Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134342e302f32302d3234203d3e20323632343539.roa
File:                     3138362e3230382e3134342e302f32302d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          2TAL9FXXIl1X6wTbX8u1CD6xlFwCo0PcOxffLc47uKc=
Subject key identifier:   87:D7:11:46:67:81:96:A4:9D:9A:5C:82:BC:4A:0F:14:A2:20:2A:E7
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       780D0846CF476B38E9DB8490D424EC2BDDE04F71
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134342e302f32302d3234203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:31 +0000
ROA not before:           Thu 04 Apr 2024 02:55:31 +0000
ROA not after:            Thu 03 Apr 2025 03:00:31 +0000
asID:                     262459
IP address blocks:        186.208.144.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 20:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0d:08:46:cf:47:6b:38:e9:db:84:90:d4:24:ec:2b:dd:e0:4f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:31 2024 GMT
            Not After : Apr  3 03:00:31 2025 GMT
        Subject: CN=87D71146678196A49D9A5C82BC4A0F14A2202AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:c0:7b:38:90:c4:40:d0:5b:36:11:76:36:
                    1e:9d:22:65:c0:6a:9d:26:2a:bc:08:0c:ef:97:f6:
                    79:ea:1f:9d:2f:7e:74:c1:e4:da:aa:41:f2:52:3a:
                    ce:5a:e6:8a:1a:cf:2a:5a:d0:65:9e:f8:da:2d:16:
                    da:91:69:d7:b3:55:fc:2d:da:6a:96:53:db:92:fb:
                    5a:ef:af:7f:e5:23:80:e7:f0:4e:d2:15:46:9a:7e:
                    4c:34:a3:cc:36:f0:a7:38:6d:2f:eb:ed:21:2a:3a:
                    d6:91:e9:11:55:d3:1b:d7:b0:fa:de:26:b2:ed:c8:
                    28:3b:9c:4f:20:d4:1c:5b:9d:bb:c4:04:a0:40:d4:
                    d0:3f:24:8c:90:75:5f:30:85:90:71:e3:af:28:f6:
                    28:dc:d8:84:b1:0f:5e:1c:91:23:bc:a9:68:a0:2d:
                    d0:b8:5e:a8:14:cb:7a:d0:93:82:1a:98:a4:f4:d6:
                    5e:26:b2:fe:22:3c:f9:09:47:5b:66:8f:bb:ca:95:
                    e3:d1:4b:ba:a8:b7:1f:89:c4:bd:82:2b:9a:18:bb:
                    01:9b:f1:91:12:56:c5:95:24:11:82:52:fa:15:9c:
                    8d:9d:24:89:d1:f3:97:de:b3:15:18:32:7e:1d:ba:
                    ac:03:0c:df:67:25:35:d8:86:ed:27:2c:51:3b:71:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D7:11:46:67:81:96:A4:9D:9A:5C:82:BC:4A:0F:14:A2:20:2A:E7
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134342e302f32302d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:b4:66:40:93:ec:39:c1:66:3b:71:85:2f:ab:25:85:ae:63:
         03:f2:41:d3:eb:9c:e3:96:95:7c:2f:a9:41:54:25:b9:48:28:
         d7:0a:ba:8a:e3:59:a0:f4:9b:4c:3f:b6:2f:13:af:8c:1b:b7:
         c2:a5:de:1f:80:23:00:a7:cc:a6:c7:63:eb:20:b5:00:85:cb:
         b0:03:a1:01:a2:2b:a9:3a:a5:f8:59:0e:e5:88:66:81:8a:10:
         5e:e1:0b:5f:b6:ec:9a:dd:0e:7b:22:3d:0b:ac:4a:7e:b3:ab:
         9e:81:6f:03:cb:43:40:7b:69:59:56:d1:76:16:fb:36:e6:22:
         45:ae:43:6c:58:dc:0b:fd:69:1f:8a:e0:cd:bd:94:fc:88:a0:
         89:a2:0e:4e:0c:a0:a9:fa:6f:c8:77:f7:da:47:73:c7:15:41:
         c9:4f:a7:bd:3d:92:78:1a:a9:86:0a:47:73:53:30:8b:e0:1a:
         72:5e:8d:06:a6:7c:aa:00:b5:5a:72:c2:90:9a:d0:b0:37:a4:
         cf:36:e9:c2:5b:94:64:40:9c:c1:c6:da:77:5d:bb:8b:8b:ce:
         ac:97:dc:85:db:a7:99:34:ac:af:21:64:f4:87:00:a3:53:a9:
         ab:ae:d0:90:da:d5:0e:eb:3a:87:3d:ec:21:71:22:7a:d0:f6:
         59:a8:75:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 21:15:11 2024 by rpki-client on console-fra.rpki-client.org