Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136342e302f32332d3233203d3e203532393531.roa
File:                     3137302e37392e3136342e302f32332d3233203d3e203532393531.roa (raw, json)
Hash identifier:          PoCr2YDJp/rMUUPaRArUDjzcuOKwXnjMeIA3MQw94ag=
Subject key identifier:   A5:20:58:AE:E2:BC:4E:FB:3B:F4:A7:1A:DB:2C:D4:11:53:07:8F:72
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       330DF5C59C6B94B9A3996FA058C327D4E54C64AF
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136342e302f32332d3233203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:44:02 +0000
ROA not before:           Thu 28 Sep 2023 17:39:02 +0000
ROA not after:            Thu 26 Sep 2024 17:44:02 +0000
asID:                     52951
IP address blocks:        170.79.164.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0d:f5:c5:9c:6b:94:b9:a3:99:6f:a0:58:c3:27:d4:e5:4c:64:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:39:02 2023 GMT
            Not After : Sep 26 17:44:02 2024 GMT
        Subject: CN=A52058AEE2BC4EFB3BF4A71ADB2CD41153078F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:97:8a:34:c9:0a:04:c1:51:3d:f5:00:b3:
                    22:4e:0c:61:96:87:7f:db:59:22:31:3a:6c:65:ce:
                    56:ef:f7:24:b1:79:a0:76:1e:b4:57:54:7b:10:3c:
                    f5:28:8c:d2:43:4c:6b:92:b6:1b:b0:1f:4e:88:50:
                    92:49:0f:55:4c:ed:d3:2c:98:89:9a:c1:bd:c6:9a:
                    a8:ce:ef:e2:ed:79:6c:9a:9f:04:15:18:8f:71:6d:
                    9f:f2:07:71:2e:a4:64:d9:be:8d:9b:b2:02:51:2f:
                    d8:46:60:0e:14:a8:83:8f:5e:b7:ab:29:77:af:8b:
                    5d:f4:0b:62:1b:2e:a4:34:21:ba:a9:30:f3:10:dd:
                    e2:8c:58:66:de:b6:dd:f9:5a:89:77:71:2b:32:6d:
                    63:f5:9e:f2:9b:27:84:c7:4b:23:c2:39:a3:8c:b2:
                    f4:6e:ec:95:96:65:48:ea:20:78:9f:c1:d6:2c:74:
                    8a:c4:23:f6:be:4a:e8:a7:b8:1b:ee:c9:40:66:d7:
                    d8:5b:ce:f2:7b:1b:d9:df:b9:cc:3a:86:08:21:b4:
                    ff:b2:0b:31:19:88:55:ee:cd:9f:4f:d5:2a:1c:57:
                    61:0d:c6:a1:4d:5d:0d:5a:ae:60:93:79:0d:93:e9:
                    97:08:57:51:84:aa:b8:8c:b0:57:7b:bd:8a:48:d4:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:20:58:AE:E2:BC:4E:FB:3B:F4:A7:1A:DB:2C:D4:11:53:07:8F:72
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136342e302f32332d3233203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:03:4b:67:de:65:0e:83:ec:0c:4c:15:2a:0b:fa:8c:03:45:
         aa:62:6a:ed:04:66:52:14:d3:b3:4e:67:7a:7d:18:4e:24:87:
         20:fc:63:ef:68:dd:65:ce:c7:5a:3d:c3:4f:30:64:dc:d5:5a:
         18:0b:cc:f1:74:48:46:13:c9:a1:f5:b0:b9:05:b2:72:cf:ce:
         80:b0:d5:3c:cc:71:c8:50:81:89:a7:6c:18:c3:82:9d:e6:16:
         88:eb:af:d2:5c:1d:3d:42:66:a8:c4:90:ed:cb:c2:30:46:fc:
         79:ca:1a:2d:8c:3c:6a:0d:bc:2d:96:0e:7e:0f:66:f7:fc:0a:
         93:45:7f:d5:5d:09:55:71:71:af:f8:b9:f6:1d:7d:5f:31:f8:
         43:29:66:14:24:e4:17:46:81:ad:c5:26:b4:e8:8b:63:28:89:
         06:1d:84:f7:2b:6c:69:ba:5f:6b:f7:8a:0a:c0:72:4c:23:fc:
         92:30:6e:92:52:fc:6f:46:5b:ab:bf:2b:46:e8:ae:42:1c:41:
         80:3b:a9:3f:dd:14:76:4d:3b:c4:23:48:8f:71:35:c4:fa:a7:
         17:c7:0e:29:e9:38:52:17:f6:d4:53:5e:6e:9e:31:54:93:ba:
         d4:93:1d:3e:b4:16:d9:2e:61:73:47:6e:c7:15:42:3f:a7:bc:
         29:f6:a5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----