Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3136382e39302e32342e302f32322d3233203d3e20323633333231.roa
File:                     3136382e39302e32342e302f32322d3233203d3e20323633333231.roa (raw, json)
Hash identifier:          5nkDa8LWpPE+aSOu5V88LgkG84l67n4hOEuoiFFYJTo=
Subject key identifier:   77:DB:46:4D:FF:BF:20:85:B7:83:6B:1C:60:E3:90:3A:80:F2:87:2F
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       525E024A3DD4F6F9C4DDEC697202AEE76042FDFD
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3136382e39302e32342e302f32322d3233203d3e20323633333231.roa
Signing time:             Thu 04 Apr 2024 05:23:23 +0000
ROA not before:           Thu 04 Apr 2024 05:18:23 +0000
ROA not after:            Thu 03 Apr 2025 05:23:23 +0000
asID:                     263321
IP address blocks:        168.90.24.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 11:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5e:02:4a:3d:d4:f6:f9:c4:dd:ec:69:72:02:ae:e7:60:42:fd:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Apr  4 05:18:23 2024 GMT
            Not After : Apr  3 05:23:23 2025 GMT
        Subject: CN=77DB464DFFBF2085B7836B1C60E3903A80F2872F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:31:da:33:46:14:69:73:43:b9:db:dc:e5:5c:
                    c5:1e:89:67:76:62:a8:86:22:b1:bd:15:ca:93:b7:
                    dc:86:5c:62:ff:50:72:46:c4:fd:f4:01:d9:b1:41:
                    66:32:d9:37:75:37:e0:28:8b:6f:a5:92:b9:4d:7e:
                    52:ab:e6:03:1f:d3:73:00:99:c9:4c:62:64:43:0f:
                    65:3c:dd:d0:7a:43:4a:ee:59:a4:4f:82:f4:73:5a:
                    36:06:2c:c8:70:1c:13:45:cd:ba:4c:93:2b:17:ab:
                    22:b0:ad:99:df:3a:6d:21:e1:04:d9:f4:b3:b6:c9:
                    fd:a2:2d:a0:ad:3f:c6:82:fd:7a:a1:8f:44:01:12:
                    fe:5b:08:ea:92:a6:46:19:49:79:cb:15:c8:1d:6d:
                    45:04:fa:74:79:bf:98:3d:30:12:bc:67:52:9c:8b:
                    2a:0c:08:79:fd:c7:95:5c:99:f9:f0:5b:57:12:4a:
                    c9:a1:f5:d1:ed:cc:9d:fb:08:df:8e:ef:c9:df:12:
                    4b:dd:7e:ae:6a:27:57:2e:f3:3b:ef:33:6b:05:ae:
                    01:f3:e8:9d:55:c6:6f:b2:9e:6d:e9:52:e7:f5:a1:
                    ce:57:1f:71:9f:53:d3:7c:16:40:28:5f:aa:b3:23:
                    63:3c:c6:d4:43:da:3b:e3:35:df:09:7c:89:20:1a:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DB:46:4D:FF:BF:20:85:B7:83:6B:1C:60:E3:90:3A:80:F2:87:2F
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3136382e39302e32342e302f32322d3233203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:c7:77:28:5e:03:95:e5:f6:52:f0:bc:f1:f6:8d:16:ab:07:
         c3:6f:ca:61:f0:ca:ad:39:b9:4b:50:53:eb:15:61:89:ce:4c:
         e1:63:78:a4:a0:54:f7:95:7f:36:e9:f9:fb:84:a6:75:c0:e2:
         2d:a1:d5:32:da:0c:68:ca:a2:9e:0d:15:a6:75:45:e6:70:1b:
         df:6a:15:3f:00:44:89:e6:4e:f6:23:b5:ec:4a:0d:ba:2c:c1:
         67:e2:23:f4:f8:8e:79:d2:75:c0:d3:bf:6a:5e:d3:90:0b:ac:
         51:e7:25:d3:e5:e1:c9:8b:f6:f1:9c:1a:d6:95:96:18:86:c2:
         85:17:dc:28:24:0b:d2:89:2e:35:b8:b0:05:ee:43:af:ff:88:
         b7:d2:09:2d:c2:b1:b2:d0:67:27:9c:76:87:fe:42:a2:b0:d5:
         a0:ec:45:06:16:00:c8:09:18:9d:e6:e4:6c:f6:31:df:5f:35:
         0e:b8:d6:e3:b5:ac:da:f3:22:fa:a8:70:49:60:ec:92:65:cb:
         ce:61:47:a0:f3:b9:94:da:a5:41:6f:8f:59:5f:ed:a7:38:f4:
         29:2e:da:ae:dc:48:7b:6a:08:9f:19:42:6e:23:4c:10:f0:98:
         99:a0:bb:19:29:39:cf:5f:08:1e:92:3a:65:b4:34:3d:8d:5e:
         5e:ca:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 13:15:27 2024 by rpki-client on console-fra.rpki-client.org