Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38362e302f32342d3234203d3e203238333036.roa
File:                     3138372e39342e38362e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          kOLy8C4kfq8UemXgJKkNTdtQvGFZ6ZKaTECoIzo6Cfk=
Subject key identifier:   07:C1:83:64:64:EC:C0:FB:A3:8E:05:6C:32:97:34:FF:74:19:DA:5B
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       537B1F5C9EF0CFE7AACCA22E6BEB3E11A139B3BA
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38362e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:23 +0000
ROA not before:           Tue 25 Jun 2024 15:16:23 +0000
ROA not after:            Tue 24 Jun 2025 15:21:23 +0000
asID:                     28306
IP address blocks:        187.94.86.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 19:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7b:1f:5c:9e:f0:cf:e7:aa:cc:a2:2e:6b:eb:3e:11:a1:39:b3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:23 2024 GMT
            Not After : Jun 24 15:21:23 2025 GMT
        Subject: CN=07C1836464ECC0FBA38E056C329734FF7419DA5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:e5:80:5e:f1:13:be:28:69:f9:6f:b3:70:
                    07:b5:86:ed:6e:5d:ac:24:d8:40:cf:28:ad:ea:2b:
                    b3:a9:54:4b:19:41:cb:5b:47:20:95:08:f5:9d:5c:
                    ee:7b:17:cb:f5:59:7a:c5:eb:2a:ae:56:cd:cd:67:
                    36:34:5d:2d:8c:6b:1a:a6:76:40:5a:50:a3:a5:07:
                    38:14:7e:42:b3:d5:96:d3:65:0f:5b:da:51:63:fd:
                    ca:17:0b:fb:1e:e8:a4:e6:5f:87:51:2b:5e:c2:c7:
                    14:71:9f:52:b2:e5:6f:1d:5c:41:7e:bb:7e:db:f0:
                    2d:2c:a3:05:fc:17:48:7c:a8:20:ce:47:24:c2:81:
                    2c:b0:f7:9c:3b:54:6f:8e:59:8e:3b:a8:8e:c5:98:
                    bd:4b:3c:9b:10:45:d2:97:25:d9:69:ed:51:82:71:
                    e2:54:e4:56:70:36:6a:0a:58:f8:1b:13:13:45:00:
                    ef:06:07:e1:5c:ed:80:9d:db:e5:6a:1d:9f:47:39:
                    d2:11:88:99:07:e9:7b:a1:d6:72:2a:31:8d:11:f4:
                    61:8f:0a:1e:8d:56:b6:0b:70:72:d8:1d:a5:7c:3c:
                    ba:f9:3f:49:b0:05:34:00:78:e4:54:68:64:57:3c:
                    6c:20:57:9f:a5:cc:77:61:4c:8a:06:de:36:73:a0:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C1:83:64:64:EC:C0:FB:A3:8E:05:6C:32:97:34:FF:74:19:DA:5B
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38362e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e6:79:13:f6:96:a2:7d:43:5f:bd:69:ca:1f:6b:e9:9f:54:
         9f:77:11:f0:7e:ca:14:5f:c7:1c:50:25:aa:ee:86:c6:97:67:
         e9:9e:15:ee:a8:a1:f3:5c:45:6d:cc:a1:8e:bc:1b:2c:40:9e:
         81:01:97:b7:b6:94:08:8c:d3:ce:89:ed:b8:9a:a2:02:f8:38:
         15:ae:07:14:7f:d7:ce:f3:e2:da:d9:6f:6e:3f:04:26:5e:7b:
         b6:e7:93:58:fb:fe:dd:24:c2:f0:84:2b:78:d0:62:62:4c:b1:
         22:88:50:df:f9:22:04:f7:c5:68:50:99:d8:0e:78:58:2c:e6:
         c2:05:78:7a:71:60:cc:5a:2e:f7:35:7a:0e:29:61:09:56:64:
         d5:3c:d7:3c:b0:41:db:b4:b2:da:86:03:b6:a8:b4:9d:a1:5b:
         b3:e8:39:2b:47:7e:3f:07:ee:8b:cb:82:25:1c:71:05:33:03:
         77:7a:4c:99:cc:1d:bc:07:e1:e7:25:6d:c5:b0:41:de:18:6a:
         24:f2:0d:c3:d8:ee:8b:61:c1:42:50:0a:ab:68:8b:c0:be:b8:
         de:68:91:4a:86:d1:61:4c:f6:97:7c:6f:58:74:9b:fa:5d:61:
         84:84:91:1e:f3:2a:f7:c7:dd:c2:d5:68:53:1c:f3:68:1f:60:
         0b:35:1d:9e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUU3sfXJ7wz+eqzKIua+s+EaE5s7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQyOTQ0MDFENUNCM0U1ODk1RjZGNjhBRUM1RTQxNjNB
RUQwRjMyNDAeFw0yNDA2MjUxNTE2MjNaFw0yNTA2MjQxNTIxMjNaMDMxMTAvBgNV
BAMTKDA3QzE4MzY0NjRFQ0MwRkJBMzhFMDU2QzMyOTczNEZGNzQxOURBNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZoeWAXvETvihp+W+zcAe1hu1u
Xawk2EDPKK3qK7OpVEsZQctbRyCVCPWdXO57F8v1WXrF6yquVs3NZzY0XS2Maxqm
dkBaUKOlBzgUfkKz1ZbTZQ9b2lFj/coXC/se6KTmX4dRK17CxxRxn1Ky5W8dXEF+
u37b8C0sowX8F0h8qCDORyTCgSyw95w7VG+OWY47qI7FmL1LPJsQRdKXJdlp7VGC
ceJU5FZwNmoKWPgbExNFAO8GB+Fc7YCd2+VqHZ9HOdIRiJkH6Xuh1nIqMY0R9GGP
Ch6NVrYLcHLYHaV8PLr5P0mwBTQAeORUaGRXPGwgV5+lzHdhTIoG3jZzoBLNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUB8GDZGTswPujjgVsMpc0/3QZ2lswHwYDVR0j
BBgwFoAUlClEAdXLPliV9vaK7F5BY67Q8yQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O
dWcvMC85NDI5NDQwMUQ1Q0IzRTU4OTVGNkY2OEFFQzVFNDE2M0FFRDBGMzI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0Mjk0NDAxRDVDQjNFNTg5
NUY2RjY4QUVDNUU0MTYzQUVEMEYzMjQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv
MzEzODM3MmUzOTM0MmUzODM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMz
MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALteVjANBgkqhkiG9w0BAQsFAAOCAQEAKeZ5E/aWon1D
X71pyh9r6Z9Un3cR8H7KFF/HHFAlqu6Gxpdn6Z4V7qih81xFbcyhjrwbLECegQGX
t7aUCIzTzontuJqiAvg4Fa4HFH/XzvPi2tlvbj8EJl57tueTWPv+3STC8IQreNBi
YkyxIohQ3/kiBPfFaFCZ2A54WCzmwgV4enFgzFou9zV6DilhCVZk1TzXPLBB27Sy
2oYDtqi0naFbs+g5K0d+Pwfui8uCJRxxBTMDd3pMmcwdvAfh5yVtxbBB3hhqJPIN
w9jui2HBQlAKq2iLwL643miRSobRYUz2l3xvWHSb+l1hhISRHvMq98fdwtVoUxzz
aB9gCzUdng==
-----END CERTIFICATE-----
Generated at Tue Nov 5 00:13:35 2024 by rpki-client on console-ams.rpki-client.org