Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38322e302f32332d3233203d3e20323632393938.roa
File:                     3138362e3232342e38322e302f32332d3233203d3e20323632393938.roa (raw, json)
Hash identifier:          pR4tuOdNlvXjUO85buy7sIbiZcmH3u3ncDqma6lRBJI=
Subject key identifier:   D8:8C:4B:66:AF:0E:BA:BA:96:9D:18:78:F4:F8:C2:4C:C7:09:F1:75
Certificate issuer:       /CN=25B80D450923FBAF7E31D41324FA2A66D766846C
Certificate serial:       43B97E791E01A07372AA22DD0E0CFF4D388F8867
Authority key identifier: 25:B8:0D:45:09:23:FB:AF:7E:31:D4:13:24:FA:2A:66:D7:66:84:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B80D450923FBAF7E31D41324FA2A66D766846C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38322e302f32332d3233203d3e20323632393938.roa
Signing time:             Tue 04 Jul 2023 20:57:03 +0000
ROA not before:           Tue 04 Jul 2023 20:52:03 +0000
ROA not after:            Tue 02 Jul 2024 20:57:03 +0000
asID:                     262998
IP address blocks:        186.224.82.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b9:7e:79:1e:01:a0:73:72:aa:22:dd:0e:0c:ff:4d:38:8f:88:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B80D450923FBAF7E31D41324FA2A66D766846C
        Validity
            Not Before: Jul  4 20:52:03 2023 GMT
            Not After : Jul  2 20:57:03 2024 GMT
        Subject: CN=D88C4B66AF0EBABA969D1878F4F8C24CC709F175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:3c:3a:a1:99:86:21:43:46:39:1b:c9:ff:
                    89:98:a2:f7:0c:2e:03:fa:83:3a:fe:fc:90:60:ad:
                    2f:71:55:40:6f:c5:93:bb:e1:0a:19:1d:a6:f5:1a:
                    fc:22:b2:5b:fe:24:c1:3c:07:18:c1:5d:ce:f5:7b:
                    a1:73:ae:7d:4c:47:15:c6:11:a6:5c:a4:ab:07:3c:
                    a8:3b:5e:bc:b2:19:67:59:2e:14:7a:55:83:96:9a:
                    ce:fd:2f:b5:e1:da:81:6f:18:90:82:f9:db:94:00:
                    50:14:51:3f:80:e0:1f:4b:7a:9f:46:94:6c:20:de:
                    9c:af:5d:9c:58:ad:3b:fa:11:6b:b1:7a:9f:74:2b:
                    df:05:ea:58:dd:bd:19:2f:8b:15:ed:71:64:a4:5e:
                    fa:c2:33:94:09:bd:06:6d:0e:59:bb:c2:49:82:92:
                    26:cd:37:a8:e6:79:35:09:65:ca:57:29:e7:eb:54:
                    23:89:de:b7:72:d0:92:65:d6:ac:9d:14:6a:97:98:
                    a5:1d:71:7a:cf:7c:88:7f:a4:f2:b3:b7:18:20:1c:
                    55:ea:92:97:7e:7d:15:cc:82:1e:6e:f7:ec:50:ee:
                    a2:5a:10:b5:47:59:cb:b6:72:d9:9f:7a:f5:3e:11:
                    92:fa:93:ec:3d:fa:ad:b5:27:b9:76:9a:c6:9b:28:
                    11:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8C:4B:66:AF:0E:BA:BA:96:9D:18:78:F4:F8:C2:4C:C7:09:F1:75
            X509v3 Authority Key Identifier:
                keyid:25:B8:0D:45:09:23:FB:AF:7E:31:D4:13:24:FA:2A:66:D7:66:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/25B80D450923FBAF7E31D41324FA2A66D766846C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B80D450923FBAF7E31D41324FA2A66D766846C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38322e302f32332d3233203d3e20323632393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:ca:4a:c5:c9:50:34:87:fa:16:cd:a4:1e:51:ec:2b:c1:83:
         6b:48:e8:ef:e6:ff:ec:d1:b5:e2:4b:02:16:31:df:70:e8:03:
         6d:17:37:00:c0:14:ad:86:06:77:03:23:da:c4:5f:2a:d7:f2:
         a8:1b:80:33:5e:ff:c0:d6:27:35:24:94:5d:98:ff:82:6c:7f:
         aa:38:ec:37:1a:25:61:1a:2f:40:14:a9:fe:52:da:24:72:f2:
         cd:f2:a1:f5:5c:d1:d3:eb:8d:21:7a:ed:f1:aa:c1:65:1d:7e:
         16:4f:f2:5e:6f:dc:47:b4:2c:3c:43:33:7f:b0:6e:d3:c9:a9:
         41:8e:cc:7d:d3:6b:4f:6b:d8:3d:8a:7e:02:9b:e6:ff:4a:11:
         32:d1:83:7d:ec:46:b9:e6:2f:32:7f:62:3d:69:40:6b:2e:8d:
         b4:d9:51:1f:cc:95:2c:ee:38:7a:a5:7d:01:58:bb:ef:56:b1:
         a7:18:3b:8c:81:0d:0a:a6:a7:16:01:18:3d:e9:e7:cc:5f:35:
         c4:c0:1b:ea:07:65:61:09:a1:e8:d9:bc:6f:34:2d:62:84:bf:
         89:93:c8:43:0b:21:67:f2:8c:b7:9f:de:99:8d:81:93:8f:bb:
         09:42:25:f0:b9:55:84:1a:68:91:ad:9b:dc:04:b8:19:d7:4b:
         c3:79:e3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 16:53:08 2023 by rpki-client on console-ams.rpki-client.org