Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135332e302f32342d3234203d3e20323632373635.roa
File:                     3137302e38302e3135332e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          zfywfo/whrOm6k4Qt+VxW1VqHhlX36fNrChaLkRRHEw=
Subject key identifier:   96:5B:90:3E:83:2E:ED:C3:B6:F9:86:2C:F5:AC:5C:69:3B:B0:D3:15
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       587C478A47F4221A1C4DB0EDDF4E4222B2AFE309
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135332e302f32342d3234203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:44 +0000
ROA not before:           Thu 04 Apr 2024 20:42:44 +0000
ROA not after:            Thu 03 Apr 2025 20:47:44 +0000
asID:                     262765
IP address blocks:        170.80.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:08:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7c:47:8a:47:f4:22:1a:1c:4d:b0:ed:df:4e:42:22:b2:af:e3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:44 2024 GMT
            Not After : Apr  3 20:47:44 2025 GMT
        Subject: CN=965B903E832EEDC3B6F9862CF5AC5C693BB0D315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:c0:76:59:1f:b9:2f:f6:cd:d1:01:f3:35:
                    5c:c7:78:9d:6f:e4:ea:7b:b7:f3:e6:7f:5d:ec:0b:
                    20:4e:e2:4e:39:ca:5e:0f:e8:11:53:64:55:fe:f7:
                    83:e3:8a:4e:d3:47:b9:48:48:84:9c:f5:0f:a1:cc:
                    be:28:98:46:1a:f8:2d:49:9d:d7:03:64:07:62:2a:
                    c5:53:48:db:47:c6:bf:41:5c:ec:a6:fa:38:b2:36:
                    a1:aa:50:14:4c:99:0b:d4:4e:a0:67:ac:65:49:58:
                    3f:56:a0:fb:54:36:de:7a:16:92:68:46:6b:10:1a:
                    f3:ee:5f:3d:2f:74:56:17:b6:05:c7:40:62:1f:de:
                    54:59:c1:b8:cf:a9:93:e3:12:a3:72:bd:eb:b4:81:
                    d0:ba:94:bd:31:6c:35:84:94:37:8a:73:b6:95:13:
                    35:25:5c:2f:a5:fc:f1:41:5d:a9:8c:d9:17:ea:95:
                    67:f4:5f:af:b4:6a:a5:a4:a6:2c:42:a5:74:ce:ed:
                    ff:02:7d:1d:d4:b4:59:6e:df:91:a0:fd:61:c2:d5:
                    20:55:07:58:4a:81:d2:df:ac:6d:68:86:6e:ce:8c:
                    ed:84:f0:c0:c5:10:94:21:85:da:de:37:3e:9d:3c:
                    33:20:d5:52:c7:18:06:a8:4f:83:8e:80:5d:44:e1:
                    ee:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5B:90:3E:83:2E:ED:C3:B6:F9:86:2C:F5:AC:5C:69:3B:B0:D3:15
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135332e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:7f:b6:4b:86:e0:5b:c8:09:fb:e2:58:67:ad:ef:f5:95:37:
         f0:49:2c:7c:2e:8d:57:9d:32:22:33:a2:e9:b3:7a:ac:07:e0:
         7e:8f:fb:04:0c:27:45:a2:1e:b5:af:52:14:87:0e:11:8f:30:
         94:14:c4:5c:5f:8c:8b:38:9d:c6:d2:b8:3a:1d:6e:aa:ff:1f:
         c1:33:8f:2b:91:16:a0:7a:f5:34:d5:f4:ae:41:05:dd:fc:d3:
         cd:dd:46:65:1e:49:4b:2f:ef:a0:92:d5:5f:fa:5c:56:56:dd:
         d6:51:0c:5e:96:43:58:7a:f4:72:34:74:a5:f1:8d:d3:46:b0:
         9a:7a:21:18:40:57:8f:ed:e6:8d:89:14:4e:c4:09:fb:50:3a:
         eb:90:f1:2d:9a:a8:e5:e6:91:06:14:a0:54:86:44:74:5f:ba:
         1b:2c:1c:76:f6:bf:03:26:98:a4:17:2d:77:e8:cd:82:fe:e1:
         d1:63:1a:28:15:ee:7c:db:7f:2f:c3:d7:b6:4a:0d:39:67:5d:
         92:45:fa:3e:20:7c:2a:0b:49:03:21:43:a7:73:e0:e4:70:8f:
         90:62:3c:44:e9:87:c8:10:fe:db:b9:4d:34:c8:74:17:16:70:
         8a:94:4c:b7:a2:14:9e:41:c2:b9:b7:8d:7e:55:b1:2e:77:32:
         49:e8:2b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org