Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e3232302e302e302f31372d3137203d3e203533313837.roa
File:                     3137372e3232302e302e302f31372d3137203d3e203533313837.roa (raw, json)
Hash identifier:          mbKAE1bQT2GT9FJEixl8R5LgXBLIRxUuKi9VNN2rqi8=
Subject key identifier:   1B:A4:4F:0F:D0:D3:81:E8:37:4B:4A:DB:46:04:7C:EE:50:47:84:CB
Certificate issuer:       /CN=CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349
Certificate serial:       6679EC380E6AA90153546222D2016E24DD3E9CB7
Authority key identifier: CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e3232302e302e302f31372d3137203d3e203533313837.roa
Signing time:             Mon 27 Nov 2023 19:40:04 +0000
ROA not before:           Mon 27 Nov 2023 19:35:04 +0000
ROA not after:            Mon 25 Nov 2024 19:40:04 +0000
asID:                     53187
IP address blocks:        177.220.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:79:ec:38:0e:6a:a9:01:53:54:62:22:d2:01:6e:24:dd:3e:9c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349
        Validity
            Not Before: Nov 27 19:35:04 2023 GMT
            Not After : Nov 25 19:40:04 2024 GMT
        Subject: CN=1BA44F0FD0D381E8374B4ADB46047CEE504784CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7f:0c:44:06:7c:7a:36:9a:10:02:6d:3d:bd:
                    82:99:49:54:42:77:96:c6:cd:e2:50:0d:f7:d6:2e:
                    32:1a:42:91:97:98:5a:45:5c:26:ab:46:18:07:7a:
                    2d:a2:89:3c:df:90:83:fb:be:e4:06:84:53:5a:5b:
                    25:d7:10:19:ff:66:8e:ad:2e:48:0b:65:34:23:6e:
                    e3:bc:ba:96:69:97:72:ed:bb:7d:c5:5c:c3:15:34:
                    57:b7:30:80:4a:75:49:aa:d5:97:2d:b6:f3:63:33:
                    67:14:de:25:48:e2:10:03:51:45:7d:ef:94:d3:78:
                    d2:f1:b7:65:5a:b5:6b:c4:16:cf:d8:d9:7a:7c:e2:
                    21:02:22:db:a1:e5:e5:08:3e:51:ad:5c:72:16:fc:
                    1d:0a:04:9a:a0:a5:9b:87:b6:c2:9c:d0:25:be:a6:
                    80:75:67:b3:e4:29:14:60:94:a4:e2:0c:cb:1d:a2:
                    69:cc:d2:7b:68:b9:fe:41:4a:f3:45:e1:2f:9a:90:
                    03:a8:a7:a5:3b:84:01:30:67:c1:bc:55:b2:45:fa:
                    78:27:5e:de:43:ed:4c:55:f3:8a:5c:e6:aa:9d:b5:
                    64:74:6e:d4:b6:ed:bd:77:91:22:b7:4c:35:af:97:
                    5b:a9:9c:25:f4:12:b7:1a:15:29:76:e6:aa:b4:50:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A4:4F:0F:D0:D3:81:E8:37:4B:4A:DB:46:04:7C:EE:50:47:84:CB
            X509v3 Authority Key Identifier:
                keyid:CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e3232302e302e302f31372d3137203d3e203533313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.220.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8e:e1:1f:f6:57:25:f7:9e:bd:29:9a:d5:00:75:6a:22:3d:da:
         2a:04:e4:16:ab:73:1f:c6:71:04:66:4a:20:44:57:17:b3:3d:
         ca:5d:93:59:17:83:69:fc:71:b1:15:84:c8:32:33:33:0a:a9:
         f2:ac:ca:65:c1:54:8d:bc:1b:b1:f7:ad:5e:72:50:25:83:db:
         3c:7f:cd:2a:f7:bd:67:45:21:f2:69:60:9c:56:41:d0:fc:f6:
         0e:92:b3:68:01:45:37:ea:ad:41:d3:fd:cb:dd:08:e5:4e:ae:
         99:9d:2a:fb:d0:22:54:0b:86:d8:72:d8:bf:73:a4:25:b7:59:
         ea:f4:ea:ad:5b:b7:f5:ad:56:52:28:04:44:d2:a8:e4:c5:dd:
         d9:4e:cd:25:6a:bb:95:c5:d8:5f:71:4f:37:28:b4:d2:35:c6:
         6c:b8:b2:70:bb:e0:36:10:ee:c0:ab:76:ae:3a:9e:f9:35:c9:
         a9:0b:30:4c:0e:7d:d7:af:7a:3a:5a:7a:d0:a4:ee:d0:6f:6d:
         80:7b:df:52:fd:55:d1:8c:ee:64:66:eb:61:3f:79:28:a6:fa:
         69:68:5b:c5:e0:8a:ec:e9:61:66:98:1b:9c:66:82:80:3b:a8:
         48:a4:a4:be:74:c9:eb:69:83:a8:de:ab:69:a9:42:7c:ca:72:
         f8:34:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----