Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38352e302f32342d3234203d3e203238333036.roa
File:                     3138372e39342e38352e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          zbt3rElxvfghHhFwC6QZTUQsm5FxMMfjXmkrCzCkuHA=
Subject key identifier:   EC:F0:C0:88:C6:BC:F9:18:61:7B:21:6A:4F:A0:9D:5A:E4:6A:F7:CC
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       427248E41B36F9CCBD607C45DA5C6E5B17E5A718
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38352e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:23 +0000
ROA not before:           Tue 25 Jun 2024 15:16:23 +0000
ROA not after:            Tue 24 Jun 2025 15:21:23 +0000
asID:                     28306
IP address blocks:        187.94.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 19:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:72:48:e4:1b:36:f9:cc:bd:60:7c:45:da:5c:6e:5b:17:e5:a7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:23 2024 GMT
            Not After : Jun 24 15:21:23 2025 GMT
        Subject: CN=ECF0C088C6BCF918617B216A4FA09D5AE46AF7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:7f:18:a4:8f:9f:7c:c2:83:10:7c:cb:6a:
                    ce:37:ec:04:cf:a8:7d:f7:87:e7:49:f0:26:1d:2f:
                    e6:95:6c:cc:8f:77:87:ab:dd:b9:eb:6f:04:84:b8:
                    53:d3:d9:eb:34:11:ce:51:6b:87:cc:27:61:b1:9c:
                    0a:aa:13:60:4c:2f:e8:ae:e7:2d:fc:c7:7e:f8:e5:
                    33:ca:52:85:77:2b:fb:a1:89:03:68:46:4d:af:99:
                    d9:99:03:4d:09:1f:80:dc:c6:99:17:61:50:04:ca:
                    21:22:7b:f1:80:e4:a0:12:22:2c:ed:72:dd:6e:4c:
                    e3:8a:6e:24:1f:bf:b1:64:27:b8:db:7e:3a:4d:db:
                    de:0d:9b:d4:11:98:b4:4a:f5:02:e5:e0:70:1a:e1:
                    31:d9:5c:eb:b7:48:ab:81:f8:c9:d4:ab:e1:81:5e:
                    d2:15:74:a1:40:fa:f2:61:e7:b1:ff:4c:95:15:d5:
                    65:78:f8:b8:f4:7f:01:a5:bb:63:7c:5c:0a:b2:0b:
                    e8:01:db:90:83:c1:a7:73:ca:dd:a2:ed:62:24:34:
                    5f:f6:28:57:df:d0:71:35:2c:63:78:f6:c9:1b:07:
                    3f:48:73:a7:b7:06:0b:ca:b7:a6:7d:5c:44:e8:97:
                    ad:e6:63:be:d7:55:81:d9:d9:47:32:9a:aa:1a:8a:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F0:C0:88:C6:BC:F9:18:61:7B:21:6A:4F:A0:9D:5A:E4:6A:F7:CC
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38352e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:87:15:0c:0d:d4:49:38:3d:17:c0:c0:fe:71:43:5a:c9:
         3c:26:89:25:c9:d2:1b:de:eb:7e:ca:eb:15:97:fd:bc:55:b9:
         e6:37:67:6a:29:3b:ec:c1:8c:2e:a3:d0:c1:45:f5:d9:d5:11:
         d6:14:e9:c8:d6:51:30:d0:0b:ba:b6:73:83:40:31:b1:e4:d0:
         44:14:7f:a9:d0:77:13:16:46:01:2c:2d:9c:d2:46:41:ce:9d:
         c8:b3:23:63:56:53:11:bd:45:77:ec:aa:6a:a5:c4:4f:87:9f:
         2f:c2:67:a7:dd:07:dc:20:41:b8:2f:40:c9:da:83:5d:a3:1a:
         ed:37:2d:44:63:46:bb:cd:92:32:d8:e4:bc:46:7b:c0:8d:a3:
         a7:fa:d0:88:2a:72:6b:63:13:2b:45:80:a8:de:42:08:51:63:
         4c:05:47:2e:94:c9:cb:94:8c:b6:57:c2:9a:c4:c0:66:a4:61:
         0a:9d:42:d1:7f:d3:f3:fb:8e:42:68:c7:ae:3b:ad:bc:4b:dd:
         19:04:66:2e:54:a7:a2:13:64:99:b2:9f:43:45:76:36:76:7f:
         86:e0:0f:b9:be:4b:47:ec:4c:a5:cc:72:e9:8b:c0:f9:94:6d:
         fc:c0:a0:a7:5c:2c:f0:7c:8b:5a:30:41:d0:0b:70:8e:ca:fb:
         18:c8:7c:06
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQnJI5Bs2+cy9YHxF2lxuWxflpxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQyOTQ0MDFENUNCM0U1ODk1RjZGNjhBRUM1RTQxNjNB
RUQwRjMyNDAeFw0yNDA2MjUxNTE2MjNaFw0yNTA2MjQxNTIxMjNaMDMxMTAvBgNV
BAMTKEVDRjBDMDg4QzZCQ0Y5MTg2MTdCMjE2QTRGQTA5RDVBRTQ2QUY3Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3X8YpI+ffMKDEHzLas437ATP
qH33h+dJ8CYdL+aVbMyPd4er3bnrbwSEuFPT2es0Ec5Ra4fMJ2GxnAqqE2BML+iu
5y38x3745TPKUoV3K/uhiQNoRk2vmdmZA00JH4DcxpkXYVAEyiEie/GA5KASIizt
ct1uTOOKbiQfv7FkJ7jbfjpN294Nm9QRmLRK9QLl4HAa4THZXOu3SKuB+MnUq+GB
XtIVdKFA+vJh57H/TJUV1WV4+Lj0fwGlu2N8XAqyC+gB25CDwadzyt2i7WIkNF/2
KFff0HE1LGN49skbBz9Ic6e3BgvKt6Z9XETol63mY77XVYHZ2Ucymqoaig4vAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU7PDAiMa8+RhheyFqT6CdWuRq98wwHwYDVR0j
BBgwFoAUlClEAdXLPliV9vaK7F5BY67Q8yQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O
dWcvMC85NDI5NDQwMUQ1Q0IzRTU4OTVGNkY2OEFFQzVFNDE2M0FFRDBGMzI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0Mjk0NDAxRDVDQjNFNTg5
NUY2RjY4QUVDNUU0MTYzQUVEMEYzMjQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv
MzEzODM3MmUzOTM0MmUzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMz
MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALteVTANBgkqhkiG9w0BAQsFAAOCAQEAgNCHFQwN1Ek4
PRfAwP5xQ1rJPCaJJcnSG97rfsrrFZf9vFW55jdnaik77MGMLqPQwUX12dUR1hTp
yNZRMNALurZzg0AxseTQRBR/qdB3ExZGASwtnNJGQc6dyLMjY1ZTEb1Fd+yqaqXE
T4efL8Jnp90H3CBBuC9AydqDXaMa7TctRGNGu82SMtjkvEZ7wI2jp/rQiCpya2MT
K0WAqN5CCFFjTAVHLpTJy5SMtlfCmsTAZqRhCp1C0X/T8/uOQmjHrjutvEvdGQRm
LlSnohNkmbKfQ0V2NnZ/huAPub5LR+xMpcxy6YvA+ZRt/MCgp1ws8HyLWjBB0Atw
jsr7GMh8Bg==
-----END CERTIFICATE-----
Generated at Tue Nov 5 00:13:35 2024 by rpki-client on console-ams.rpki-client.org