Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135342e302f32332d3233203d3e20323632373635.roa
File:                     3137302e38302e3135342e302f32332d3233203d3e20323632373635.roa (raw, json)
Hash identifier:          YX0Cx0p+0/eQooncrU79lFbmpLJCQNUK3UVKYQ7+LwM=
Subject key identifier:   0A:FB:96:A9:06:9E:C8:D6:99:0C:39:37:3E:B2:9F:71:F1:94:D0:45
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       17125DC034EC530F73AA33D44275C5197D567B12
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135342e302f32332d3233203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:56 +0000
ROA not before:           Thu 04 Apr 2024 20:42:56 +0000
ROA not after:            Thu 03 Apr 2025 20:47:56 +0000
asID:                     262765
IP address blocks:        170.80.154.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:12:5d:c0:34:ec:53:0f:73:aa:33:d4:42:75:c5:19:7d:56:7b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:56 2024 GMT
            Not After : Apr  3 20:47:56 2025 GMT
        Subject: CN=0AFB96A9069EC8D6990C39373EB29F71F194D045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:83:48:54:bc:85:c7:e2:18:8c:ee:bd:ee:
                    df:42:1b:b6:19:6d:20:02:41:2a:68:34:9c:77:78:
                    e6:64:e9:ca:fb:04:3d:d0:41:3b:7f:86:1a:8b:62:
                    48:54:79:d5:0c:59:12:dc:d2:36:d3:e1:4a:73:80:
                    a0:19:94:b1:15:45:47:1e:16:3d:55:54:0a:7a:95:
                    3c:cd:ca:44:c0:60:c7:6e:6e:0c:66:87:a9:38:93:
                    4d:63:c7:81:6d:2c:c3:18:67:2a:bb:53:99:60:79:
                    4f:69:8e:2b:e1:8c:e4:3b:d2:49:8e:34:c1:71:28:
                    79:33:1d:70:d2:6d:de:0a:96:8a:45:09:fb:39:83:
                    2f:c6:dc:e6:82:81:8d:50:b5:47:77:7b:18:a4:7b:
                    78:30:21:4a:00:ec:25:7c:ea:6b:de:4d:5c:45:a7:
                    af:ee:b1:a9:78:9f:9e:29:22:a9:c5:8b:72:3a:84:
                    e1:af:f3:41:96:ff:23:f9:3b:32:55:69:eb:91:5e:
                    a4:04:a4:53:a8:12:f8:3f:b9:a5:55:53:aa:9c:cd:
                    da:16:41:7f:f7:08:77:4b:cd:e4:21:e3:77:8c:fe:
                    73:42:f3:9f:f2:9c:81:3e:c5:78:3e:45:c6:b6:b5:
                    36:60:fe:f7:4f:7d:48:30:7f:99:09:e9:11:68:1e:
                    bc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FB:96:A9:06:9E:C8:D6:99:0C:39:37:3E:B2:9F:71:F1:94:D0:45
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3137302e38302e3135342e302f32332d3233203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:26:c4:72:f7:18:ee:c6:eb:23:e6:62:6e:84:11:68:9d:46:
         04:c0:44:24:7a:ef:4c:08:5b:ab:f3:b6:c7:27:6c:5d:17:55:
         98:90:99:43:76:12:d1:45:15:dc:86:2e:80:0b:31:99:91:ba:
         62:c1:96:b3:71:31:bd:3f:aa:ac:ab:2f:f8:7e:44:50:ed:46:
         58:1c:7b:93:5c:76:83:2b:c6:23:b4:3c:cd:b3:36:18:30:f2:
         ab:68:9d:79:87:33:75:f9:77:9a:48:0a:a6:f0:00:6d:bd:79:
         eb:fc:0c:6f:98:cf:11:7f:c8:4f:bc:e7:9c:4c:e3:bf:d5:6a:
         5a:7b:ba:51:7b:81:dd:6e:8d:32:81:64:23:cf:5f:2d:a6:ce:
         31:74:51:4d:48:94:12:8f:be:ef:f1:58:62:b8:2e:93:c1:6d:
         b6:79:18:86:f6:18:85:39:3d:1c:ce:1f:68:d0:b6:33:82:af:
         35:47:e0:1f:40:2d:1a:79:e2:58:0e:5b:10:7a:7b:e5:92:c1:
         08:14:5a:cb:67:b0:e4:67:b4:41:63:9c:b6:d4:7c:69:db:ff:
         26:4b:b1:56:d8:27:af:9d:c1:17:ce:94:d5:fe:d8:be:58:54:
         ca:0f:c9:48:0c:db:3b:6a:d7:16:e1:5f:06:4b:ca:02:ae:07:
         eb:21:c5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 14:34:50 2024 by rpki-client on console-fra.rpki-client.org