Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135322e302f32322d3232203d3e20323632373635.roa
File:                     3137302e38302e3135322e302f32322d3232203d3e20323632373635.roa (raw, json)
Hash identifier:          2rIVWVJcDJNBh2Z2Gb4fZfJllFh2GpC3MKtMjL2Rqxo=
Subject key identifier:   49:54:53:A9:CA:BA:67:0B:DD:CF:C1:84:7B:6C:0A:BF:34:94:FE:B8
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       6FB5D265E342DCDBB3492651735BFD32ECD6A381
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135322e302f32322d3232203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:49 +0000
ROA not before:           Thu 04 Apr 2024 20:42:49 +0000
ROA not after:            Thu 03 Apr 2025 20:47:49 +0000
asID:                     262765
IP address blocks:        170.80.152.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b5:d2:65:e3:42:dc:db:b3:49:26:51:73:5b:fd:32:ec:d6:a3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:49 2024 GMT
            Not After : Apr  3 20:47:49 2025 GMT
        Subject: CN=495453A9CABA670BDDCFC1847B6C0ABF3494FEB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:66:7c:72:ef:c7:e9:1f:36:dc:07:f9:87:
                    84:45:e0:0a:eb:cb:05:52:cb:3a:ea:9a:46:3f:fb:
                    c3:41:de:d7:22:e3:14:e2:c8:76:70:fe:4d:64:ef:
                    3e:ea:07:15:99:f7:56:c4:3c:b0:1d:fa:73:c8:e3:
                    0c:e3:e9:52:48:9e:7d:b9:68:a4:5d:9f:e0:06:83:
                    79:3d:31:23:3a:e0:5f:3f:ae:76:d4:8b:46:df:02:
                    d0:15:8a:22:8f:09:65:52:39:fc:96:f2:27:61:c1:
                    4c:ec:10:c7:44:5f:12:05:18:cb:80:49:a9:64:b6:
                    16:e9:00:14:47:7f:c5:7a:64:f4:ad:61:51:03:50:
                    2b:b0:70:8b:87:b8:fa:76:06:cd:77:1d:1c:84:e1:
                    ba:17:a4:0e:4a:3b:40:81:39:73:63:45:65:02:ba:
                    bd:21:70:de:d3:95:27:ac:84:8c:68:1c:3b:80:20:
                    32:b4:5b:64:80:a5:f2:3e:60:73:c1:36:84:77:0b:
                    58:2d:f6:ba:e3:80:b5:58:de:4b:51:d3:9f:25:fe:
                    81:fd:58:65:9a:d4:94:43:b8:68:c1:83:19:96:7c:
                    65:4e:1d:66:3d:2a:88:5e:83:1e:04:85:60:b7:2d:
                    d0:b0:ce:2d:2e:b8:9a:be:23:11:41:ca:4b:1a:02:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:54:53:A9:CA:BA:67:0B:DD:CF:C1:84:7B:6C:0A:BF:34:94:FE:B8
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135322e302f32322d3232203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:a2:c2:a2:5a:31:5e:2f:78:8d:9d:84:b5:31:f6:b9:85:77:
         35:fe:4c:c2:61:ad:a1:09:f9:ff:1f:7c:6d:4e:f7:08:b3:69:
         f0:07:f0:cd:3c:f8:b0:f6:47:b7:f1:84:a4:f7:17:ab:d2:5b:
         35:f4:70:a4:c8:11:f4:a8:63:53:d0:10:ed:15:bd:b4:78:4e:
         e9:36:9c:8d:14:10:ec:ad:e5:33:e6:50:35:fe:8f:32:4c:48:
         eb:b2:45:cf:77:55:13:19:7d:7b:3b:96:26:87:82:26:f0:fc:
         c6:9d:62:28:4a:5c:66:06:c6:40:f0:37:4d:ee:22:27:44:f1:
         14:cd:6c:2f:17:d9:1b:c6:c3:4c:48:d0:d3:65:08:1a:f7:50:
         8e:60:b1:d1:01:f5:d3:ad:bc:33:40:50:b7:9c:1f:c8:87:0d:
         34:08:52:b9:e8:28:65:90:22:47:53:ee:7c:c1:46:08:82:62:
         93:a6:d4:f2:f8:19:05:e4:69:55:97:cf:4d:14:c7:3f:df:1c:
         c1:60:aa:e6:7f:ad:dd:8b:25:ad:95:30:52:8b:a6:b0:ab:97:
         02:82:1d:a6:1c:e6:5e:a7:b0:aa:fd:19:2b:65:36:a9:c5:db:
         b2:93:1a:47:51:c3:8f:c2:ce:62:8a:d6:d7:39:d8:85:00:7d:
         c1:4e:83:e0
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUb7XSZeNC3NuzSSZRc1v9MuzWo4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENG
QzhBRjI4RDAeFw0yNDA0MDQyMDQyNDlaFw0yNTA0MDMyMDQ3NDlaMDMxMTAvBgNV
BAMTKDQ5NTQ1M0E5Q0FCQTY3MEJERENGQzE4NDdCNkMwQUJGMzQ5NEZFQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/LGZ8cu/H6R823Af5h4RF4Arr
ywVSyzrqmkY/+8NB3tci4xTiyHZw/k1k7z7qBxWZ91bEPLAd+nPI4wzj6VJInn25
aKRdn+AGg3k9MSM64F8/rnbUi0bfAtAViiKPCWVSOfyW8idhwUzsEMdEXxIFGMuA
SalkthbpABRHf8V6ZPStYVEDUCuwcIuHuPp2Bs13HRyE4boXpA5KO0CBOXNjRWUC
ur0hcN7TlSeshIxoHDuAIDK0W2SApfI+YHPBNoR3C1gt9rrjgLVY3ktR058l/oH9
WGWa1JRDuGjBgxmWfGVOHWY9Kohegx4EhWC3LdCwzi0uuJq+IxFByksaAmCfAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUSVRTqcq6Zwvdz8GEe2wKvzSU/rgwHwYDVR0j
BBgwFoAUj4AOHOJ7h/JP1912w0tp3PyK8o0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzEvOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENGQzhBRjI4RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84RjgwMEUxQ0UyN0I4N0YyNEZE
N0RENzZDMzRCNjlEQ0ZDOEFGMjhELmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzEvMzEz
NzMwMmUzODMwMmUzMTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIz
NzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKqUJgwDQYJKoZIhvcNAQELBQADggEBAKqiwqJaMV4v
eI2dhLUx9rmFdzX+TMJhraEJ+f8ffG1O9wizafAH8M08+LD2R7fxhKT3F6vSWzX0
cKTIEfSoY1PQEO0VvbR4Tuk2nI0UEOyt5TPmUDX+jzJMSOuyRc93VRMZfXs7liaH
gibw/MadYihKXGYGxkDwN03uIidE8RTNbC8X2RvGw0xI0NNlCBr3UI5gsdEB9dOt
vDNAULecH8iHDTQIUrnoKGWQIkdT7nzBRgiCYpOm1PL4GQXkaVWXz00Uxz/fHMFg
quZ/rd2LJa2VMFKLprCrlwKCHaYc5l6nsKr9GStlNqnF27KTGkdRw4/CzmKK1tc5
2IUAfcFOg+A=
-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org