Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3232203d3e20323634393030.roa
File:                     3136382e3232382e382e302f32322d3232203d3e20323634393030.roa (raw, json)
Hash identifier:          rZ9h3ExzNYnYX+URIGB6mLyroAY9t7BVsD5DALP4Fug=
Subject key identifier:   C3:71:21:99:05:08:1F:58:A6:94:0F:ED:63:56:55:8B:13:B6:FA:A0
Certificate issuer:       /CN=CDB34CF4AFC01721153990AE1A10D922F7507546
Certificate serial:       0AE6B20E8B2FE364B16FDB2CA5AB624C782A04F0
Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3232203d3e20323634393030.roa
Signing time:             Thu 18 Apr 2024 13:12:10 +0000
ROA not before:           Thu 18 Apr 2024 13:07:10 +0000
ROA not after:            Thu 17 Apr 2025 13:12:10 +0000
asID:                     264900
IP address blocks:        168.228.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e6:b2:0e:8b:2f:e3:64:b1:6f:db:2c:a5:ab:62:4c:78:2a:04:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546
        Validity
            Not Before: Apr 18 13:07:10 2024 GMT
            Not After : Apr 17 13:12:10 2025 GMT
        Subject: CN=C371219905081F58A6940FED6356558B13B6FAA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:20:ec:e3:fb:6a:8f:12:d6:1a:be:bf:15:
                    1e:68:cc:44:d6:82:f6:fa:eb:7a:e9:77:e8:23:28:
                    53:d9:d1:95:0b:94:3c:32:0f:5a:0c:dd:97:71:5c:
                    87:07:9b:27:a8:7e:55:97:2d:65:a5:0e:4b:54:d3:
                    56:6a:01:1f:37:28:7c:dd:6f:2a:cf:0b:0d:51:1a:
                    b7:35:67:94:85:6c:79:f4:ce:23:3c:af:00:a0:d6:
                    0d:60:4b:1f:e2:16:0f:2d:01:ab:84:4c:2b:4b:64:
                    f1:b0:00:de:22:1f:10:ce:f1:6b:38:72:09:33:51:
                    aa:a5:b6:c1:da:79:44:2b:91:cf:b3:11:24:57:db:
                    2b:b2:63:b9:a0:bf:27:7a:33:18:1b:4a:42:65:05:
                    29:49:d7:4e:21:e5:67:fe:4e:50:46:91:1b:4b:5c:
                    5e:f6:d3:4a:b2:d7:48:36:e0:fb:3a:9e:fa:b4:f2:
                    c7:58:05:58:cc:fa:d1:13:8c:07:bf:04:2e:8b:b1:
                    aa:6a:36:34:74:54:23:47:cd:8f:8a:fe:53:fd:6c:
                    92:e1:16:55:83:fc:d5:92:83:05:6c:84:88:49:16:
                    14:4b:8e:e2:0c:de:06:84:78:73:cd:45:ca:34:fa:
                    d7:87:b0:a8:34:e2:cb:25:2b:f5:c6:a7:5a:49:53:
                    ec:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:71:21:99:05:08:1F:58:A6:94:0F:ED:63:56:55:8B:13:B6:FA:A0
            X509v3 Authority Key Identifier:
                keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3232203d3e20323634393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:82:90:f2:25:f3:1f:38:9a:92:cc:df:2e:d3:f8:5c:c3:16:
         c4:fe:58:e7:35:f4:c8:6f:e0:0a:22:09:52:c6:fa:c7:e5:ac:
         31:1c:50:fa:1d:f7:b6:18:38:73:19:cd:c7:bc:77:51:14:1f:
         56:3c:96:31:d2:21:9d:03:45:d6:48:0a:54:3c:e9:d9:9b:a7:
         fc:86:bd:57:b5:b8:2c:73:fe:66:b4:93:f4:6a:50:55:3d:9c:
         0a:f8:25:c5:ce:7f:ed:b6:9b:2a:8c:d3:50:c2:f2:23:64:f4:
         27:c1:a6:92:fb:9e:53:98:04:ec:d7:eb:9c:5e:85:80:0a:a3:
         34:d3:0e:34:ac:d7:9c:3d:ef:a7:70:02:64:36:c9:2c:2b:6e:
         70:dc:8e:f7:97:d3:a0:f9:f7:d2:c3:88:66:20:bd:3e:72:29:
         23:23:cf:90:b8:0d:57:80:22:9b:99:43:1f:a3:69:d0:26:19:
         1c:51:ff:3e:d2:eb:ac:7a:a8:77:d1:89:80:fa:9f:2c:95:90:
         0c:69:9f:09:b4:81:ff:86:de:7d:ae:56:1b:54:c4:10:ee:5e:
         b0:fd:a7:57:72:ac:f6:71:04:1a:eb:26:5c:f2:0f:f2:61:34:
         43:e9:ce:94:10:24:71:71:97:c5:94:ff:59:70:a1:d2:c2:29:
         79:0e:90:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org