Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131342e302f32332d3233203d3e20323731363830.roa
File:                     3138372e3131312e3131342e302f32332d3233203d3e20323731363830.roa (raw, json)
Hash identifier:          z/tBr6P4dMV5u1rs9ulN/FlpqBZ1cxHOSnfbWz0hvHg=
Subject key identifier:   7D:81:08:B5:15:96:EF:2F:E8:06:E1:3E:02:77:28:2B:F1:36:BA:A2
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       38277AFBE2DE7F614D3279BF237987D476F32AAC
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131342e302f32332d3233203d3e20323731363830.roa
Signing time:             Wed 03 Apr 2024 20:06:21 +0000
ROA not before:           Wed 03 Apr 2024 20:01:21 +0000
ROA not after:            Wed 02 Apr 2025 20:06:21 +0000
asID:                     271680
IP address blocks:        187.111.114.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 17:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:27:7a:fb:e2:de:7f:61:4d:32:79:bf:23:79:87:d4:76:f3:2a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Apr  3 20:01:21 2024 GMT
            Not After : Apr  2 20:06:21 2025 GMT
        Subject: CN=7D8108B51596EF2FE806E13E0277282BF136BAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:14:1c:0b:e4:99:97:12:78:fd:3c:1f:20:5f:
                    dd:09:cc:02:0a:6b:ca:44:32:67:e3:31:61:0c:03:
                    5c:37:dc:d4:5d:64:10:b9:d1:c1:9d:71:14:c3:f4:
                    85:2a:10:b1:9a:8d:b8:ff:ab:98:97:5f:3b:4a:ce:
                    a0:02:ef:cb:7c:b1:4c:e4:a7:f8:60:fc:c7:78:ce:
                    25:1e:3e:c8:10:eb:29:d9:b3:2d:9b:21:5e:d1:e6:
                    8d:ad:74:2b:cc:0d:1e:c9:41:ba:e2:4f:14:bf:e3:
                    e2:60:32:90:39:19:b0:98:71:db:63:04:87:51:4e:
                    b0:d7:41:b6:46:6f:b9:79:65:1d:e8:dc:9d:38:a7:
                    d7:49:bd:1f:b3:3a:5a:26:9c:3a:a1:49:95:86:05:
                    3a:b1:8a:5a:9c:38:e9:53:c5:8a:9c:c8:95:44:0c:
                    3c:cb:70:12:47:45:f3:0d:54:38:4f:9c:e9:92:aa:
                    12:80:60:b0:a3:05:53:f1:b7:1c:f3:bb:22:44:75:
                    89:65:7d:c2:bb:65:33:95:78:16:0a:b4:42:41:af:
                    43:77:38:76:c0:e6:49:bb:63:20:ab:cf:15:6b:12:
                    39:8f:54:f7:f3:36:79:a3:72:21:eb:cb:3f:cc:b5:
                    ff:bb:0c:53:6c:65:f7:48:65:3c:f9:ad:d5:af:99:
                    29:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:81:08:B5:15:96:EF:2F:E8:06:E1:3E:02:77:28:2B:F1:36:BA:A2
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131342e302f32332d3233203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:50:09:a4:07:52:d8:b2:e7:f1:38:d1:40:c3:76:04:69:64:
         3f:30:87:6d:8d:e8:54:a9:5b:c4:7a:78:88:99:d1:38:28:09:
         69:de:9e:88:d0:c7:56:41:f0:77:95:8b:b3:ff:e5:23:c4:05:
         ee:c6:f4:5d:d6:f2:4f:80:95:b6:6e:b8:7d:8a:b4:e5:12:7c:
         be:56:4c:29:f9:9b:86:3b:cb:68:e2:d2:4d:d7:c1:85:08:81:
         9b:7c:ec:c7:7e:df:bf:11:6f:c8:43:88:b3:69:ac:bb:23:9f:
         94:8e:e5:fb:e6:83:64:ac:5f:60:3f:50:77:c6:c7:5e:f5:9a:
         31:fc:e6:9a:18:52:e3:de:25:51:87:77:f6:76:ce:f0:35:b6:
         11:13:f0:b6:4d:07:22:11:0f:d3:ae:20:10:2e:19:bf:2d:36:
         45:1c:03:f6:43:17:ad:22:88:a8:87:bb:d7:3c:37:57:c3:da:
         f2:7d:36:6d:26:53:2b:a6:11:46:91:0e:3f:9f:6b:18:36:ef:
         a1:b1:7a:cc:74:2f:a7:29:5f:88:fb:99:21:f0:85:44:5e:f4:
         90:d5:5c:24:15:df:17:5a:f5:7e:22:51:ce:5a:85:b2:fd:67:
         bc:22:a3:49:65:48:2a:57:38:bb:55:5c:95:13:b3:80:df:e3:
         4f:8c:b5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 20:23:12 2024 by rpki-client on console-fra.rpki-client.org