Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32332d3233203d3e20323632333136.roa
File:                     3133382e3131372e3139322e302f32332d3233203d3e20323632333136.roa (raw, json)
Hash identifier:          pcJKNhPk0a1ofsKRlZ4wCUz0eSAnZgV0GSH0VjBf6Lg=
Subject key identifier:   65:10:FE:B7:02:57:99:18:9B:6D:52:E3:B6:3C:68:5D:F5:FC:7E:8D
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       3CC1FA3B1156D4ED732A620226089F05153F2416
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32332d3233203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:38 +0000
ROA not before:           Mon 21 Aug 2023 13:21:38 +0000
ROA not after:            Mon 19 Aug 2024 13:26:38 +0000
asID:                     262316
IP address blocks:        138.117.192.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c1:fa:3b:11:56:d4:ed:73:2a:62:02:26:08:9f:05:15:3f:24:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:38 2023 GMT
            Not After : Aug 19 13:26:38 2024 GMT
        Subject: CN=6510FEB7025799189B6D52E3B63C685DF5FC7E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:41:6d:1f:9f:5e:b3:26:9f:50:b7:4b:f7:e5:
                    42:9a:51:3d:e8:8a:51:75:4f:17:7a:b1:42:ca:e5:
                    d9:24:66:23:a4:f4:34:75:fd:3d:7d:56:8d:36:26:
                    5a:7d:b4:da:67:eb:18:0f:f0:2a:87:5e:e8:bd:f0:
                    74:d0:75:50:40:56:72:ef:96:85:a2:c7:8d:1c:06:
                    6b:2f:84:65:24:46:c2:32:6c:cb:c8:42:0e:30:91:
                    03:f3:0d:bd:60:a2:f6:b0:55:e8:de:81:0b:f5:3f:
                    2b:77:f4:a0:4a:19:44:bf:5f:2d:01:22:03:9f:5a:
                    bd:45:e7:8a:96:7c:40:bd:08:7b:6e:75:70:c7:1c:
                    fc:7c:cd:42:c4:16:dc:ba:bd:f1:66:8f:16:8e:8f:
                    a1:b9:8a:47:5a:d3:9e:ca:c6:ac:4c:26:f8:0c:15:
                    e4:fa:1e:63:f2:08:26:39:20:61:97:b0:d6:b6:d9:
                    25:eb:03:37:e6:e4:6d:fd:97:0b:50:03:58:20:11:
                    ad:c6:98:fc:70:34:3b:f2:7d:d8:29:d3:cb:27:e5:
                    c2:50:45:cc:a8:10:83:da:93:5b:64:92:c9:dc:89:
                    2c:53:ca:b0:30:bd:25:25:df:b4:f7:47:56:ef:02:
                    31:23:32:1c:1c:7d:75:41:d7:b3:6d:db:bb:5d:e7:
                    9f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:10:FE:B7:02:57:99:18:9B:6D:52:E3:B6:3C:68:5D:F5:FC:7E:8D
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32332d3233203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:fa:2c:a4:59:cf:23:7d:89:d8:ac:e8:74:39:8a:73:24:be:
         9a:19:db:14:6b:57:60:17:3b:e6:bd:8e:a1:91:d2:0f:b3:a9:
         f3:30:66:7c:b6:bd:a7:be:20:63:f9:9d:52:9e:22:2b:12:76:
         66:b3:1a:2c:54:2f:88:16:90:43:68:d7:b2:40:7f:76:6a:89:
         16:7b:a7:e4:a9:3e:76:d4:ff:cd:b1:a8:9e:9a:63:ac:12:d9:
         7e:e2:b9:40:41:c5:ba:b0:40:83:fb:ba:d1:6b:63:e1:d7:77:
         be:c6:27:d9:ab:52:00:bf:2c:a9:43:c8:2e:a2:ff:fc:af:e9:
         62:83:b9:05:64:14:28:62:8c:6a:c9:14:1c:1e:50:e7:42:35:
         0e:fc:10:f5:c3:a6:6e:54:c9:86:36:d8:9a:47:3a:3a:2b:00:
         25:0d:74:d2:e9:92:07:be:ef:79:6c:f1:24:3f:f3:52:11:c0:
         7d:b8:6e:43:67:54:e8:e9:a3:ad:d4:81:b2:eb:9f:b1:7a:da:
         f8:8f:eb:ae:ed:20:b0:c0:30:a1:02:97:9c:19:dc:50:e6:ca:
         61:a7:99:7b:bb:d9:b3:3d:27:27:81:00:69:b1:07:5c:f0:88:
         c3:50:5e:41:14:46:73:55:80:ef:c0:b7:dd:08:0a:e3:b0:5b:
         67:4e:3d:eb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPMH6OxFW1O1zKmICJgifBRU/JBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2QTEzMkZCOEY5QzFCOThBOUNEQ0YxNTFFQTgyMzUw
QTFFMDgwODAeFw0yMzA4MjExMzIxMzhaFw0yNDA4MTkxMzI2MzhaMDMxMTAvBgNV
BAMTKDY1MTBGRUI3MDI1Nzk5MTg5QjZENTJFM0I2M0M2ODVERjVGQzdFOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkQW0fn16zJp9Qt0v35UKaUT3o
ilF1Txd6sULK5dkkZiOk9DR1/T19Vo02Jlp9tNpn6xgP8CqHXui98HTQdVBAVnLv
loWix40cBmsvhGUkRsIybMvIQg4wkQPzDb1govawVejegQv1Pyt39KBKGUS/Xy0B
IgOfWr1F54qWfEC9CHtudXDHHPx8zULEFty6vfFmjxaOj6G5ikda057KxqxMJvgM
FeT6HmPyCCY5IGGXsNa22SXrAzfm5G39lwtQA1ggEa3GmPxwNDvyfdgp08sn5cJQ
RcyoEIPak1tkksnciSxTyrAwvSUl37T3R1bvAjEjMhwcfXVB17Nt27td559JAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUZRD+twJXmRibbVLjtjxoXfX8fo0wHwYDVR0j
BBgwFoAUzWoTL7j5wbmKnNzxUeqCNQoeCAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DRDZBMTMyRkI4RjlDMUI5OEE5Q0RDRjE1MUVBODIzNTBBMUUwODA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENkExMzJGQjhGOUMxQjk4
QTlDRENGMTUxRUE4MjM1MEExRTA4MDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAv
MzEzMzM4MmUzMTMxMzcyZTMxMzkzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjMzMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp1wDANBgkqhkiG9w0BAQsFAAOCAQEAIPos
pFnPI32J2KzodDmKcyS+mhnbFGtXYBc75r2OoZHSD7Op8zBmfLa9p74gY/mdUp4i
KxJ2ZrMaLFQviBaQQ2jXskB/dmqJFnun5Kk+dtT/zbGonppjrBLZfuK5QEHFurBA
g/u60Wtj4dd3vsYn2atSAL8sqUPILqL//K/pYoO5BWQUKGKMaskUHB5Q50I1DvwQ
9cOmblTJhjbYmkc6OisAJQ100umSB77veWzxJD/zUhHAfbhuQ2dU6OmjrdSBsuuf
sXra+I/rru0gsMAwoQKXnBncUObKYaeZe7vZsz0nJ4EAabEHXPCIw1BeQRRGc1WA
78C33QgK47BbZ0496w==
-----END CERTIFICATE-----
Generated at Thu Sep 14 15:09:07 2023 by rpki-client on console-ams.rpki-client.org