Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3232203d3e203532383938.roa
File:                     3136382e3232372e3135362e302f32322d3232203d3e203532383938.roa (raw, json)
Hash identifier:          6C4IZXNRhfv2MgVY1IO7+JOXfYJAQrNOnuCRDD5El2I=
Subject key identifier:   8B:A2:2C:EE:CC:C0:FF:99:3B:57:91:6F:E5:53:E1:F1:B7:23:85:68
Certificate issuer:       /CN=B9282FDD0A2B602C0F1723614F0309733B8C6B71
Certificate serial:       5E8F337D1546C224260C2F4F51432982747A071F
Authority key identifier: B9:28:2F:DD:0A:2B:60:2C:0F:17:23:61:4F:03:09:73:3B:8C:6B:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9282FDD0A2B602C0F1723614F0309733B8C6B71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3232203d3e203532383938.roa
Signing time:             Thu 29 Aug 2024 14:51:01 +0000
ROA not before:           Thu 29 Aug 2024 14:46:01 +0000
ROA not after:            Thu 28 Aug 2025 14:51:01 +0000
asID:                     52898
IP address blocks:        168.227.156.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 20:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8f:33:7d:15:46:c2:24:26:0c:2f:4f:51:43:29:82:74:7a:07:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9282FDD0A2B602C0F1723614F0309733B8C6B71
        Validity
            Not Before: Aug 29 14:46:01 2024 GMT
            Not After : Aug 28 14:51:01 2025 GMT
        Subject: CN=8BA22CEECCC0FF993B57916FE553E1F1B7238568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:8b:f0:e9:4c:c2:ff:98:04:21:e9:df:39:
                    a3:6e:7c:62:2d:e3:72:bc:03:b9:9c:03:96:82:0f:
                    5a:4a:99:24:51:bc:3e:d6:10:88:4e:93:cb:cf:e0:
                    61:1c:e6:48:3b:19:91:89:41:17:f9:c6:7f:1d:f1:
                    fe:96:ad:4d:69:75:28:45:fb:36:fe:1f:b9:68:2f:
                    64:68:30:fa:7c:b3:d7:03:ed:73:4e:2d:51:af:06:
                    50:f2:70:bb:66:7e:2e:53:20:42:ba:06:a8:88:61:
                    73:42:0f:2d:b9:e7:82:9a:b1:a8:ce:b2:92:33:e0:
                    6d:12:48:26:70:17:02:58:32:83:a9:cf:72:06:71:
                    cf:40:a8:43:d8:ba:26:7f:d6:6c:98:89:ef:6b:df:
                    3f:8f:4f:ae:e5:f0:1d:bd:33:0c:27:b1:2d:63:9b:
                    c5:d8:3c:ee:64:43:03:c4:82:96:df:34:69:cf:8f:
                    86:b6:7c:ca:99:bc:91:87:09:93:67:20:4c:a3:74:
                    88:a2:d1:53:83:ec:b4:c0:3d:1c:8f:d4:fd:da:e7:
                    bc:04:fa:21:18:f1:d2:79:90:0d:de:76:75:17:5a:
                    8f:58:4e:ed:8d:bc:d3:21:fe:70:5c:e4:a5:6f:57:
                    dd:7d:18:17:98:b9:11:51:40:f5:ab:c5:6f:a8:4a:
                    24:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A2:2C:EE:CC:C0:FF:99:3B:57:91:6F:E5:53:E1:F1:B7:23:85:68
            X509v3 Authority Key Identifier:
                keyid:B9:28:2F:DD:0A:2B:60:2C:0F:17:23:61:4F:03:09:73:3B:8C:6B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/B9282FDD0A2B602C0F1723614F0309733B8C6B71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9282FDD0A2B602C0F1723614F0309733B8C6B71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3232203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:30:e7:7d:bc:1e:3d:68:e8:61:87:15:ef:93:59:2f:45:61:
         35:60:47:c6:a9:fe:4a:0d:45:c4:0b:1d:34:e7:79:48:78:81:
         de:e5:00:f6:ed:5b:3c:fb:4d:74:8f:3c:ed:b7:bf:56:ed:13:
         66:ae:e1:20:e1:ad:67:16:57:d4:c7:55:a1:fb:2a:4b:b0:43:
         59:62:1d:6a:41:d1:66:cd:43:e6:26:91:64:1d:98:48:16:2f:
         ba:dd:a7:c2:b4:e4:e2:38:e5:27:42:5b:b5:db:82:c2:78:85:
         5a:a3:9c:59:9f:33:30:75:4b:e1:3d:6b:86:97:17:f7:68:df:
         79:b7:be:b9:02:b7:20:63:43:13:65:47:68:25:10:df:2f:84:
         1f:5d:ed:ec:84:18:33:ab:c2:22:93:71:72:cf:10:e0:be:fa:
         a2:7b:57:bb:f0:80:8e:ee:cf:33:a4:52:30:e9:69:e0:d9:f5:
         97:e7:87:fe:d6:8b:eb:9c:5a:de:5d:15:12:27:22:61:30:89:
         c2:44:c1:d1:ca:19:a9:2f:ff:16:54:76:5f:e5:b0:b0:f3:0b:
         64:38:98:75:31:fa:89:59:a8:9d:58:2e:26:ee:ea:0a:05:81:
         ec:97:5a:21:99:2f:35:ce:c8:c9:47:06:14:42:66:22:f6:1b:
         aa:dc:9b:6e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXo8zfRVGwiQmDC9PUUMpgnR6Bx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkyODJGREQwQTJCNjAyQzBGMTcyMzYxNEYwMzA5NzMz
QjhDNkI3MTAeFw0yNDA4MjkxNDQ2MDFaFw0yNTA4MjgxNDUxMDFaMDMxMTAvBgNV
BAMTKDhCQTIyQ0VFQ0NDMEZGOTkzQjU3OTE2RkU1NTNFMUYxQjcyMzg1NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPoovw6UzC/5gEIenfOaNufGIt
43K8A7mcA5aCD1pKmSRRvD7WEIhOk8vP4GEc5kg7GZGJQRf5xn8d8f6WrU1pdShF
+zb+H7loL2RoMPp8s9cD7XNOLVGvBlDycLtmfi5TIEK6BqiIYXNCDy2554KasajO
spIz4G0SSCZwFwJYMoOpz3IGcc9AqEPYuiZ/1myYie9r3z+PT67l8B29MwwnsS1j
m8XYPO5kQwPEgpbfNGnPj4a2fMqZvJGHCZNnIEyjdIii0VOD7LTAPRyP1P3a57wE
+iEY8dJ5kA3ednUXWo9YTu2NvNMh/nBc5KVvV919GBeYuRFRQPWrxW+oSiRtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUi6Is7szA/5k7V5Fv5VPh8bcjhWgwHwYDVR0j
BBgwFoAUuSgv3QorYCwPFyNhTwMJczuMa3EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FuaEdYY0diZTdtekhTZFhTMVoxZjRwaGNTQ0V6UFJIUm9zV1FxZWV4
cTQvMC9COTI4MkZERDBBMkI2MDJDMEYxNzIzNjE0RjAzMDk3MzNCOEM2QjcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MjgyRkREMEEyQjYwMkMw
RjE3MjM2MTRGMDMwOTczM0I4QzZCNzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNhbmhHWGNHYmU3bXpIU2RYUzFaMWY0cGhjU0NFelBSSFJvc1dRcWVleHE0LzAv
MzEzNjM4MmUzMjMyMzcyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzODM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKo45wwDQYJKoZIhvcNAQELBQADggEBAJkw5328
Hj1o6GGHFe+TWS9FYTVgR8ap/koNRcQLHTTneUh4gd7lAPbtWzz7TXSPPO23v1bt
E2au4SDhrWcWV9THVaH7KkuwQ1liHWpB0WbNQ+YmkWQdmEgWL7rdp8K05OI45SdC
W7XbgsJ4hVqjnFmfMzB1S+E9a4aXF/do33m3vrkCtyBjQxNlR2glEN8vhB9d7eyE
GDOrwiKTcXLPEOC++qJ7V7vwgI7uzzOkUjDpaeDZ9Zfnh/7Wi+ucWt5dFRInImEw
icJEwdHKGakv/xZUdl/lsLDzC2Q4mHUx+olZqJ1YLibu6goFgeyXWiGZLzXOyMlH
BhRCZiL2G6rcm24=
-----END CERTIFICATE-----
Generated at Thu Aug 29 21:56:07 2024 by rpki-client on console-ams.rpki-client.org