Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3137362e302f32312d3231203d3e203532393531.roa
File:                     3137372e31312e3137362e302f32312d3231203d3e203532393531.roa (raw, json)
Hash identifier:          Ij5GzOZ+53FpgQEs1iTnFOOdSnF1AkFW01/AJJbn2I4=
Subject key identifier:   20:42:C0:69:93:78:80:EC:54:AB:FA:1F:61:D0:5D:67:FE:98:16:D2
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       471538A49C9F1F4BC105E2D5EFBFA26E02F519AE
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3137362e302f32312d3231203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:44:01 +0000
ROA not before:           Thu 28 Sep 2023 17:39:01 +0000
ROA not after:            Thu 26 Sep 2024 17:44:01 +0000
asID:                     52951
IP address blocks:        177.11.176.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:15:38:a4:9c:9f:1f:4b:c1:05:e2:d5:ef:bf:a2:6e:02:f5:19:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:39:01 2023 GMT
            Not After : Sep 26 17:44:01 2024 GMT
        Subject: CN=2042C069937880EC54ABFA1F61D05D67FE9816D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:a8:b6:c1:16:3d:8a:5f:3f:16:53:9d:aa:
                    d6:77:10:56:b5:01:0d:1b:9b:65:ac:0c:7a:47:ac:
                    30:3e:78:12:74:33:c6:eb:0e:32:1f:db:d0:fc:10:
                    87:d3:7d:94:db:ad:e9:cb:6c:d0:81:18:71:49:b5:
                    96:1b:2f:48:d3:81:fb:a4:69:f3:78:0f:ec:ae:32:
                    d7:93:55:3b:7e:c8:81:96:05:49:21:4c:c2:cc:29:
                    11:2d:b7:08:fa:4e:ae:00:35:3d:51:4e:ae:de:48:
                    f4:f2:64:79:5d:a6:23:e9:e9:5e:48:45:89:a5:ab:
                    c5:c8:4e:ff:2c:00:e6:c1:83:db:a4:fc:74:ac:11:
                    a5:ec:47:66:15:79:9f:58:e1:bf:81:c3:a1:96:68:
                    5b:ef:9f:bf:02:de:3e:5a:78:03:6e:55:1b:2d:85:
                    11:46:56:40:3c:37:db:15:d5:87:53:66:c0:30:6e:
                    c3:54:0b:c9:76:25:fe:67:98:53:3b:87:b5:a9:b0:
                    fa:93:f2:43:39:b0:2c:50:cf:25:57:ea:d9:30:ad:
                    21:20:0a:15:35:62:1f:53:fa:bb:8a:dc:49:88:47:
                    b9:a8:1b:c5:69:d2:d2:6b:68:c7:bb:54:7b:b0:70:
                    ff:c4:71:e7:61:f1:23:04:6c:af:d3:f4:c6:ee:e5:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:42:C0:69:93:78:80:EC:54:AB:FA:1F:61:D0:5D:67:FE:98:16:D2
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3137362e302f32312d3231203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:46:1c:68:d9:84:5d:13:65:03:5e:12:59:df:5f:c1:3a:a4:
         94:45:75:85:50:1d:66:a8:71:6b:f0:68:67:c0:42:81:d4:e3:
         cb:1c:84:24:df:98:91:17:2e:1b:c0:ef:1e:7d:c7:f8:6d:e4:
         e3:14:f1:77:4e:b6:8a:6b:91:4c:8a:ed:b3:45:e0:13:bc:84:
         95:ba:59:a9:da:d7:a8:9a:2e:02:e3:3e:82:a6:19:47:19:43:
         f7:55:ab:08:c2:38:4c:d7:90:3c:b2:ac:b4:b9:41:ac:45:1a:
         07:6a:a0:73:37:52:5d:5e:a4:ee:3c:da:de:06:b3:2a:64:81:
         c1:f5:d7:c4:d8:b0:07:ae:55:bf:84:07:20:35:f7:fe:1c:4b:
         59:2c:07:a4:d2:66:24:c0:3c:42:5d:d2:f9:e4:83:86:4b:bf:
         7e:0f:2f:ca:ff:88:c2:c8:0f:e6:00:31:5a:ac:2b:16:11:7d:
         01:fe:b3:e6:03:d4:5c:1c:77:88:3c:45:42:b8:47:b8:f3:c4:
         03:14:9a:af:9a:d5:a0:1c:ac:84:64:62:54:7c:26:da:75:98:
         d1:c0:4c:5d:8e:ed:16:0e:81:70:1f:86:26:0c:75:8f:78:fc:
         c3:c5:ac:3b:83:4f:99:47:b4:38:b5:a5:fa:26:a0:b7:cb:9f:
         da:03:f6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----