Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3136382e3233322e37352e302f32342d3234203d3e20323632373635.roa
File:                     3136382e3233322e37352e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          xqDNMdZMho2v57B3vBaUefxE3qf2/oRA5Y/+2HAYJr4=
Subject key identifier:   9B:EA:77:9C:9C:51:10:4A:55:13:45:69:BD:94:7B:2C:6F:53:B5:34
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       65928AEB70FC5D5F5BC527251A5757F5F741BC0A
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3136382e3233322e37352e302f32342d3234203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:52 +0000
ROA not before:           Thu 04 Apr 2024 20:42:52 +0000
ROA not after:            Thu 03 Apr 2025 20:47:52 +0000
asID:                     262765
IP address blocks:        168.232.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:92:8a:eb:70:fc:5d:5f:5b:c5:27:25:1a:57:57:f5:f7:41:bc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:52 2024 GMT
            Not After : Apr  3 20:47:52 2025 GMT
        Subject: CN=9BEA779C9C51104A55134569BD947B2C6F53B534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:c1:21:9a:c8:07:63:89:33:b4:ff:d3:08:
                    f6:eb:88:3b:b4:42:1f:97:68:c6:89:30:57:6c:fa:
                    d6:a6:88:3a:fd:03:6a:bf:30:44:86:bd:28:cb:7c:
                    e4:5d:4e:d6:6b:0c:e1:9e:47:94:22:c7:4d:e8:f4:
                    51:c5:f1:79:fe:17:2e:6d:e8:ba:26:23:7c:e6:3e:
                    84:a1:61:93:d3:71:89:45:c9:02:7f:ac:22:34:d5:
                    f2:94:3a:9d:f9:98:86:8d:b4:c3:c4:95:01:da:56:
                    44:ee:f1:0c:c7:1a:10:5b:c2:e4:74:b3:7d:e4:7f:
                    9f:92:f0:df:91:69:50:b0:31:94:b5:9a:c8:14:cd:
                    4d:a1:7a:f7:d7:7e:10:89:95:49:89:56:94:96:74:
                    b0:32:82:f2:3d:62:2f:78:3c:68:4e:a3:d4:97:36:
                    95:fb:5f:6c:8a:f9:bb:5e:e2:de:be:5e:4c:83:15:
                    5f:e0:41:e7:b9:74:77:07:22:f8:73:cc:ab:15:72:
                    61:5a:35:71:8d:f5:e6:63:c6:5f:83:e3:98:19:01:
                    dc:24:fc:2e:33:29:1d:8f:81:85:84:55:9d:32:fa:
                    56:1e:63:a3:03:04:94:38:1a:65:64:6d:de:d6:bc:
                    23:2e:80:80:97:63:44:da:3c:28:79:b7:de:0f:01:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EA:77:9C:9C:51:10:4A:55:13:45:69:BD:94:7B:2C:6F:53:B5:34
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3136382e3233322e37352e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:8d:28:25:82:56:76:65:82:ab:97:02:5f:90:1a:f7:8c:8d:
         8e:f5:3c:55:bc:96:c0:b7:bb:2c:b6:76:ec:fb:50:36:40:66:
         74:7c:f6:50:0b:1f:85:2c:b6:ca:9e:cd:d7:cb:95:1e:f1:a4:
         f7:cf:fc:09:2c:22:28:3f:e6:df:02:c8:8b:1b:95:3a:4d:50:
         05:e0:9f:6c:ef:51:c8:15:cb:32:66:d5:a6:2c:68:79:03:f3:
         39:23:fb:f9:09:40:c0:fb:7c:65:72:9c:6a:51:26:1c:d1:56:
         41:6c:7a:16:a7:88:19:fc:77:c3:43:90:8e:b1:da:e5:6a:51:
         e9:98:a5:a6:db:e7:3d:8d:db:b6:07:2a:eb:78:e2:a7:a8:ca:
         f5:bd:89:3b:51:fe:da:86:b5:44:23:50:3a:20:40:06:b7:0c:
         44:15:83:6a:84:66:2a:b1:f0:86:8e:1f:0e:d4:ee:60:5d:61:
         b7:e3:bc:43:cb:8e:8f:8f:28:07:97:6f:1f:da:47:ac:b9:c2:
         8a:ae:f8:45:98:44:c9:82:16:e7:94:26:8c:22:80:14:bf:09:
         de:e8:5f:b2:b6:4e:8d:30:fc:34:82:e1:d1:88:b1:64:4d:d9:
         1b:17:89:30:f2:28:8c:53:c0:a3:5f:a8:4c:b3:42:fc:4c:a0:
         3a:49:55:48
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUZZKK63D8XV9bxSclGldX9fdBvAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENG
QzhBRjI4RDAeFw0yNDA0MDQyMDQyNTJaFw0yNTA0MDMyMDQ3NTJaMDMxMTAvBgNV
BAMTKDlCRUE3NzlDOUM1MTEwNEE1NTEzNDU2OUJEOTQ3QjJDNkY1M0I1MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/MEhmsgHY4kztP/TCPbriDu0
Qh+XaMaJMFds+tamiDr9A2q/MESGvSjLfORdTtZrDOGeR5Qix03o9FHF8Xn+Fy5t
6LomI3zmPoShYZPTcYlFyQJ/rCI01fKUOp35mIaNtMPElQHaVkTu8QzHGhBbwuR0
s33kf5+S8N+RaVCwMZS1msgUzU2hevfXfhCJlUmJVpSWdLAygvI9Yi94PGhOo9SX
NpX7X2yK+bte4t6+XkyDFV/gQee5dHcHIvhzzKsVcmFaNXGN9eZjxl+D45gZAdwk
/C4zKR2PgYWEVZ0y+lYeY6MDBJQ4GmVkbd7WvCMugICXY0TaPCh5t94PAQ2xAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUm+p3nJxREEpVE0VpvZR7LG9TtTQwHwYDVR0j
BBgwFoAUj4AOHOJ7h/JP1912w0tp3PyK8o0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzEvOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENGQzhBRjI4RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84RjgwMEUxQ0UyN0I4N0YyNEZE
N0RENzZDMzRCNjlEQ0ZDOEFGMjhELmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzEvMzEz
NjM4MmUzMjMzMzIyZTM3MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
NzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACo6EswDQYJKoZIhvcNAQELBQADggEBAEeNKCWCVnZl
gquXAl+QGveMjY71PFW8lsC3uyy2duz7UDZAZnR89lALH4UstsqezdfLlR7xpPfP
/AksIig/5t8CyIsblTpNUAXgn2zvUcgVyzJm1aYsaHkD8zkj+/kJQMD7fGVynGpR
JhzRVkFsehaniBn8d8NDkI6x2uVqUemYpabb5z2N27YHKut44qeoyvW9iTtR/tqG
tUQjUDogQAa3DEQVg2qEZiqx8IaOHw7U7mBdYbfjvEPLjo+PKAeXbx/aR6y5woqu
+EWYRMmCFueUJowigBS/Cd7oX7K2To0w/DSC4dGIsWRN2RsXiTDyKIxTwKNfqEyz
QvxMoDpJVUg=
-----END CERTIFICATE-----
Generated at Fri Nov 1 14:34:50 2024 by rpki-client on console-fra.rpki-client.org