:02:64:e9:a4:40:57:a3:5e:f2:1c:70:a3:f7:
                    17:4f:08:d5:b1:72:59:dc:11:bf:13:45:8c:81:3d:
                    af:0e:a6:cd:1c:1d:8a:a5:1d:75:63:bb:3d:56:be:
                    b9:0c:ed:da:35:75:1f:2d:c5:60:fe:e8:1c:94:f5:
                    89:47:45:8e:b7:6c:bb:1a:49:0b:81:99:f6:f0:a2:
                    e4:a1:12:47:0d:05:a9:10:3f:60:8d:bc:f6:0f:98:
                    45:99:79:5f:2e:90:5c:9c:98:b7:4a:65:1a:b3:d2:
                    e4:9a:07:61:c8:52:ca:1d:63:ad:90:73:73:68:86:
                    66:7d:ea:3f:c6:3c:d0:a4:30:48:3d:6d:bb:95:b9:
                    3c:b1:97:a0:f2:0b:d7:f9:a3:da:df:b5:c9:3e:cd:
                    72:7e:e4:1b:7f:80:18:92:6a:95:76:67:0c:ac:6c:
                    40:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:33:C4:C6:F4:04:70:BC:A0:C9:B9:08:28:9A:84:7A:4B:11:AB:95
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133312e3232312e35392e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:2a:9c:bd:d0:f2:e2:e2:d5:ec:d7:8d:a2:4d:3d:4e:07:c0:
         46:4a:cd:73:ac:eb:80:6d:d8:a9:f4:ea:84:19:54:5a:21:21:
         90:0d:d1:18:48:5b:63:00:f4:64:6c:97:d4:f3:65:c9:09:46:
         43:e7:7a:7c:f3:fa:d6:7b:60:c6:de:6b:3f:29:7f:fd:2d:be:
         e2:27:a9:a2:94:08:98:c3:49:42:59:c3:81:82:14:60:93:ec:
         d1:9c:e7:77:60:b8:f8:55:b5:45:ca:ee:25:33:d3:6c:f6:d0:
         1c:ed:12:22:55:15:fc:1d:e4:48:7a:be:97:f4:f8:ab:43:66:
         6d:a2:f8:f7:19:a5:cc:a9:0b:98:b9:fd:41:f4:f2:0e:8a:7d:
         3c:cf:66:6d:2a:e3:52:1c:63:12:7d:b6:07:77:76:99:45:fc:
         e5:99:3c:bb:9b:86:a1:6e:62:64:44:89:ed:2a:97:a6:54:ee:
         17:59:45:1d:c6:13:e1:77:e8:89:50:b0:13:ec:78:31:a8:a1:
         4f:e1:d6:f9:f4:cb:ab:9a:22:a4:ce:c0:33:96:da:0d:14:71:
         a5:1b:fe:4d:83:f1:ca:4d:d3:22:24:4f:cb:5f:73:f1:68:27:
         29:00:e5:a0:3e:98:14:55:4b:b0:80:b6:4e:f3:56:c5:a9:94:
         68:a0:6e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:57 2024 by rpki-client on console-ams.rpki-client.org