Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233382e302f32332d3233203d3e20323634323132.roa
File:                     3138372e302e3233382e302f32332d3233203d3e20323634323132.roa (raw, json)
Hash identifier:          HDsXhN6Cg9GLVIBi9dzG5n3kbwLtdRypMnYkU/R0F6I=
Subject key identifier:   B8:1A:33:F4:45:61:CE:62:B6:4D:8E:05:F5:D3:24:1F:2B:8A:4D:A1
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       76F37369885829D4CDEA932755C29488AEE6CD5B
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233382e302f32332d3233203d3e20323634323132.roa
Signing time:             Tue 27 Aug 2024 19:22:44 +0000
ROA not before:           Tue 27 Aug 2024 19:17:44 +0000
ROA not after:            Tue 26 Aug 2025 19:22:44 +0000
asID:                     264212
IP address blocks:        187.0.238.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 21:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f3:73:69:88:58:29:d4:cd:ea:93:27:55:c2:94:88:ae:e6:cd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: Aug 27 19:17:44 2024 GMT
            Not After : Aug 26 19:22:44 2025 GMT
        Subject: CN=B81A33F44561CE62B64D8E05F5D3241F2B8A4DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:b8:40:da:be:2a:76:7e:92:d2:7e:5d:78:
                    00:09:66:31:65:73:87:a9:0a:3c:43:aa:f9:1c:05:
                    46:d0:d3:ce:b2:7d:c6:08:f9:de:5a:d0:5f:ab:ba:
                    56:3d:e1:0c:70:d4:cd:6d:64:5b:96:17:a4:5b:15:
                    12:0a:f3:d8:f8:d5:fc:ee:bc:6a:7a:d7:a4:f8:70:
                    e4:a1:85:d9:00:72:c2:69:dd:5b:73:e3:96:ea:36:
                    69:89:6f:95:86:8a:f9:6a:64:e5:18:dc:e5:2a:c3:
                    0f:d9:5a:f7:1c:5e:ba:24:6c:ad:a9:1a:16:e3:90:
                    5f:0c:15:0d:5d:27:86:82:2f:26:00:fe:c3:e8:dc:
                    34:5f:d4:2c:58:fb:7f:f4:00:be:8f:99:27:df:5f:
                    71:9c:17:61:53:a8:5d:1f:de:fa:bd:2a:59:5a:b6:
                    f5:ec:b3:12:ae:6c:0e:cc:e2:6c:7e:96:39:26:a2:
                    da:cf:76:88:f7:18:b9:2a:ff:1e:7e:7f:5c:4e:df:
                    14:7a:46:a8:1a:9a:b3:0e:41:a1:df:c2:dc:0b:82:
                    8a:7f:2f:3b:c7:8e:0f:a2:c7:9f:b2:4e:dd:5b:1a:
                    e3:df:9e:cd:6e:2b:21:54:0e:1a:ff:38:06:09:4d:
                    b7:32:4a:41:a4:f4:b5:e5:5a:8e:72:23:f2:b5:7a:
                    b4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1A:33:F4:45:61:CE:62:B6:4D:8E:05:F5:D3:24:1F:2B:8A:4D:A1
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233382e302f32332d3233203d3e20323634323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:a4:9d:c1:c4:19:3c:64:24:69:96:c0:c8:05:2c:0e:7d:b8:
         fc:b4:ac:a9:d0:20:89:dc:39:70:8a:b6:40:21:82:56:7f:ac:
         7b:1d:b5:a6:7c:e2:ce:57:a7:cf:55:f1:1d:a7:9e:3a:48:17:
         9d:e8:0d:ee:79:42:b9:fb:78:9b:e5:7f:a0:89:e1:eb:1f:03:
         80:96:fd:72:d6:69:28:b3:57:a0:6e:81:94:30:0b:0b:0f:75:
         a6:99:7a:fe:0a:77:b1:f2:f9:62:37:e2:ab:9f:b6:b0:4a:38:
         eb:64:a7:77:5c:23:02:e7:dd:33:c6:af:95:21:c2:e3:8b:8d:
         47:cb:63:3e:8d:f0:04:b4:2f:49:03:fd:9f:8c:02:be:e5:a1:
         bd:ce:ca:02:c2:17:3b:8b:c1:24:be:d0:14:58:c5:15:f2:dd:
         4b:a4:82:62:21:dc:c6:ba:43:5d:48:aa:aa:67:04:3d:89:3b:
         e9:ee:35:fb:b0:58:53:32:a0:f6:4e:eb:4d:7e:54:ab:6c:a8:
         7a:98:3f:39:7d:7a:ce:2e:5e:82:03:e7:d5:27:f4:b9:12:00:
         67:59:d1:5c:03:20:bb:48:fa:ab:18:3e:4c:12:d8:27:3b:8e:
         1d:71:fe:ef:9e:d5:04:45:56:cc:01:07:02:31:b1:e4:b7:26:
         c4:da:30:f2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdvNzaYhYKdTN6pMnVcKUiK7mzVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFEMzRCOUU2OTkzQjE3QjMxNTUxN0MyQjhEN0E3NTg3
MDcwRjkwRTAeFw0yNDA4MjcxOTE3NDRaFw0yNTA4MjYxOTIyNDRaMDMxMTAvBgNV
BAMTKEI4MUEzM0Y0NDU2MUNFNjJCNjREOEUwNUY1RDMyNDFGMkI4QTREQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEprhA2r4qdn6S0n5deAAJZjFl
c4epCjxDqvkcBUbQ086yfcYI+d5a0F+rulY94Qxw1M1tZFuWF6RbFRIK89j41fzu
vGp616T4cOShhdkAcsJp3Vtz45bqNmmJb5WGivlqZOUY3OUqww/ZWvccXrokbK2p
GhbjkF8MFQ1dJ4aCLyYA/sPo3DRf1CxY+3/0AL6PmSffX3GcF2FTqF0f3vq9Klla
tvXssxKubA7M4mx+ljkmotrPdoj3GLkq/x5+f1xO3xR6RqgamrMOQaHfwtwLgop/
LzvHjg+ix5+yTt1bGuPfns1uKyFUDhr/OAYJTbcySkGk9LXlWo5yI/K1erRbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuBoz9EVhzmK2TY4F9dMkHyuKTaEwHwYDVR0j
BBgwFoAUkdNLnmmTsXsxVRfCuNenWHBw+Q4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMTRSZUhwazZuTktZNzhCcVMxM0p6RkRUUTJLU1hEYkI0aVRZVVNmeWU3
ODEvMS85MUQzNEI5RTY5OTNCMTdCMzE1NTE3QzJCOEQ3QTc1ODcwNzBGOTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxRDM0QjlFNjk5M0IxN0Iz
MTU1MTdDMkI4RDdBNzU4NzA3MEY5MEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzE0UmVIcGs2bk5LWTc4QnFTMTNKekZEVFEyS1NYRGJCNGlUWVVTZnllNzgxLzEv
MzEzODM3MmUzMDJlMzIzMzM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzIzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuwDuMA0GCSqGSIb3DQEBCwUAA4IBAQDZpJ3BxBk8
ZCRplsDIBSwOfbj8tKyp0CCJ3DlwirZAIYJWf6x7HbWmfOLOV6fPVfEdp546SBed
6A3ueUK5+3ib5X+gieHrHwOAlv1y1mkos1egboGUMAsLD3WmmXr+Cnex8vliN+Kr
n7awSjjrZKd3XCMC590zxq+VIcLji41Hy2M+jfAEtC9JA/2fjAK+5aG9zsoCwhc7
i8EkvtAUWMUV8t1LpIJiIdzGukNdSKqqZwQ9iTvp7jX7sFhTMqD2TutNflSrbKh6
mD85fXrOLl6CA+fVJ/S5EgBnWdFcAyC7SPqrGD5MEtgnO44dcf7vntUERVbMAQcC
MbHktybE2jDy
-----END CERTIFICATE-----
Generated at Tue Aug 27 23:21:43 2024 by rpki-client on console-fra.rpki-client.org