Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230302e302f32332d3233203d3e20323632333136.roa
File:                     3133312e3232312e3230302e302f32332d3233203d3e20323632333136.roa (raw, json)
Hash identifier:          x11mS3Pfvd/rCsDh4VKKo+BcnXK7EQqxyDlljz3VNKc=
Subject key identifier:   52:B2:79:73:B1:BA:F5:75:1D:B9:A2:99:6D:51:5A:62:FA:8B:A8:A0
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       6215E7BC798ADDC3C7BE9BFA56720DCB73369385
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230302e302f32332d3233203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:36 +0000
ROA not before:           Mon 21 Aug 2023 13:21:36 +0000
ROA not after:            Mon 19 Aug 2024 13:26:36 +0000
asID:                     262316
IP address blocks:        131.221.200.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:15:e7:bc:79:8a:dd:c3:c7:be:9b:fa:56:72:0d:cb:73:36:93:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:36 2023 GMT
            Not After : Aug 19 13:26:36 2024 GMT
        Subject: CN=52B27973B1BAF5751DB9A2996D515A62FA8BA8A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:88:ff:ca:3a:be:40:0b:e4:3f:e1:92:99:
                    e8:eb:17:df:5f:10:85:a8:aa:c9:ca:64:8f:a1:9f:
                    10:80:8e:d3:b7:3e:27:50:a6:7c:11:21:3f:f8:88:
                    78:eb:b6:0c:72:2f:ac:cd:53:cf:8d:0e:1f:37:eb:
                    68:c6:fa:f8:fc:36:9d:a4:28:9a:1d:43:4e:1e:1d:
                    62:b1:a2:96:3a:e6:37:08:06:07:f3:3a:75:58:86:
                    87:69:0d:f1:39:da:4e:54:9f:07:eb:c0:2a:0b:32:
                    69:df:99:52:98:90:c5:b5:d6:64:b5:64:fb:13:ff:
                    2b:c1:40:19:d9:ec:89:e4:76:ed:f8:c5:61:72:61:
                    b4:62:54:55:16:55:8d:69:3c:42:c7:27:b9:df:36:
                    6d:8a:e5:67:a0:38:7f:f6:e8:51:54:77:f1:05:a6:
                    77:60:3a:6e:19:bd:60:ae:84:90:ee:81:88:a3:f0:
                    c0:60:d8:15:c1:01:8f:35:ca:b7:3f:c6:47:47:c8:
                    10:3b:44:dc:95:18:5a:a7:f5:83:ec:5d:a0:a8:7a:
                    12:0e:ee:12:fe:a6:cb:75:73:68:82:bf:7a:82:37:
                    fd:46:6f:a9:47:78:fb:4a:52:58:b6:a9:23:13:e1:
                    eb:68:b7:23:a5:aa:b0:ef:77:c6:32:36:55:1b:1c:
                    07:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B2:79:73:B1:BA:F5:75:1D:B9:A2:99:6D:51:5A:62:FA:8B:A8:A0
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230302e302f32332d3233203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:0b:02:7a:2b:37:dc:c8:4d:fe:d7:5a:9d:df:61:b3:bd:
         5b:68:f4:96:6b:3c:c6:2b:a6:79:06:6b:b4:fa:e2:c6:c6:39:
         62:94:d2:fc:d6:9d:87:0b:92:06:25:a4:75:03:ff:e9:ae:4c:
         60:87:1a:2e:c7:a0:52:10:82:71:1b:11:1d:1a:43:3a:07:e4:
         d1:46:05:e3:11:bb:5a:0d:15:ff:b8:8c:b3:54:23:cb:7e:7e:
         68:9e:41:31:46:aa:7f:a0:84:e3:17:b2:92:6d:37:65:05:f2:
         8d:bf:2e:f5:03:e6:fd:2d:13:5f:41:0d:34:6d:8a:35:47:08:
         0f:c0:13:ba:c4:b3:b5:52:26:fa:59:ae:8c:99:90:19:e0:0d:
         62:b3:b4:5b:12:19:b3:d5:0e:fe:b5:a6:83:21:af:fb:f1:da:
         6e:1e:b6:07:a0:ed:0e:e9:a1:26:f7:e8:e8:3f:eb:0f:8e:0f:
         a2:e9:40:44:45:b6:8b:16:ff:c1:da:e9:cb:f8:18:93:13:74:
         d7:ea:bd:33:54:1c:d6:f8:d2:ba:eb:61:02:e0:fa:5b:56:96:
         39:92:6a:8a:b0:1d:4a:0e:52:74:00:e5:6b:64:87:94:1d:80:
         a5:2d:7e:5f:c3:75:eb:e8:ad:0b:15:1e:f6:8f:29:72:78:0f:
         5f:4e:70:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 15:08:39 2023 by rpki-client on console-fra.rpki-client.org