Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/3138372e31362e3132382e302f32302d3332203d3e203238323534.roa
File:                     3138372e31362e3132382e302f32302d3332203d3e203238323534.roa (raw, json)
Hash identifier:          9rIH3u52wEedLMzWqSEZXhU3eVkKwuBTSjl7yjcI7Vs=
Subject key identifier:   CA:34:D0:0E:4D:96:9A:5C:BF:E3:5D:8B:F5:60:AB:33:2A:F5:1A:FE
Certificate issuer:       /CN=9151E1075CB8CA7782315512A362C4E53B9BDB13
Certificate serial:       296D5BA9A9441539CB793C4BCA7B7E7EC21279E1
Authority key identifier: 91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/3138372e31362e3132382e302f32302d3332203d3e203238323534.roa
Signing time:             Tue 14 May 2024 13:07:11 +0000
ROA not before:           Tue 14 May 2024 13:02:11 +0000
ROA not after:            Tue 13 May 2025 13:07:11 +0000
asID:                     28254
IP address blocks:        187.16.128.0/20 maxlen: 32

Validation:               Failed, certificate revoked on Thu 16 May 2024 18:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6d:5b:a9:a9:44:15:39:cb:79:3c:4b:ca:7b:7e:7e:c2:12:79:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9151E1075CB8CA7782315512A362C4E53B9BDB13
        Validity
            Not Before: May 14 13:02:11 2024 GMT
            Not After : May 13 13:07:11 2025 GMT
        Subject: CN=CA34D00E4D969A5CBFE35D8BF560AB332AF51AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:70:b3:a8:34:72:ef:28:48:44:bb:8c:fc:
                    79:85:40:24:d1:f6:41:57:36:8a:ec:5e:85:3d:68:
                    3f:79:5d:4c:d7:23:86:2b:0c:d9:9d:fd:fd:aa:37:
                    9b:a4:d1:24:b2:8a:ed:ee:87:fb:b0:91:a9:5a:c7:
                    67:8d:38:f4:b3:8c:73:22:2b:38:19:93:00:3b:24:
                    09:4a:0f:ed:9d:60:81:42:b1:81:fd:b3:99:7e:c2:
                    6f:ef:38:8b:f0:9f:d8:5b:d6:a9:52:a7:76:c1:bd:
                    11:d0:f3:b0:aa:b4:17:77:a9:9e:16:17:03:43:1e:
                    82:5c:13:4c:7f:c7:d7:ff:60:d4:9d:e7:7d:ee:7d:
                    12:eb:80:6a:f1:fe:22:fa:7f:ef:8c:88:8f:9e:23:
                    ff:18:8d:b1:c4:73:0e:54:af:19:86:ea:ef:d7:6c:
                    a1:81:1b:b1:4a:15:3f:f8:d1:3b:6f:ca:60:0c:a5:
                    dc:ee:00:37:9c:44:06:e0:8b:ed:a0:70:90:a3:f6:
                    d8:9c:c8:25:39:e8:ab:de:04:c4:26:57:9c:bd:ae:
                    df:8e:07:1a:62:95:04:bc:6e:4e:93:ce:37:83:0a:
                    41:d8:4f:db:c7:14:b5:29:bb:e7:4d:cf:04:2b:82:
                    11:a2:3f:bb:c7:8b:e7:f6:d6:ed:d7:1f:69:ff:7e:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:34:D0:0E:4D:96:9A:5C:BF:E3:5D:8B:F5:60:AB:33:2A:F5:1A:FE
            X509v3 Authority Key Identifier:
                keyid:91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/3138372e31362e3132382e302f32302d3332203d3e203238323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:2c:ab:56:d4:aa:6d:60:38:35:d4:a1:40:45:74:99:f0:49:
         35:01:95:52:34:3a:5f:d2:9e:6a:f4:1a:11:8f:09:a3:c4:54:
         69:b1:ec:cf:7c:c4:0c:9c:6d:fa:f7:7d:d6:0e:09:ac:21:c6:
         03:0e:07:43:4a:da:6e:67:00:ae:92:db:c4:30:63:20:38:0b:
         c6:eb:75:d9:14:32:1c:38:d6:2f:b3:95:ca:c6:de:70:f8:1b:
         a6:24:82:c4:4b:4d:15:a0:05:09:ff:1c:a4:57:c4:50:3b:d7:
         ad:83:21:cc:c8:fa:71:c7:59:21:a0:69:fc:cc:24:25:6b:03:
         36:ea:d5:38:e5:d7:29:86:86:ee:07:d4:71:79:e0:2f:d2:87:
         53:63:0b:9b:b3:8f:75:da:fa:81:8f:48:e9:03:1c:c5:82:7b:
         9a:3a:60:e7:44:56:28:26:4b:70:34:7c:1b:2b:68:43:9a:23:
         20:9f:e7:68:b2:bb:5c:9c:a9:9a:70:25:f9:8f:c2:7a:8a:18:
         27:42:78:cd:bb:6b:25:df:5d:c0:ff:ce:49:bc:f4:65:8b:d7:
         b2:7c:6c:a6:47:c5:75:80:1e:d5:52:68:25:da:2c:5a:58:81:
         47:c5:3e:fe:a8:e9:86:47:95:d5:29:e7:34:a6:64:21:4c:d8:
         77:a3:de:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org