Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135322e302f32332d3233203d3e20323632373635.roa
File:                     3137302e38302e3135322e302f32332d3233203d3e20323632373635.roa (raw, json)
Hash identifier:          C8gw2E4gncU3GEzksksB9maxBnHojI7HF6u5PbbK64c=
Subject key identifier:   F0:3C:E7:45:ED:76:9A:FC:D8:02:7F:42:D1:70:B8:57:40:F2:4E:D7
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       3B6574FBF033EA13DCC087245B30878CEF929DFD
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135322e302f32332d3233203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:47 +0000
ROA not before:           Thu 04 Apr 2024 20:42:47 +0000
ROA not after:            Thu 03 Apr 2025 20:47:47 +0000
asID:                     262765
IP address blocks:        170.80.152.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:65:74:fb:f0:33:ea:13:dc:c0:87:24:5b:30:87:8c:ef:92:9d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:47 2024 GMT
            Not After : Apr  3 20:47:47 2025 GMT
        Subject: CN=F03CE745ED769AFCD8027F42D170B85740F24ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:ec:91:74:c2:e3:b1:f9:f4:6a:ad:68:1c:
                    11:06:dd:00:32:56:e2:ed:19:90:2b:d7:78:44:ba:
                    5c:2b:6a:58:82:e2:13:69:77:62:eb:93:05:91:f2:
                    b3:32:26:5a:d0:1f:e8:e8:af:d3:01:14:d2:0c:96:
                    7b:fe:1d:2e:ee:00:6f:b9:51:74:0a:2e:01:f5:a3:
                    5d:54:12:03:1b:fe:ea:12:75:b8:9f:cb:c3:9b:c8:
                    af:9e:59:c3:59:de:9a:a9:c3:82:b6:f0:52:36:a1:
                    4d:b0:95:69:8e:f3:07:73:31:87:68:2a:c4:a5:57:
                    25:e9:67:66:80:e6:ba:37:7f:f3:81:43:9c:a9:d0:
                    ec:93:f3:dc:bf:97:f6:ab:1f:cc:e2:28:69:2f:29:
                    9d:7e:a2:56:67:96:ea:39:5b:92:c4:8b:70:55:b3:
                    2a:70:71:d9:69:7a:d4:f7:05:91:c5:89:40:08:ce:
                    00:2b:ec:f3:86:6b:b4:1d:d5:69:45:88:be:93:62:
                    81:62:f0:ed:c4:b9:31:48:5e:14:39:e7:32:17:33:
                    88:3f:2c:e4:b2:c5:e8:14:17:e2:f6:bc:e8:5f:25:
                    aa:68:dd:db:ce:45:9a:d7:38:62:81:5e:f2:67:be:
                    f0:67:6f:25:51:b5:91:6b:04:f8:88:ff:d0:0a:2e:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3C:E7:45:ED:76:9A:FC:D8:02:7F:42:D1:70:B8:57:40:F2:4E:D7
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135322e302f32332d3233203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:64:5f:96:5e:2c:c7:f8:8a:83:df:13:f0:f5:a6:2e:67:
         0f:1a:6b:7f:27:41:db:c3:17:1e:c2:30:d9:de:e1:2f:e4:36:
         b4:36:ef:99:9d:4b:ed:57:3d:0f:37:50:f5:f2:c6:4f:3b:bb:
         e5:88:31:a9:04:d5:2b:11:1b:99:4d:ec:7d:dc:70:37:6c:51:
         83:77:45:e8:45:f7:5c:b5:c7:b6:4b:c4:88:85:98:b6:e2:3e:
         5c:1b:cd:e8:03:6c:58:60:db:8e:bc:6c:a2:bb:46:78:57:68:
         b8:90:77:07:5a:35:5e:69:5a:6a:72:a4:f4:34:a4:7b:55:5c:
         50:52:ef:dd:31:53:52:f6:73:0e:d5:f7:e2:41:78:28:94:b1:
         19:59:ef:82:3a:bd:2d:d1:48:79:aa:a5:29:9a:b7:c9:9c:22:
         26:b5:c1:be:cf:5c:32:a2:c4:7e:2c:30:a0:f3:03:d2:64:ae:
         27:6c:23:13:2d:3d:03:58:90:6e:98:b1:10:c6:64:60:79:6b:
         50:e7:f3:8b:b9:36:85:8a:41:5b:80:ca:c2:ad:5a:2e:de:19:
         c4:67:57:be:89:81:ed:a0:64:0c:9c:73:da:d3:ef:e5:2e:a6:
         dc:dc:b7:f6:7a:39:a9:b2:5f:53:0e:c6:b6:39:5a:e8:70:e1:
         5a:dc:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 14:34:50 2024 by rpki-client on console-fra.rpki-client.org