Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230302e302f32342d3234203d3e20323632333136.roa
File:                     3133312e3232312e3230302e302f32342d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          h5GHmGNNDPt39y7hjf7kwnNrtz72VqTOFV0Xaz/lB8M=
Subject key identifier:   DF:7E:24:37:3B:A8:C4:22:BB:DE:9A:65:72:9F:FF:28:67:F2:AA:D2
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       64B77E90D7557EDE926B86221F933880F4BCCAFD
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230302e302f32342d3234203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:40 +0000
ROA not before:           Mon 21 Aug 2023 13:21:40 +0000
ROA not after:            Mon 19 Aug 2024 13:26:40 +0000
asID:                     262316
IP address blocks:        131.221.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b7:7e:90:d7:55:7e:de:92:6b:86:22:1f:93:38:80:f4:bc:ca:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:40 2023 GMT
            Not After : Aug 19 13:26:40 2024 GMT
        Subject: CN=DF7E24373BA8C422BBDE9A65729FFF2867F2AAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:05:17:d5:bf:21:10:27:be:b0:f5:4a:f4:
                    d4:08:65:af:fc:cc:3a:b9:12:d0:85:d5:89:5d:ab:
                    26:28:76:d7:b0:28:9c:35:df:4b:1b:0b:bf:f5:73:
                    3f:96:f9:e8:05:13:80:df:1f:db:6c:f2:3d:57:e5:
                    d7:2e:47:e7:dd:24:0a:46:49:7b:38:ee:4f:ab:85:
                    c5:ea:9b:5c:4c:3c:15:0f:55:89:a5:44:5a:14:85:
                    43:af:9c:68:e3:bd:8f:c8:86:03:5e:a8:78:a1:b6:
                    d8:6a:08:b1:89:10:cf:89:6a:f7:12:c6:b5:a4:86:
                    65:77:32:2d:58:06:f5:62:e5:14:e1:e1:2c:88:9c:
                    e7:e7:1e:56:7b:bf:4c:fe:b0:bf:2b:2c:7a:ce:3e:
                    17:9b:af:04:07:02:ba:5a:99:10:33:b3:9b:f4:35:
                    6a:73:13:94:19:b4:c8:6f:7a:40:10:0b:53:e7:f3:
                    85:5f:93:d3:96:16:76:f8:3d:c0:71:90:7c:be:75:
                    dd:4a:d5:b0:5a:f1:2f:4f:0a:f1:87:6c:23:e6:76:
                    8a:8a:27:81:58:55:c5:bd:75:47:01:2b:bb:26:8a:
                    7a:a7:13:a7:bf:ec:2f:a3:53:c6:6e:1d:89:86:2b:
                    78:10:10:d0:85:5a:23:73:6d:a4:00:33:a3:15:e0:
                    66:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7E:24:37:3B:A8:C4:22:BB:DE:9A:65:72:9F:FF:28:67:F2:AA:D2
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230302e302f32342d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:7f:34:8c:25:5b:73:bb:d8:f7:ed:54:26:6c:c6:fd:84:0e:
         5e:17:dd:30:de:36:a4:29:d9:ec:ac:c7:da:93:fe:0d:3c:25:
         df:26:98:5f:9b:a0:74:6f:de:51:c1:f7:20:47:5a:a0:0f:8f:
         ed:7d:90:29:87:cc:fc:9d:4e:34:1c:4c:d7:df:80:bd:b4:e0:
         f3:0a:a9:c3:0b:98:7e:ac:72:fb:27:bb:96:9c:09:60:82:e6:
         92:70:09:31:97:16:5d:fc:3f:7c:d0:8e:60:e2:ad:7b:37:ab:
         00:26:c6:6a:a2:1e:b1:4f:a7:ec:44:14:28:94:b6:bb:30:93:
         b9:4a:65:06:21:f9:0e:f7:0d:b7:99:4c:5d:41:92:a8:18:e6:
         78:54:e2:67:34:77:d7:4d:22:b1:5d:67:6d:89:22:7a:c9:f5:
         a9:19:40:85:b0:1c:db:7f:4b:fa:95:9f:c2:3b:b7:1e:48:6a:
         37:f0:dc:25:61:63:3e:2e:39:1d:70:55:ae:2e:12:5c:db:a5:
         c4:d5:ac:9a:9f:5d:d3:6c:4b:6a:6c:e0:9b:57:d8:cf:6b:4b:
         9a:f4:f0:83:db:3d:b8:d3:4c:37:ec:c8:18:35:e4:83:59:78:
         3d:dd:3b:41:82:40:34:dd:51:6c:cf:30:ff:66:cd:0a:e9:17:
         1e:54:11:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 15:08:39 2023 by rpki-client on console-fra.rpki-client.org