Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3232382e302f32322d3233203d3e20323634323132.roa
File:                     3138372e302e3232382e302f32322d3233203d3e20323634323132.roa (raw, json)
Hash identifier:          +bsU9o6QlBq12Rd21xJd5u6T8Khhky4JYwfi7FSzLkg=
Subject key identifier:   E6:D6:40:C6:76:89:B8:2C:67:18:1A:0F:17:A2:D9:7F:74:9F:A7:52
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       600E0047334264B69AB003B8BF968D386E75C101
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3232382e302f32322d3233203d3e20323634323132.roa
Signing time:             Tue 27 Aug 2024 19:22:32 +0000
ROA not before:           Tue 27 Aug 2024 19:17:32 +0000
ROA not after:            Tue 26 Aug 2025 19:22:32 +0000
asID:                     264212
IP address blocks:        187.0.228.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 21:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0e:00:47:33:42:64:b6:9a:b0:03:b8:bf:96:8d:38:6e:75:c1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: Aug 27 19:17:32 2024 GMT
            Not After : Aug 26 19:22:32 2025 GMT
        Subject: CN=E6D640C67689B82C67181A0F17A2D97F749FA752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:df:08:5b:f5:84:68:0c:5b:49:2c:42:ea:54:
                    70:cd:bc:be:6c:2b:ab:cf:a4:dd:37:be:52:2f:5f:
                    92:a2:f8:9d:f0:ad:0f:bf:9c:6f:6c:b9:12:89:8b:
                    6f:43:a0:9f:b1:10:cc:f4:69:d7:8e:40:a9:31:b7:
                    b5:09:b8:7a:bf:22:fe:29:87:7b:a0:f5:dd:49:e2:
                    f3:a8:b5:9b:c9:bc:5a:44:dc:c3:cd:a0:01:95:98:
                    92:ab:42:f6:88:d9:d8:2f:14:15:7d:ed:ce:2f:a3:
                    2c:a7:e2:13:1a:14:78:f5:f1:c6:bb:75:9d:58:b0:
                    7f:e4:e4:7f:80:d4:b5:5b:5d:7f:70:a1:04:fe:a9:
                    a8:93:7a:f0:85:65:b2:c6:01:21:a6:6b:d1:64:a1:
                    5e:08:7e:de:3b:55:5c:33:5f:be:fd:9c:1b:27:57:
                    f5:35:70:4b:76:ea:01:45:bb:11:ae:1f:6e:51:97:
                    49:cb:63:7a:56:96:d0:ef:1e:25:30:49:b3:ec:b1:
                    3e:af:04:36:4c:ee:a9:d4:87:cf:d9:8a:dd:e4:b0:
                    ce:5f:ce:85:b6:1e:25:98:7c:b9:31:00:7b:d8:3f:
                    71:93:e2:77:60:fe:54:2c:13:60:92:a8:f5:37:83:
                    c7:da:cd:28:7f:85:54:de:73:81:ee:9a:f3:4c:ac:
                    b4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D6:40:C6:76:89:B8:2C:67:18:1A:0F:17:A2:D9:7F:74:9F:A7:52
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3232382e302f32322d3233203d3e20323634323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:73:7b:05:8f:65:89:be:e2:09:4d:30:3e:a0:9a:26:a7:92:
         ce:4a:8f:4c:10:5e:1b:81:6c:6f:48:be:3f:98:57:fb:8e:3c:
         1d:f5:b9:94:18:e8:f2:ac:f5:7a:93:9e:1b:a5:d0:b1:10:a5:
         4d:9a:99:f9:bd:f1:9f:0f:b9:24:c2:fc:49:bd:2b:1f:dc:a9:
         35:55:16:32:f1:e0:82:cc:09:79:ce:20:bc:3e:15:b3:16:1c:
         07:8c:22:3c:5c:52:eb:a7:0f:33:86:c9:b6:9c:8b:4e:ec:23:
         c2:95:26:c9:fa:fa:ff:69:69:ca:11:ba:27:12:ea:e4:3d:e2:
         3c:c7:c8:25:57:44:3f:7c:36:a2:f3:08:08:6f:dd:27:2b:c2:
         66:1e:f2:b9:31:64:6b:18:a6:d0:7d:1b:00:01:b3:52:5f:a1:
         3c:53:f8:6e:e2:27:1b:10:4f:ea:3c:7b:71:d4:29:39:4d:6a:
         62:75:7e:84:fb:00:45:11:f0:a9:f6:94:6a:51:2f:7a:af:72:
         03:b7:d3:6e:09:69:51:97:69:80:16:82:ea:62:95:5d:a2:f7:
         3e:02:67:98:3d:0e:98:88:36:75:04:1c:f5:f5:37:f9:f8:f8:
         47:91:e3:de:ca:e3:51:d6:5b:26:64:3b:bd:12:e5:9b:6a:bc:
         a6:9e:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 23:40:34 2024 by rpki-client on console-ams.rpki-client.org