Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3136382e3233322e37322e302f32322d3232203d3e20323632373635.roa
File:                     3136382e3233322e37322e302f32322d3232203d3e20323632373635.roa (raw, json)
Hash identifier:          I2JkXIr1N/NbL12rsSaCzVKu5ER2EHrdTJkZb4dEAK8=
Subject key identifier:   A4:52:C9:EC:B8:7A:18:47:90:3B:3B:55:71:BF:9A:87:A0:4B:6D:F7
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       32065B62290FFF76EC1E6D558601EC1808B39759
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3136382e3233322e37322e302f32322d3232203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:51 +0000
ROA not before:           Thu 04 Apr 2024 20:42:51 +0000
ROA not after:            Thu 03 Apr 2025 20:47:51 +0000
asID:                     262765
IP address blocks:        168.232.72.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:06:5b:62:29:0f:ff:76:ec:1e:6d:55:86:01:ec:18:08:b3:97:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:51 2024 GMT
            Not After : Apr  3 20:47:51 2025 GMT
        Subject: CN=A452C9ECB87A1847903B3B5571BF9A87A04B6DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:90:39:2d:4c:89:81:ac:8c:3d:47:e5:ee:
                    22:e6:37:2e:35:15:f4:c3:3c:14:c8:71:0f:d5:25:
                    9d:6c:c9:51:da:a6:9c:e0:ec:75:07:03:32:f5:61:
                    ab:91:a0:56:40:8d:3e:a7:ff:cc:af:89:66:3f:b3:
                    8b:02:46:f8:11:30:f0:b5:b5:fb:77:38:68:0c:2e:
                    8c:80:55:ce:7d:6d:34:18:29:37:79:8d:30:f5:d3:
                    13:dd:4b:e4:67:58:73:38:ed:a5:59:77:83:c7:d2:
                    e3:5f:ca:a3:40:bc:02:2b:4e:85:a7:a8:1a:98:af:
                    47:0d:1e:d4:e6:91:91:18:d1:6a:65:e9:35:e1:93:
                    4a:fb:25:7a:26:18:89:6f:c8:53:40:0a:62:1e:29:
                    12:85:de:f8:ad:21:3a:ac:b1:cd:4a:d7:b5:30:64:
                    86:6a:e2:50:4a:8b:6a:5a:6c:e9:95:26:ec:f8:9f:
                    20:e1:da:a3:cc:76:c1:f5:a4:20:87:41:6d:75:4f:
                    be:c8:cb:cb:0e:51:11:43:c7:e1:33:6b:f6:61:ea:
                    3d:1b:fa:a8:92:b4:d6:ec:63:37:ec:c8:90:42:56:
                    97:91:c6:33:eb:0e:c5:06:a6:9c:05:14:66:16:d5:
                    e8:ec:5c:7b:91:1c:d7:ba:3f:83:b5:4e:f7:b0:62:
                    e2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:52:C9:EC:B8:7A:18:47:90:3B:3B:55:71:BF:9A:87:A0:4B:6D:F7
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3136382e3233322e37322e302f32322d3232203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:2f:50:82:f8:4e:1b:a8:98:b7:e7:5c:14:ea:43:c3:60:56:
         5f:64:58:41:69:34:45:a3:5a:fd:0c:be:9f:55:0a:29:dd:ea:
         80:09:80:6c:0e:cb:3c:39:5b:0f:ce:88:87:4e:56:8d:7f:85:
         8a:c3:d7:28:1f:b6:08:e3:9e:ad:57:15:04:74:1b:93:3b:35:
         12:b9:d3:24:c1:45:a3:f4:36:5e:5c:0d:98:a5:af:c2:63:12:
         7c:5a:e3:ab:30:cc:c2:e9:56:f4:e4:c0:08:f8:63:1d:11:7c:
         3f:9e:cc:e5:eb:af:a1:f0:31:6d:cc:16:41:03:05:b0:a7:3b:
         b9:1e:b3:85:bb:f7:bd:12:eb:29:7b:ab:7a:32:27:71:38:f2:
         03:ec:c3:90:39:ee:cc:d8:ed:00:15:35:27:e7:28:44:ca:7f:
         6a:a0:0c:4c:77:7f:70:54:d6:c3:fe:c0:98:e3:f0:72:a0:8d:
         31:3a:49:3f:3a:af:aa:1c:f3:75:db:22:2e:f5:05:8c:e3:6b:
         f9:1b:39:b1:89:9f:f4:63:b1:00:1d:6c:87:f6:9c:c2:85:3d:
         46:ec:9c:54:02:61:74:04:bf:15:c0:13:55:f8:6a:78:f2:41:
         a3:a7:0b:d9:33:fc:26:bc:b0:df:1d:7b:ae:30:e6:37:01:5e:
         be:0e:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:57 2024 by rpki-client on console-ams.rpki-client.org