Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32322d3232203d3e20323632333136.roa
File:                     3136372e3235302e3135322e302f32322d3232203d3e20323632333136.roa (raw, json)
Hash identifier:          vEcS68TKkHpE8gJyUoPXNMKAQXikbItkSbalN2PdlNc=
Subject key identifier:   F3:BC:8C:59:DC:81:55:79:98:AD:8D:73:B5:AD:12:F7:9D:BE:69:BA
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       3385F9D8E36D7B051BCD86D7136370B7102B0435
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32322d3232203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:40 +0000
ROA not before:           Mon 21 Aug 2023 13:21:40 +0000
ROA not after:            Mon 19 Aug 2024 13:26:40 +0000
asID:                     262316
IP address blocks:        167.250.152.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:85:f9:d8:e3:6d:7b:05:1b:cd:86:d7:13:63:70:b7:10:2b:04:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:40 2023 GMT
            Not After : Aug 19 13:26:40 2024 GMT
        Subject: CN=F3BC8C59DC81557998AD8D73B5AD12F79DBE69BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:a2:31:2f:56:79:c4:95:d5:51:38:e8:24:
                    fe:f5:73:65:b4:57:c4:e3:3e:71:91:90:18:b0:cb:
                    60:39:8f:39:01:bb:97:9d:0c:38:ca:20:84:6e:00:
                    fe:13:e6:76:80:a3:06:2f:33:7b:8e:5b:38:f8:2a:
                    ff:80:24:34:49:35:e5:1a:65:bc:14:fd:41:96:fb:
                    99:5d:86:31:5d:62:cb:28:e4:31:68:fe:bd:d4:10:
                    20:38:ac:13:2d:4d:2f:84:ad:f8:87:18:03:b0:55:
                    4c:a1:9a:11:8d:d8:74:df:a2:19:9e:58:73:1a:b0:
                    8e:91:84:56:fd:e1:67:18:10:77:88:6d:e0:a0:8d:
                    02:ec:7a:52:a2:04:3c:72:63:9b:68:23:46:4e:8f:
                    4d:93:95:bd:0d:8e:6b:f6:c3:14:c9:fa:b3:bd:6e:
                    34:88:80:f0:2c:51:f4:46:50:14:b0:c6:18:31:31:
                    49:f8:13:93:47:68:c5:23:aa:05:42:59:1f:88:6d:
                    86:ce:2f:35:56:ce:f7:4f:6e:64:53:b1:a0:e4:1a:
                    f5:45:dd:59:6a:15:80:53:8f:f6:0c:47:2c:6c:d8:
                    0e:fc:a7:63:39:21:b4:e4:ef:c6:30:48:ab:24:e5:
                    65:e2:04:89:e0:73:58:03:bc:d3:ea:6d:22:35:5b:
                    4e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BC:8C:59:DC:81:55:79:98:AD:8D:73:B5:AD:12:F7:9D:BE:69:BA
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32322d3232203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:ca:bf:79:d2:4c:99:f2:79:ff:4d:1f:d2:54:60:13:fd:45:
         bc:9a:c6:8b:4c:c7:1a:45:23:b3:70:c8:25:07:0a:5d:ac:af:
         68:8e:32:4a:b8:b5:3d:8d:83:81:e0:5f:d5:fa:67:ed:10:48:
         72:23:7f:2c:62:97:7d:c0:a8:e1:46:f7:39:d0:20:f1:39:d7:
         01:b5:3c:59:17:4e:dc:e2:af:c4:71:5e:e1:07:41:74:fd:1e:
         d9:08:47:51:79:67:3b:ae:ce:6b:fd:2a:b2:98:c0:f3:da:bd:
         3d:72:c1:4d:db:bd:9b:8e:ac:b8:7a:32:f6:e3:f4:ae:7e:c9:
         9c:5f:34:2e:ea:7e:66:80:f5:02:be:e7:be:c4:ca:9d:ec:5c:
         7d:a1:2e:5b:1d:31:5d:21:7b:6a:43:b6:85:79:0b:57:b3:2c:
         9c:24:67:1e:8c:55:89:1b:43:8b:7f:96:28:9d:14:be:fa:bb:
         e1:ca:bd:a1:46:a0:63:be:2e:80:1c:88:49:44:ef:a1:c2:bc:
         22:70:cc:b1:25:17:86:07:9c:49:56:18:8d:45:2e:95:90:3f:
         97:7e:2a:f9:17:c4:38:6e:15:d8:d1:39:98:a6:da:95:bd:ec:
         07:f6:6e:53:ac:a2:04:17:b9:d2:71:77:5a:aa:64:6b:20:0a:
         87:55:6e:59
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUM4X52ONtewUbzYbXE2NwtxArBDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2QTEzMkZCOEY5QzFCOThBOUNEQ0YxNTFFQTgyMzUw
QTFFMDgwODAeFw0yMzA4MjExMzIxNDBaFw0yNDA4MTkxMzI2NDBaMDMxMTAvBgNV
BAMTKEYzQkM4QzU5REM4MTU1Nzk5OEFEOEQ3M0I1QUQxMkY3OURCRTY5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsvKIxL1Z5xJXVUTjoJP71c2W0
V8TjPnGRkBiwy2A5jzkBu5edDDjKIIRuAP4T5naAowYvM3uOWzj4Kv+AJDRJNeUa
ZbwU/UGW+5ldhjFdYsso5DFo/r3UECA4rBMtTS+ErfiHGAOwVUyhmhGN2HTfohme
WHMasI6RhFb94WcYEHeIbeCgjQLselKiBDxyY5toI0ZOj02Tlb0Njmv2wxTJ+rO9
bjSIgPAsUfRGUBSwxhgxMUn4E5NHaMUjqgVCWR+IbYbOLzVWzvdPbmRTsaDkGvVF
3VlqFYBTj/YMRyxs2A78p2M5IbTk78YwSKsk5WXiBIngc1gDvNPqbSI1W07dAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU87yMWdyBVXmYrY1zta0S952+abowHwYDVR0j
BBgwFoAUzWoTL7j5wbmKnNzxUeqCNQoeCAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DRDZBMTMyRkI4RjlDMUI5OEE5Q0RDRjE1MUVBODIzNTBBMUUwODA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENkExMzJGQjhGOUMxQjk4
QTlDRENGMTUxRUE4MjM1MEExRTA4MDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAv
MzEzNjM3MmUzMjM1MzAyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjMzMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqf6mDANBgkqhkiG9w0BAQsFAAOCAQEANsq/
edJMmfJ5/00f0lRgE/1FvJrGi0zHGkUjs3DIJQcKXayvaI4ySri1PY2DgeBf1fpn
7RBIciN/LGKXfcCo4Ub3OdAg8TnXAbU8WRdO3OKvxHFe4QdBdP0e2QhHUXlnO67O
a/0qspjA89q9PXLBTdu9m46suHoy9uP0rn7JnF80Lup+ZoD1Ar7nvsTKnexcfaEu
Wx0xXSF7akO2hXkLV7MsnCRnHoxViRtDi3+WKJ0Uvvq74cq9oUagY74ugByISUTv
ocK8InDMsSUXhgecSVYYjUUulZA/l34q+RfEOG4V2NE5mKbalb3sB/ZuU6yiBBe5
0nF3WqpkayAKh1VuWQ==
-----END CERTIFICATE-----
Generated at Thu Sep 14 15:09:07 2023 by rpki-client on console-ams.rpki-client.org