Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36362e302f32342d3234203d3e203238323736.roa
File:                     3138392e31342e36362e302f32342d3234203d3e203238323736.roa (raw, json)
Hash identifier:          Tf0KZaYvK/exZFlBd2cVo735P2cd4EXCqEsvGb1qlLk=
Subject key identifier:   0E:62:81:39:3F:49:52:B2:2B:9E:D5:CB:FA:E3:0F:87:2C:52:A1:66
Certificate issuer:       /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial:       6CB62A0E100093CCD9D7887BB1F40B9CB31852F7
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36362e302f32342d3234203d3e203238323736.roa
Signing time:             Tue 23 Apr 2024 19:04:12 +0000
ROA not before:           Tue 23 Apr 2024 18:59:12 +0000
ROA not after:            Tue 22 Apr 2025 19:04:12 +0000
asID:                     28276
IP address blocks:        189.14.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b6:2a:0e:10:00:93:cc:d9:d7:88:7b:b1:f4:0b:9c:b3:18:52:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Validity
            Not Before: Apr 23 18:59:12 2024 GMT
            Not After : Apr 22 19:04:12 2025 GMT
        Subject: CN=0E6281393F4952B22B9ED5CBFAE30F872C52A166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:43:39:57:36:60:19:e8:c4:b3:d5:b3:bf:
                    2e:5d:4c:f1:fe:c1:39:ef:7e:94:e3:16:0c:4f:ef:
                    91:8c:f1:f3:17:56:f2:45:51:c2:d9:5f:bf:25:81:
                    b8:1a:fb:40:68:29:99:ff:79:a0:e3:e5:7b:17:4b:
                    60:4d:40:00:ec:fa:a9:8f:a2:85:1a:e1:48:e8:8d:
                    72:4e:7c:59:ea:c6:69:00:ef:12:fa:9b:ee:97:30:
                    42:ba:36:46:6f:a3:b0:90:bc:0c:c6:05:37:5b:1c:
                    52:f1:8f:9e:5f:ac:0f:93:20:72:d1:20:67:17:d5:
                    0d:a8:ea:25:f3:b8:8b:dd:f3:e3:9c:ac:ee:63:8b:
                    f5:dd:97:b5:b6:2b:8d:87:61:0b:e1:65:c6:ad:58:
                    5f:6a:ed:21:84:5c:8f:76:fa:23:78:a6:d2:00:66:
                    72:f8:54:5d:a6:b4:cf:26:8d:b8:7d:ef:04:45:7a:
                    73:5e:86:6f:6e:8e:01:e9:90:9f:72:ea:02:17:61:
                    7a:36:b9:60:8f:f3:80:94:e0:d4:ca:a4:0d:56:9c:
                    a0:33:37:45:ee:6a:aa:f4:8f:64:f6:69:23:b8:7f:
                    9e:31:d2:8a:bd:ae:87:9c:61:43:55:80:c9:47:f3:
                    91:d2:d9:2a:18:09:07:cd:1d:10:18:11:af:ea:ba:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:62:81:39:3F:49:52:B2:2B:9E:D5:CB:FA:E3:0F:87:2C:52:A1:66
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36362e302f32342d3234203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:17:8e:1b:7c:0f:0b:6d:25:73:3c:77:d2:84:21:86:0d:e1:
         04:ca:27:f3:5a:98:3a:ad:08:24:fc:99:55:51:df:dd:70:74:
         3e:e8:30:77:57:9f:3d:62:26:19:1b:0f:be:91:20:ff:69:2c:
         82:bb:6d:58:e1:8f:ad:b3:fc:83:a8:d4:d1:be:7c:c9:4e:3a:
         9c:61:9e:04:c3:1c:55:a4:b9:16:9e:bb:68:54:59:c9:bb:da:
         67:84:6b:20:e0:49:c4:89:c5:f7:36:40:89:9c:38:c8:9d:e9:
         25:85:36:84:2a:04:d7:88:af:dc:38:75:2a:24:37:15:4c:ad:
         c1:84:a7:fb:ac:04:ee:5c:64:46:75:0a:b2:0c:5b:40:5a:05:
         a6:27:50:0c:64:42:38:6b:20:cd:fc:ba:6e:19:c1:76:5f:a3:
         1f:2c:b7:63:d4:dd:7a:5f:08:04:d1:73:ff:b1:a2:7a:7b:4e:
         00:1a:4e:44:eb:81:b1:90:0f:8d:ba:11:e3:18:37:25:88:3b:
         67:c4:5e:7d:d0:03:39:44:29:78:9b:55:ab:da:c5:c9:4c:80:
         e0:2d:3c:ae:21:32:a0:fb:ea:be:ce:72:d4:d3:8e:c2:6b:97:
         e6:82:20:e7:63:e9:af:3b:0c:f5:82:de:9e:34:fd:75:40:05:
         d8:37:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org