Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233322e302f32322d3233203d3e20323634323132.roa
File:                     3138372e302e3233322e302f32322d3233203d3e20323634323132.roa (raw, json)
Hash identifier:          GKKLSdi2ug6h1kiRiMiZH33w/AkeDoeHE4oTP01caGo=
Subject key identifier:   7D:36:1C:18:9A:E1:83:42:26:6E:69:BD:8F:1A:7D:97:DE:41:E9:25
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       78C32CE8DFDE3368BEAF65F8D3F9D24418F73B9F
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233322e302f32322d3233203d3e20323634323132.roa
Signing time:             Tue 27 Aug 2024 19:22:41 +0000
ROA not before:           Tue 27 Aug 2024 19:17:41 +0000
ROA not after:            Tue 26 Aug 2025 19:22:41 +0000
asID:                     264212
IP address blocks:        187.0.232.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 21:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c3:2c:e8:df:de:33:68:be:af:65:f8:d3:f9:d2:44:18:f7:3b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: Aug 27 19:17:41 2024 GMT
            Not After : Aug 26 19:22:41 2025 GMT
        Subject: CN=7D361C189AE18342266E69BD8F1A7D97DE41E925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:fc:af:7c:e8:38:b7:0a:b3:03:3e:bd:32:
                    4e:45:a6:38:3c:1b:30:29:48:03:a0:73:f0:7f:a0:
                    f0:48:38:d5:ad:58:13:a2:e7:7a:48:99:96:75:7a:
                    1c:21:a6:0d:a6:f7:39:9f:06:d2:1d:e1:61:50:fa:
                    b1:f1:aa:3b:7d:d0:f7:19:e3:19:d8:32:96:fc:23:
                    bb:03:a9:b1:c3:20:f5:78:88:54:03:3c:c9:f7:2e:
                    b0:94:30:cf:97:70:55:2d:49:5a:de:ff:4f:44:d9:
                    f6:a2:cf:bb:0a:8f:d6:21:f1:7f:cd:6d:8a:28:4f:
                    b5:8a:9d:d2:e1:29:dd:b4:83:a9:a5:92:34:8c:ba:
                    0c:78:6c:88:fd:a7:d2:78:68:19:1e:17:8e:01:f4:
                    6a:90:e3:1c:6b:3f:71:d6:a8:6b:89:49:60:52:b1:
                    e0:06:da:14:63:76:e3:6d:2f:91:44:19:13:16:2d:
                    17:24:60:ec:54:59:53:02:bd:89:b0:dd:28:02:5b:
                    97:50:4d:bf:f9:05:dd:20:bb:db:fe:13:b6:e9:44:
                    34:30:c8:da:5d:ca:a1:1f:b9:d9:6f:45:de:3f:78:
                    70:61:26:d6:7e:36:89:b9:7e:c4:c6:72:2e:a4:99:
                    10:6c:a3:7e:cf:db:5b:ae:6a:df:78:ca:33:9d:42:
                    70:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:36:1C:18:9A:E1:83:42:26:6E:69:BD:8F:1A:7D:97:DE:41:E9:25
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233322e302f32322d3233203d3e20323634323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:9b:f0:1b:c2:0f:5d:92:79:65:d9:83:76:94:43:50:8e:f6:
         57:c3:3b:33:80:d1:01:1d:af:e4:90:22:32:cc:36:41:26:0a:
         58:e5:b1:c2:20:fb:34:73:af:35:f7:84:72:c3:ac:10:ee:5a:
         b0:07:ba:d5:c2:63:25:ba:ce:65:d6:46:fe:7e:da:11:00:90:
         5d:09:75:96:c3:29:d1:f7:5c:9c:5d:e9:64:7f:89:8b:8b:2c:
         54:51:57:1e:10:dd:7d:6e:46:35:23:0f:3e:5b:f3:2a:9f:0e:
         53:0a:22:39:96:10:90:13:5d:4b:11:c3:ff:6e:ac:dd:75:8a:
         41:d3:82:70:8e:82:5f:29:8a:3c:f8:69:93:55:1a:a4:be:10:
         9c:bf:4b:02:2d:af:6c:fd:91:c0:d8:dc:ef:fd:df:e8:bf:b5:
         f1:f2:c8:10:01:66:94:16:55:c3:28:10:7e:a9:cd:73:f8:a3:
         6d:0a:bf:0a:99:1d:cc:a1:3b:a5:f7:ba:0b:2c:0b:7f:14:ec:
         cb:bc:84:1d:41:ae:f2:6c:36:98:0e:3d:09:6d:79:61:25:1b:
         2b:d3:11:f8:9e:b5:66:bf:a1:17:49:67:55:6e:91:90:49:02:
         81:39:b5:bf:b5:a6:5c:08:2f:39:ad:e0:16:8a:ed:5b:a8:32:
         62:ef:5c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 23:40:34 2024 by rpki-client on console-ams.rpki-client.org