Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3138362e3230382e3135322e302f32342d3234203d3e20323632343539.roa
File:                     3138362e3230382e3135322e302f32342d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          MP7iSMWmSLvPk+1FANABRSlmxfess9a9F+huEAIYkcU=
Subject key identifier:   D5:C7:EC:57:81:9A:DF:B2:C2:92:49:0F:57:F3:5A:08:95:6C:FC:63
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       7E8B89084CC63B2C191BBD9B304F28373BB0822E
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3138362e3230382e3135322e302f32342d3234203d3e20323632343539.roa
Signing time:             Wed 08 Mar 2023 12:53:46 +0000
ROA not before:           Wed 08 Mar 2023 12:48:46 +0000
ROA not after:            Wed 06 Mar 2024 12:53:46 +0000
asID:                     262459
IP address blocks:        186.208.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8b:89:08:4c:c6:3b:2c:19:1b:bd:9b:30:4f:28:37:3b:b0:82:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Mar  8 12:48:46 2023 GMT
            Not After : Mar  6 12:53:46 2024 GMT
        Subject: CN=D5C7EC57819ADFB2C292490F57F35A08956CFC63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:57:00:7f:3c:a4:7a:cf:9e:49:9d:68:50:
                    15:fa:0a:d4:e0:9b:47:bb:2d:4d:1f:24:25:66:45:
                    76:39:db:4c:a9:cd:df:af:b9:c5:70:ec:c2:d3:f8:
                    94:af:28:75:d0:c3:4c:cd:47:b4:25:3a:06:50:a6:
                    90:cd:d9:f6:68:91:82:da:b2:a4:56:26:af:86:cd:
                    82:bf:cb:fd:99:91:66:87:d3:b7:06:28:89:70:bf:
                    4a:6e:66:8c:5e:4f:b2:29:53:45:bb:d9:8f:0b:2a:
                    36:65:b8:bf:4a:9c:40:90:e8:2f:5d:be:4f:39:7c:
                    91:2e:3a:50:82:9a:9b:8a:b9:94:46:ab:33:e3:2a:
                    40:e1:e4:61:85:94:3a:9d:b6:04:bb:d5:29:f8:59:
                    49:69:07:1c:86:8c:65:9d:f5:64:16:97:b9:ed:52:
                    4e:ca:7c:b9:bd:05:f0:27:66:6b:88:00:a6:68:23:
                    b6:e8:a1:2f:26:54:e8:21:7f:f3:f7:6a:07:c0:13:
                    c2:28:ca:d2:78:ee:7a:4c:5a:c7:1c:4a:51:cf:8c:
                    be:3b:a5:5c:c6:b5:06:81:8a:59:8d:87:70:7a:4a:
                    e4:67:f8:74:ed:99:5f:50:ba:80:ac:ce:61:81:43:
                    30:81:01:45:5c:99:79:f2:d2:b0:99:c1:1a:e6:a0:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C7:EC:57:81:9A:DF:B2:C2:92:49:0F:57:F3:5A:08:95:6C:FC:63
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3138362e3230382e3135322e302f32342d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:4a:0c:dd:91:70:4a:a4:b0:ea:ad:14:95:0a:d8:95:16:0b:
         75:5b:f1:4b:c3:cf:34:29:1e:13:2a:d1:78:d4:42:9e:64:d7:
         35:f7:e4:17:ac:86:a5:30:97:35:cd:25:43:47:2a:c8:56:8a:
         8b:6e:ca:7e:56:81:af:14:2f:dc:9b:a0:3f:f3:ea:a3:c3:15:
         9a:03:2d:23:2a:ea:82:16:aa:13:b1:54:08:8f:97:de:9b:b8:
         15:d1:72:07:02:9f:0e:82:ab:b3:0b:5e:bf:c1:58:10:6a:65:
         c0:e3:02:fe:e8:e9:99:23:a8:69:80:ca:31:a8:95:3f:7a:79:
         97:46:8d:69:cc:b4:e5:d3:2a:2c:ed:c7:a6:94:52:19:37:b8:
         79:cf:9d:2a:7a:54:26:e5:48:76:81:fd:ab:d5:cf:bc:92:ca:
         44:7f:69:0e:0b:eb:c6:29:64:ab:a4:fe:36:2f:f1:6f:f9:99:
         2f:28:7f:45:d3:70:ca:f1:29:f6:bb:32:85:1c:98:85:37:24:
         23:b8:d2:49:b9:f0:4f:af:f1:b1:30:f9:9f:c4:38:cf:80:52:
         dc:7d:01:ee:5b:1d:07:48:c7:aa:ea:16:d3:7b:e9:28:52:d0:
         27:e4:df:0e:ff:37:54:93:25:4e:9c:9d:0f:21:5c:a0:6a:ea:
         30:b4:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-fra.rpki-client.org