Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33382e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33382e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          bXwhGZpmd0Dl/qrcsF+OqwerdHPxZSj0TbN3BzYo6ks=
Subject key identifier:   B7:61:FE:14:96:22:82:A6:48:A3:76:6B:1D:19:B0:4B:A1:7C:A2:17
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       689E342C8CAD83DC35F24358A6FA30F4CB127020
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33382e302f32342d3234203d3e20323633333437.roa
Signing time:             Tue 20 Jun 2023 17:33:56 +0000
ROA not before:           Tue 20 Jun 2023 17:28:56 +0000
ROA not after:            Tue 18 Jun 2024 17:33:56 +0000
asID:                     263347
IP address blocks:        191.37.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9e:34:2c:8c:ad:83:dc:35:f2:43:58:a6:fa:30:f4:cb:12:70:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jun 20 17:28:56 2023 GMT
            Not After : Jun 18 17:33:56 2024 GMT
        Subject: CN=B761FE14962282A648A3766B1D19B04BA17CA217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b8:07:55:40:96:33:08:f4:ad:ab:0f:c7:9d:
                    f2:48:d1:15:d7:33:9c:a2:52:e6:2c:88:ec:1f:b3:
                    83:a0:8f:53:bb:be:77:d3:a5:ef:f4:65:7b:1b:db:
                    b7:d8:26:cc:c9:3c:59:e4:c9:3e:75:9c:eb:22:c8:
                    bd:29:d8:f0:98:12:78:57:94:51:f3:3d:cd:d6:8f:
                    fa:30:7b:13:97:ca:75:36:7c:ab:02:3e:56:9b:d5:
                    03:76:9b:08:e5:15:a6:f5:78:34:58:8c:c5:6e:e8:
                    da:ae:c9:15:a2:3d:88:3a:f4:2b:d1:79:bd:60:05:
                    ab:53:e9:db:a6:cd:df:7f:63:e7:74:3b:c5:41:4a:
                    67:94:44:2c:15:ff:ba:8d:7d:76:b0:42:ea:e3:84:
                    5e:96:5c:51:f7:04:e9:3c:c7:0e:b8:e6:07:15:e0:
                    5a:e0:04:8f:e9:07:3e:d9:39:6d:19:f3:18:83:12:
                    b8:df:60:48:39:dc:97:d9:1d:dd:b7:1c:23:70:f6:
                    34:62:ab:a8:bf:da:f6:49:65:e7:4f:0a:55:ea:ee:
                    4c:44:8d:77:f3:91:9b:25:85:b3:16:02:25:f7:e3:
                    ce:b6:db:65:1c:46:6d:4c:a4:bb:42:69:fa:f8:48:
                    5a:19:3e:c4:de:95:ac:b5:b7:ff:66:5f:73:4c:da:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:61:FE:14:96:22:82:A6:48:A3:76:6B:1D:19:B0:4B:A1:7C:A2:17
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e33382e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:a0:c6:fb:d3:d6:d3:05:e7:c9:b9:5e:81:b4:da:73:75:e4:
         f1:6a:7d:e1:60:86:38:66:8d:29:18:52:cf:61:90:39:25:c5:
         1e:1c:25:5b:0d:0e:5d:2f:c9:da:2a:3c:be:89:05:6e:53:64:
         cd:33:24:0f:1e:d9:74:70:b4:ad:62:31:ae:28:78:8d:28:25:
         90:1d:e5:3a:66:62:dc:ee:d0:5d:03:ef:3c:e8:e5:58:de:0c:
         9d:ea:25:5c:09:1f:8a:d0:63:77:24:e5:6d:a9:d5:06:5a:a2:
         68:4f:1b:08:38:68:8d:59:7f:a8:df:22:b6:90:fd:f5:04:88:
         ca:e8:cd:57:6c:d2:a8:f6:73:75:7b:86:59:4d:f0:17:e2:5d:
         a5:ab:98:02:ba:04:30:33:71:5b:2f:65:38:5a:63:27:6e:2e:
         b2:21:ca:2b:a6:4c:3c:db:b1:cf:55:9b:26:92:ea:80:b2:3d:
         7c:2d:55:9f:30:91:94:64:b0:04:ff:ad:2d:95:80:74:b2:af:
         94:48:35:0f:d0:04:7d:42:65:40:63:f9:53:03:62:dd:ac:df:
         fe:ef:d8:8b:4e:15:2b:65:02:cb:23:ee:86:44:e3:20:68:87:
         67:6c:78:d7:79:fa:11:6c:a4:73:6e:32:f3:65:f1:26:ac:de:
         07:7a:3a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:32 2023 by rpki-client on console-fra.rpki-client.org