Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e34382e302f32302d3234203d3e203238323034.roa
File:                     3138392e39312e34382e302f32302d3234203d3e203238323034.roa (raw, json)
Hash identifier:          YkpHzqVfUK4zx7jc3Io524GEKpUl6ycUf8Qx35DZkVA=
Subject key identifier:   F7:A9:BE:C6:A6:15:7C:EB:99:89:67:2D:D4:04:5E:85:F1:A7:7B:94
Certificate issuer:       /CN=B1C144082A4D8FD2286AE4F11F8A9BBB928C7E55
Certificate serial:       580201BFC339FB89B49ADE046827E16F7807536F
Authority key identifier: B1:C1:44:08:2A:4D:8F:D2:28:6A:E4:F1:1F:8A:9B:BB:92:8C:7E:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C144082A4D8FD2286AE4F11F8A9BBB928C7E55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e34382e302f32302d3234203d3e203238323034.roa
Signing time:             Fri 25 Aug 2023 18:48:00 +0000
ROA not before:           Fri 25 Aug 2023 18:43:00 +0000
ROA not after:            Fri 23 Aug 2024 18:48:00 +0000
asID:                     28204
IP address blocks:        189.91.48.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 18:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:02:01:bf:c3:39:fb:89:b4:9a:de:04:68:27:e1:6f:78:07:53:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C144082A4D8FD2286AE4F11F8A9BBB928C7E55
        Validity
            Not Before: Aug 25 18:43:00 2023 GMT
            Not After : Aug 23 18:48:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:15:53:39:a7:78:1e:c8:bc:b2:51:b7:82:1c:
                    57:ef:76:b9:84:ad:bb:a7:f6:e9:f5:2a:eb:cb:35:
                    11:c8:21:79:ef:87:80:38:21:fe:86:57:c9:9b:67:
                    38:fd:cb:c5:af:e7:c5:25:3b:f5:b7:00:48:0d:84:
                    e4:3c:66:ab:31:70:f4:5c:d5:e7:06:e2:b9:61:6b:
                    7d:11:cc:71:39:18:c5:89:7a:1b:b2:64:fa:e5:97:
                    a4:7a:aa:1f:8b:95:1a:f9:32:04:27:a5:52:69:dd:
                    9d:45:ce:4b:9d:08:3a:5b:f7:51:0e:c7:11:96:07:
                    ce:7e:f4:fd:37:fa:18:b3:c7:66:ee:a8:e1:07:b9:
                    df:4f:c9:47:a4:02:a5:e6:0c:be:20:a0:80:fb:ff:
                    ed:98:b2:49:d4:e0:61:6f:c0:f7:0b:a2:d9:3e:75:
                    bc:7f:d7:3c:8e:fc:c2:af:df:ed:89:49:f7:e7:93:
                    36:4c:d8:2c:ba:8f:65:be:61:20:0a:5c:c6:33:80:
                    a2:b7:36:4c:9f:d7:7d:1a:a3:6b:63:b8:9a:68:d5:
                    20:02:43:f8:65:c8:7f:84:cb:df:a3:2c:1a:3b:de:
                    22:13:36:b3:f6:88:14:b0:57:1c:e0:ab:65:93:7c:
                    e9:5c:5f:3d:e4:8b:f6:cb:de:31:31:f3:8d:ed:99:
                    c3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:BE:C6:A6:15:7C:EB:99:89:67:2D:D4:04:5E:85:F1:A7:7B:94
            X509v3 Authority Key Identifier:
                keyid:B1:C1:44:08:2A:4D:8F:D2:28:6A:E4:F1:1F:8A:9B:BB:92:8C:7E:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/B1C144082A4D8FD2286AE4F11F8A9BBB928C7E55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C144082A4D8FD2286AE4F11F8A9BBB928C7E55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e34382e302f32302d3234203d3e203238323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:4f:06:f1:37:f2:7e:b1:66:3a:b5:ff:eb:e1:0b:9d:ae:7b:
         42:a3:ed:d1:95:1b:da:45:8e:8d:5c:b3:6e:bd:01:51:49:09:
         05:a4:ad:7f:62:d5:0b:f2:23:d2:31:ce:cc:40:d7:52:82:e6:
         5e:3d:50:76:0c:fd:e1:8a:6d:c9:87:1a:45:c4:d9:3d:b5:7b:
         19:67:3c:d9:4d:bb:20:04:50:a0:4d:24:8a:87:55:fa:6f:21:
         c3:94:ab:d3:ad:02:c6:cd:04:c1:a5:92:02:d7:06:fb:13:57:
         86:0c:46:1e:ae:1c:a6:d3:77:c9:16:24:b9:ab:0e:4f:df:c4:
         41:72:26:9d:a4:23:6e:1b:53:00:97:0a:34:48:04:74:bd:4a:
         07:0e:3b:b8:69:ef:db:8d:14:c4:5d:21:6d:ec:1a:63:9e:d0:
         19:16:44:27:46:06:f3:c9:c9:cd:0c:4c:f8:fd:6f:b0:9e:58:
         b4:32:77:a5:e5:0d:f8:a7:6b:92:1e:27:26:3f:cb:74:c7:55:
         90:88:69:37:c6:a9:6b:f9:92:c8:73:0c:0b:63:4e:e2:c0:30:
         ff:ad:65:49:18:64:aa:99:18:3b:ef:f1:03:b9:dc:a2:6c:15:
         0f:b0:ac:4c:ac:14:96:26:03:a0:4e:5d:d2:ed:cc:38:06:97:
         8e:ca:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 00:19:07 2024 by rpki-client on console-ams.rpki-client.org