Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3230203d3e203238323736.roa
File:                     3138392e31342e36342e302f32302d3230203d3e203238323736.roa (raw, json)
Hash identifier:          9LU/z7/+YO2PtzYtvlZj4pH6VyL2H7S3s0cTQI63nEI=
Subject key identifier:   E1:7E:05:99:5E:63:3B:34:74:AD:2B:EE:9D:99:EE:6B:14:AC:67:BE
Certificate issuer:       /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial:       71528BB72DC37B2C71F2CD096F905294FF545D88
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3230203d3e203238323736.roa
Signing time:             Tue 23 Apr 2024 19:04:06 +0000
ROA not before:           Tue 23 Apr 2024 18:59:06 +0000
ROA not after:            Tue 22 Apr 2025 19:04:06 +0000
asID:                     28276
IP address blocks:        189.14.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:52:8b:b7:2d:c3:7b:2c:71:f2:cd:09:6f:90:52:94:ff:54:5d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Validity
            Not Before: Apr 23 18:59:06 2024 GMT
            Not After : Apr 22 19:04:06 2025 GMT
        Subject: CN=E17E05995E633B3474AD2BEE9D99EE6B14AC67BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:cc:15:9a:16:93:1e:1d:41:f3:98:4d:82:
                    a5:5c:b4:9b:3f:90:77:95:50:63:70:97:29:e2:92:
                    87:96:42:d0:fd:28:75:1a:d7:cd:66:ba:2c:86:4d:
                    9e:b2:7f:6c:38:4e:db:87:92:e6:02:46:a7:8e:e4:
                    de:c1:6e:28:10:a3:a8:60:42:26:20:d0:75:0c:17:
                    cb:96:42:4e:77:9c:48:84:40:42:df:76:8a:13:47:
                    d2:ad:89:76:12:dd:88:96:48:4e:59:42:2c:c3:8c:
                    0f:fb:40:7f:d0:da:b9:f6:b7:a8:e0:24:c3:40:e6:
                    d5:92:12:09:f5:77:32:cb:0e:fe:04:34:7e:ef:67:
                    42:7a:64:30:12:4b:8a:9e:9a:fe:7a:f3:07:3c:c4:
                    80:7c:b0:41:4d:0d:69:fb:74:3b:01:a9:27:1b:a2:
                    c7:b2:f3:99:44:e5:9d:9a:f5:11:fa:27:f7:c9:54:
                    4b:9a:26:f1:40:de:3d:71:df:fb:01:fd:68:2d:19:
                    1b:5a:70:5e:6b:10:4e:18:4a:ea:b9:dc:dc:f0:dc:
                    40:3d:ed:5a:4d:23:60:26:8c:24:83:96:a6:49:55:
                    4c:05:e8:f5:2a:5e:4b:32:85:15:d3:8f:85:02:1b:
                    1b:09:64:81:50:ba:bb:29:29:a7:97:62:37:ef:4a:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7E:05:99:5E:63:3B:34:74:AD:2B:EE:9D:99:EE:6B:14:AC:67:BE
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3230203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:38:0b:7c:76:2d:36:50:bd:84:63:13:01:d8:06:35:5f:66:
         49:fd:6a:05:bb:5c:35:ae:70:40:8d:e2:9a:af:fc:a4:f0:45:
         f9:16:fb:ad:74:2f:8e:da:f5:4e:33:35:09:7b:76:7a:e6:1d:
         b5:1a:73:29:47:87:fd:99:21:29:13:42:7c:69:a4:d8:57:57:
         65:32:5e:5e:fe:01:16:b8:62:d4:ec:c8:71:f0:b7:0e:74:e8:
         47:24:3c:4b:61:06:b5:fa:92:74:0c:15:b1:57:e6:3c:f6:c2:
         b3:f2:20:e0:69:07:c7:d6:8b:5e:ac:b5:dd:2b:5c:2e:9c:74:
         27:d5:1e:5b:4d:a3:e1:c4:60:6a:18:8f:42:54:00:2e:4c:5d:
         45:e6:0a:d1:ae:ee:68:bf:03:03:ed:23:ed:8e:7e:09:a9:5d:
         f1:cd:6b:f3:31:2f:f7:c8:07:49:d0:0a:90:f6:dd:67:78:f2:
         96:6a:21:72:9d:50:07:a3:b4:a7:9e:9d:43:8a:2b:2c:bb:3b:
         f4:5a:bd:d2:32:a6:e9:dc:19:fd:45:8c:eb:64:a5:0d:d9:59:
         9a:cf:8c:90:12:fd:07:58:a6:61:d5:9d:55:20:84:58:21:47:
         ea:34:4b:fd:e7:5d:82:1c:3e:f1:70:d6:2f:60:56:6c:54:50:
         34:1a:de:c9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUcVKLty3Deyxx8s0Jb5BSlP9UXYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCQzA4NEI1M0Y5Nzk4NzE0QzA2QTY0MkI2OThERDkw
RUMyRjI1RTAeFw0yNDA0MjMxODU5MDZaFw0yNTA0MjIxOTA0MDZaMDMxMTAvBgNV
BAMTKEUxN0UwNTk5NUU2MzNCMzQ3NEFEMkJFRTlEOTlFRTZCMTRBQzY3QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh88wVmhaTHh1B85hNgqVctJs/
kHeVUGNwlynikoeWQtD9KHUa181muiyGTZ6yf2w4TtuHkuYCRqeO5N7BbigQo6hg
QiYg0HUMF8uWQk53nEiEQELfdooTR9KtiXYS3YiWSE5ZQizDjA/7QH/Q2rn2t6jg
JMNA5tWSEgn1dzLLDv4ENH7vZ0J6ZDASS4qemv568wc8xIB8sEFNDWn7dDsBqScb
osey85lE5Z2a9RH6J/fJVEuaJvFA3j1x3/sB/WgtGRtacF5rEE4YSuq53Nzw3EA9
7VpNI2AmjCSDlqZJVUwF6PUqXksyhRXTj4UCGxsJZIFQurspKaeXYjfvSgIrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4X4FmV5jOzR0rSvunZnuaxSsZ74wHwYDVR0j
BBgwFoAUirwIS1P5eYcUwGpkK2mN2Q7C8l4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFnTHJlV0xmY0xzMlA0eGlkUkxLMTRrdENqVzFLVW43aERCNEFMVHFI
bjgvMC84QUJDMDg0QjUzRjk3OTg3MTRDMDZBNjQyQjY5OEREOTBFQzJGMjVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQkMwODRCNTNGOTc5ODcx
NEMwNkE2NDJCNjk4REQ5MEVDMkYyNUUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxZ0xyZVdMZmNMczJQNHhpZFJMSzE0a3RDalcxS1VuN2hEQjRBTFRxSG44LzAv
MzEzODM5MmUzMTM0MmUzNjM0MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzODMy
MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL0OQDANBgkqhkiG9w0BAQsFAAOCAQEAZzgLfHYtNlC9
hGMTAdgGNV9mSf1qBbtcNa5wQI3imq/8pPBF+Rb7rXQvjtr1TjM1CXt2euYdtRpz
KUeH/ZkhKRNCfGmk2FdXZTJeXv4BFrhi1OzIcfC3DnToRyQ8S2EGtfqSdAwVsVfm
PPbCs/Ig4GkHx9aLXqy13StcLpx0J9UeW02j4cRgahiPQlQALkxdReYK0a7uaL8D
A+0j7Y5+Cald8c1r8zEv98gHSdAKkPbdZ3jylmohcp1QB6O0p56dQ4orLLs79Fq9
0jKm6dwZ/UWM62SlDdlZms+MkBL9B1imYdWdVSCEWCFH6jRL/eddghw+8XDWL2BW
bFRQNBreyQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org