Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3136382e3233322e37322e302f32332d3233203d3e20323632373635.roa
File:                     3136382e3233322e37322e302f32332d3233203d3e20323632373635.roa (raw, json)
Hash identifier:          jJN4m1znVIIO86vT5eAF/cH3Y2pH0RJRZf8+6LjuM5o=
Subject key identifier:   A5:30:E4:C2:94:BD:28:52:FD:E7:F3:C6:F4:54:29:DE:2B:F7:7C:6A
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       71392E966C6289A09847D9BEA545C23A6C0FFFF6
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3136382e3233322e37322e302f32332d3233203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:50 +0000
ROA not before:           Thu 04 Apr 2024 20:42:50 +0000
ROA not after:            Thu 03 Apr 2025 20:47:50 +0000
asID:                     262765
IP address blocks:        168.232.72.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:39:2e:96:6c:62:89:a0:98:47:d9:be:a5:45:c2:3a:6c:0f:ff:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:50 2024 GMT
            Not After : Apr  3 20:47:50 2025 GMT
        Subject: CN=A530E4C294BD2852FDE7F3C6F45429DE2BF77C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:53:f1:bc:9f:36:d4:de:ce:2d:5d:e3:19:f7:
                    4f:4c:49:d9:5d:0c:b5:ca:01:fa:e5:57:cc:da:44:
                    a3:c2:f4:30:99:4a:9a:49:d3:3d:72:8d:77:1d:57:
                    6e:63:9d:d4:6a:c2:64:84:12:00:e5:83:89:43:e8:
                    56:44:a1:b2:fd:9b:5c:a7:a6:21:42:46:5e:47:9f:
                    1c:db:09:51:41:06:54:a6:1e:f8:85:94:47:94:27:
                    67:ea:ee:c7:13:a7:a9:c2:ec:44:ac:af:ed:ed:97:
                    10:a2:34:60:20:fe:b8:fa:15:70:1d:8e:8b:0b:db:
                    8b:7c:86:c9:b2:69:cc:5a:72:35:65:f2:9d:a9:ba:
                    34:dc:dd:88:3f:fc:e7:5e:f3:e8:45:6c:25:21:63:
                    21:f9:ac:ef:8a:26:a3:df:4d:bd:15:a5:8f:82:c5:
                    98:ca:19:c2:fd:b8:7f:5a:c9:cc:d3:eb:02:7c:a2:
                    ea:e4:36:b5:b2:7d:3e:cd:67:8d:12:fa:26:b1:10:
                    b5:70:01:61:eb:c3:ed:8a:8b:5c:4d:12:cf:b2:a9:
                    20:44:79:fe:8c:7b:74:a1:56:f2:6d:4d:16:d1:41:
                    be:95:95:ac:96:7c:ba:75:60:08:8d:d7:88:bc:bd:
                    60:3c:f1:34:ea:3c:6c:4c:0a:7e:65:56:5b:43:9a:
                    b9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:30:E4:C2:94:BD:28:52:FD:E7:F3:C6:F4:54:29:DE:2B:F7:7C:6A
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3136382e3233322e37322e302f32332d3233203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:2d:ba:12:ff:83:44:52:91:ed:3a:84:9f:55:f1:41:45:8f:
         a7:48:8d:08:72:37:2c:87:cb:02:e1:fd:d2:ab:7a:ff:59:ca:
         1d:e8:d7:69:f6:54:75:46:4e:76:63:7f:ae:f4:2c:10:9c:d2:
         df:2c:2c:68:02:4a:f4:f1:cd:37:2e:ac:cb:66:60:06:8b:af:
         77:67:90:6e:8d:a2:61:e9:ef:94:e8:89:41:55:10:12:a8:9a:
         92:5e:7c:6c:87:61:4e:ac:fa:c1:10:e8:aa:72:20:b9:53:e0:
         70:13:08:a1:29:7e:ce:78:25:d3:d8:2a:d7:cd:eb:bd:33:0a:
         79:54:00:0d:ae:fb:e4:b4:6d:81:f0:96:73:70:92:3f:8b:bc:
         fe:d0:1e:d0:33:70:83:7c:d2:77:be:5c:c2:1b:87:de:5a:d4:
         f8:45:4d:3f:68:cc:2a:28:e4:64:e7:e1:6c:ae:f5:76:1c:3e:
         42:cb:14:a6:6b:b2:bf:11:5c:52:ea:19:cf:20:22:f7:e7:c8:
         35:0a:38:d8:4c:fc:b4:fd:a9:ca:09:10:93:df:f1:2f:3c:74:
         57:d4:33:0e:62:bb:0f:cf:1e:f1:f3:5a:85:64:61:8d:0e:be:
         4c:76:c5:b1:32:5b:6c:c4:42:a5:b6:02:9e:56:22:6d:4a:6c:
         1b:1c:67:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:57 2024 by rpki-client on console-ams.rpki-client.org