Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/3138392e3132362e31312e302f32342d3234203d3e20323730333938.roa
File:                     3138392e3132362e31312e302f32342d3234203d3e20323730333938.roa (raw, json)
Hash identifier:          yIJm3CDXN/L4kWct85WoAAOEsIkIbzCtK+B6boaiWcU=
Subject key identifier:   E4:B0:9D:EA:1A:E8:F0:AF:60:A5:D3:78:EB:EA:4D:2F:9D:DB:4B:48
Certificate issuer:       /CN=ABBF81B9971F90A3BFCC0E06899CBAED391D0740
Certificate serial:       2DE52670D9DB642A8F8DC20AB2A923077109EB65
Authority key identifier: AB:BF:81:B9:97:1F:90:A3:BF:CC:0E:06:89:9C:BA:ED:39:1D:07:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABBF81B9971F90A3BFCC0E06899CBAED391D0740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/3138392e3132362e31312e302f32342d3234203d3e20323730333938.roa
Signing time:             Mon 12 Dec 2022 18:27:16 +0000
ROA not before:           Mon 12 Dec 2022 18:22:16 +0000
ROA not after:            Mon 11 Dec 2023 18:27:16 +0000
asID:                     270398
IP address blocks:        189.126.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e5:26:70:d9:db:64:2a:8f:8d:c2:0a:b2:a9:23:07:71:09:eb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABBF81B9971F90A3BFCC0E06899CBAED391D0740
        Validity
            Not Before: Dec 12 18:22:16 2022 GMT
            Not After : Dec 11 18:27:16 2023 GMT
        Subject: CN=E4B09DEA1AE8F0AF60A5D378EBEA4D2F9DDB4B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5c:63:1d:db:ca:0b:da:5b:e0:1a:3a:43:bd:
                    80:36:bf:ae:15:81:d9:a7:f3:27:db:96:5d:47:cd:
                    a2:fc:2b:c1:5b:ed:92:62:47:0f:c5:ed:90:fd:39:
                    1f:23:0b:eb:9d:ed:f6:79:c5:85:94:6d:b9:a5:08:
                    1d:bc:1c:d9:f5:e8:b5:64:e7:51:cd:75:b2:b3:9d:
                    27:08:71:30:97:45:0b:e9:a5:e5:e2:e0:59:1b:7a:
                    06:8f:e2:06:f6:17:4f:cc:85:25:26:0e:ba:cd:67:
                    96:c9:44:f0:2f:d5:5b:cb:18:1b:fb:e7:c8:95:10:
                    eb:5d:bc:51:0f:7b:ff:3c:de:2f:55:07:a9:dc:12:
                    e6:a4:ee:07:86:b9:a0:92:90:10:34:0b:65:a4:94:
                    1f:7d:2b:d0:f4:71:6c:d0:49:06:41:05:ec:ef:21:
                    ac:f5:3e:b6:01:35:30:1d:3e:cb:7f:56:c7:5b:52:
                    1b:31:ba:ed:a9:05:dd:cb:7f:78:87:12:32:15:79:
                    9b:14:e1:ab:6c:37:39:28:26:66:f1:e4:2f:52:62:
                    65:ae:ec:c5:96:35:03:80:e1:51:6e:8f:17:4e:23:
                    07:4a:fd:0f:85:e4:58:57:10:d4:fb:06:ac:9a:4a:
                    30:54:3d:a9:e8:db:aa:8f:eb:d4:a0:02:de:cb:e1:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B0:9D:EA:1A:E8:F0:AF:60:A5:D3:78:EB:EA:4D:2F:9D:DB:4B:48
            X509v3 Authority Key Identifier:
                keyid:AB:BF:81:B9:97:1F:90:A3:BF:CC:0E:06:89:9C:BA:ED:39:1D:07:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/ABBF81B9971F90A3BFCC0E06899CBAED391D0740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABBF81B9971F90A3BFCC0E06899CBAED391D0740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/3138392e3132362e31312e302f32342d3234203d3e20323730333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:59:8a:db:d1:e3:0f:00:41:71:2e:be:0d:7e:61:16:e8:
         0e:05:e8:86:39:33:b8:50:82:bb:6c:e5:34:f7:39:93:5b:95:
         0b:f8:62:a6:76:a0:3f:25:2f:5e:2e:81:a7:91:23:59:30:81:
         da:bc:81:67:c9:9e:20:8c:47:25:d6:22:4f:63:49:ec:f8:e0:
         20:19:02:b3:a4:fd:7e:67:58:b4:e1:12:07:9d:27:3a:b0:6b:
         10:34:86:d5:c4:cb:6b:ea:0a:ea:18:93:51:91:66:5e:73:4e:
         9f:40:39:17:20:05:cd:46:1a:0b:1a:de:44:e2:4d:b4:be:57:
         a2:c6:cb:6c:9f:93:90:57:dd:50:4a:b8:65:b9:e0:17:0a:70:
         2c:c1:b8:35:f6:1d:ba:04:a1:1f:86:1a:09:1e:5d:16:74:89:
         b5:25:3c:35:59:ff:45:50:5e:2f:fd:d2:f7:2a:cf:0f:c8:98:
         e9:8d:5b:f8:bf:b8:2a:35:72:9c:40:1e:e4:c1:90:21:7f:7b:
         9d:96:9c:42:5d:c9:57:a7:5e:69:f0:51:bc:f5:a3:8a:b2:28:
         60:5c:71:5c:5d:a7:05:ec:a6:57:8a:6b:1b:57:5e:c6:96:16:
         ec:ea:26:d0:92:c1:1c:4a:93:d2:6c:ce:80:4a:79:6f:2c:59:
         29:7b:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:08 2023 by rpki-client on console-fra.rpki-client.org