Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3232342e302f32322d3233203d3e20323634323132.roa
File:                     3138372e302e3232342e302f32322d3233203d3e20323634323132.roa (raw, json)
Hash identifier:          QlInZcoXwkashtL5lg4yGkDBkyviJjIaeN8LeOZxGIU=
Subject key identifier:   9D:72:27:B3:F2:3F:D4:5D:55:8D:31:47:D5:6C:9D:93:08:E0:E1:A3
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       015FAE7E573F4937543E95547AF976FDCA8F11E2
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3232342e302f32322d3233203d3e20323634323132.roa
Signing time:             Tue 27 Aug 2024 19:22:28 +0000
ROA not before:           Tue 27 Aug 2024 19:17:28 +0000
ROA not after:            Tue 26 Aug 2025 19:22:28 +0000
asID:                     264212
IP address blocks:        187.0.224.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 21:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5f:ae:7e:57:3f:49:37:54:3e:95:54:7a:f9:76:fd:ca:8f:11:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: Aug 27 19:17:28 2024 GMT
            Not After : Aug 26 19:22:28 2025 GMT
        Subject: CN=9D7227B3F23FD45D558D3147D56C9D9308E0E1A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:1a:d3:64:59:1e:47:d9:ec:c6:1f:c1:8a:
                    af:66:69:da:7a:cd:35:8e:ae:e5:e3:a2:7a:86:1c:
                    6a:0e:d7:91:e4:00:de:db:8f:b8:bb:a5:f4:83:05:
                    dd:79:82:23:ae:5e:60:33:5b:af:c3:26:76:54:31:
                    18:c5:6c:6d:92:b2:6e:a7:47:67:10:ea:68:d5:52:
                    a9:38:82:9e:27:6c:a0:78:d2:60:22:38:9e:93:c8:
                    be:7f:85:1f:ba:db:e7:8f:62:8c:ea:77:5d:1c:ce:
                    85:47:03:b3:0d:29:c1:89:30:da:58:f2:30:d8:a1:
                    c1:4f:66:a3:ab:23:6a:fa:80:f3:dd:60:e1:f9:ed:
                    1e:4e:97:62:eb:8d:35:7a:fe:9c:28:8c:fd:12:e2:
                    55:b4:86:ea:6d:6d:b5:ec:7b:84:d2:c0:f5:9c:b4:
                    4c:a8:1a:b1:2d:e0:83:65:00:43:c5:4d:10:16:e2:
                    7d:c2:62:c6:4d:6f:56:5c:3e:ef:01:9f:da:ac:5a:
                    51:a6:fe:e9:ec:51:59:38:c1:09:8c:4a:b5:4f:33:
                    ee:c2:24:35:af:ea:4a:aa:32:57:20:84:a9:17:81:
                    e7:24:3c:73:79:e8:47:56:25:ef:d1:2f:10:49:4e:
                    ec:68:2f:89:b8:ea:b1:8c:6a:fc:61:bf:5b:7d:e0:
                    d2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:72:27:B3:F2:3F:D4:5D:55:8D:31:47:D5:6C:9D:93:08:E0:E1:A3
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3232342e302f32322d3233203d3e20323634323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:c1:f9:a6:19:95:2f:cd:ce:be:bf:ba:f8:5c:c7:d8:ba:7e:
         7f:80:91:f0:0e:61:eb:17:59:3a:35:6a:85:36:18:fe:45:c8:
         54:90:c4:ec:a0:1b:3e:86:b3:44:48:1c:98:93:76:10:24:d9:
         da:3d:63:70:c0:30:f1:ef:34:d6:3f:dd:74:48:4d:f0:b1:54:
         17:47:c8:90:a9:1f:2a:e6:0b:68:e9:12:07:47:de:69:30:cf:
         c6:2d:fd:f3:c2:fa:46:50:73:2d:4f:f9:94:68:2b:8e:78:4c:
         01:30:63:07:5c:39:73:72:7e:e5:50:4d:99:8c:8c:9d:9a:6a:
         82:e0:1b:3c:e3:bb:43:43:9b:0c:61:15:d3:f9:2f:06:fa:bb:
         89:6d:66:39:c6:63:ae:6f:d0:ba:09:cd:6b:90:bb:bc:e0:e9:
         9f:32:c7:22:c1:a7:e4:f3:99:6c:bb:7d:1c:d7:fc:64:11:78:
         4e:e2:62:fb:6d:90:a5:2f:be:ab:2e:b8:37:bd:c5:eb:37:59:
         10:d3:21:e7:22:54:da:66:77:22:96:a3:ad:f2:57:42:5b:e1:
         c6:fc:06:a3:7a:82:6f:bb:1b:87:d7:fa:28:60:e9:45:8d:ab:
         13:cf:a7:e0:49:ad:5b:a1:0d:70:d6:9f:16:12:d2:4d:02:97:
         46:17:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 23:21:43 2024 by rpki-client on console-fra.rpki-client.org