Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38372e302f32342d3234203d3e203238333036.roa
File:                     3138372e39342e38372e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          ysp8zH2xysC2AFTeyINrW5aJDAnG4oJLzAgCTIGkbeo=
Subject key identifier:   33:05:15:6E:34:F0:57:89:B6:37:E2:5C:E4:BC:C7:43:79:BF:4C:68
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       19159527F06CCBC0F22445DC41C7E11FB5C93AF7
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38372e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:20 +0000
ROA not before:           Tue 25 Jun 2024 15:16:20 +0000
ROA not after:            Tue 24 Jun 2025 15:21:20 +0000
asID:                     28306
IP address blocks:        187.94.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 19:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:15:95:27:f0:6c:cb:c0:f2:24:45:dc:41:c7:e1:1f:b5:c9:3a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:20 2024 GMT
            Not After : Jun 24 15:21:20 2025 GMT
        Subject: CN=3305156E34F05789B637E25CE4BCC74379BF4C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b8:79:3c:5e:90:69:fe:44:7b:40:51:e4:74:
                    60:9c:c2:80:ee:43:63:3c:0b:14:0b:b8:5f:3f:aa:
                    b2:46:cd:3d:88:27:9e:d1:01:6e:ff:b3:74:21:4a:
                    a8:62:6b:b3:87:46:90:60:3a:f5:e4:4d:0a:09:a6:
                    f4:a0:36:85:af:ed:15:4d:e7:6b:a5:c0:6f:89:77:
                    1f:06:86:48:83:fa:3c:26:68:95:4a:fe:e7:cb:0e:
                    cc:28:87:cc:bb:78:42:69:4f:b2:f2:25:36:5a:a0:
                    f9:10:63:5c:85:69:2e:1e:2d:d8:03:94:f0:b2:56:
                    8d:18:e1:37:9d:9b:32:0b:f2:65:3e:76:80:c7:33:
                    8c:ca:cd:5a:58:5f:19:86:0a:e4:df:84:c7:c2:08:
                    dd:bd:eb:48:fe:73:bf:dd:9e:d1:82:1d:a9:dc:31:
                    c8:50:dc:f4:f8:dd:d0:99:71:80:76:20:42:80:25:
                    a9:71:1c:05:d8:87:39:c0:00:dd:b8:18:b1:4e:8f:
                    7c:eb:97:fb:d0:5d:8c:0e:69:06:55:96:b2:c3:bd:
                    bf:42:d8:31:b6:4d:5f:bb:c8:d5:87:19:47:1b:df:
                    e3:98:88:6a:d8:95:10:b8:42:a7:a9:7e:2c:aa:b5:
                    2b:70:e3:f6:25:46:a5:3f:46:93:78:e0:8c:77:96:
                    e9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:05:15:6E:34:F0:57:89:B6:37:E2:5C:E4:BC:C7:43:79:BF:4C:68
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38372e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:f4:a5:68:f8:c9:f7:30:e3:27:5f:d5:54:f1:ea:e8:e1:0a:
         ca:f3:75:35:65:e3:35:e3:bb:a5:25:ab:6a:0f:d1:90:4f:84:
         ca:11:16:c7:d9:27:2f:25:22:dd:aa:ca:eb:41:c4:10:2f:a7:
         8f:f4:36:97:b1:83:90:c8:14:90:93:27:dd:93:29:c0:f6:a5:
         96:f0:ee:5f:85:ab:0a:c3:69:ec:24:5e:ae:ee:9b:ee:d7:54:
         ba:cc:93:17:72:25:be:33:2a:71:d5:c1:39:f5:dd:42:06:fb:
         5f:fc:7e:f7:db:4c:0a:49:86:6c:2c:65:16:14:3b:7c:4c:f6:
         d6:95:55:d1:2d:b5:19:c2:79:6d:c5:f9:13:91:60:1c:0a:3f:
         48:4f:1f:67:90:e5:1f:b4:ac:05:c9:17:40:f4:95:f1:4b:3e:
         6e:ae:fb:c8:79:9d:f3:c2:64:65:20:0b:d5:2c:32:1a:39:a3:
         2d:bd:df:96:f3:a1:2f:9c:23:70:83:58:80:a7:85:40:91:a9:
         3a:5e:5f:4f:83:0d:62:96:17:3b:78:ee:aa:85:c7:fd:ca:dd:
         16:98:db:72:31:2c:53:aa:a6:d9:ba:c5:b8:a4:fa:b4:fd:f7:
         fe:c5:4e:dc:8b:3b:fe:99:62:70:5c:60:b0:3d:09:5d:2f:c9:
         93:9d:7a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 00:43:15 2024 by rpki-client on console-fra.rpki-client.org