Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133342e302f32342d3234203d3e20323635323837.roa
File:                     3136382e39302e3133342e302f32342d3234203d3e20323635323837.roa (raw, json)
Hash identifier:          EacZWTssa6O9Oh5oqPgKW0vaYxfiEzeeDWXPF6UuV3o=
Subject key identifier:   83:22:2D:CA:4D:A3:85:90:EC:FD:7D:64:2A:6C:81:94:2A:F4:85:BA
Certificate issuer:       /CN=5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17
Certificate serial:       2AEE115C2ED96EABDE277C19DEFD2F5730EAD8FB
Authority key identifier: 5C:A3:41:8C:8C:7C:A4:61:5E:84:AA:D4:D7:42:A5:C1:EC:34:5B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133342e302f32342d3234203d3e20323635323837.roa
Signing time:             Mon 16 Sep 2024 17:26:22 +0000
ROA not before:           Mon 16 Sep 2024 17:21:22 +0000
ROA not after:            Mon 15 Sep 2025 17:26:22 +0000
asID:                     265287
IP address blocks:        168.90.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 01:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ee:11:5c:2e:d9:6e:ab:de:27:7c:19:de:fd:2f:57:30:ea:d8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17
        Validity
            Not Before: Sep 16 17:21:22 2024 GMT
            Not After : Sep 15 17:26:22 2025 GMT
        Subject: CN=83222DCA4DA38590ECFD7D642A6C81942AF485BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:91:29:4e:06:d5:61:5c:70:b9:ef:f9:ee:
                    fe:95:0d:43:49:44:8a:47:5a:1c:16:6b:eb:6a:f8:
                    ae:d8:53:16:a7:b5:c9:a3:42:44:6b:bd:3f:4e:ce:
                    3a:c4:93:5a:d5:ed:e6:85:03:d4:bf:cc:79:bb:f2:
                    27:21:3a:da:47:d4:56:5e:59:32:1c:2b:62:66:a9:
                    8b:15:7f:2f:19:48:9c:e4:18:e8:af:68:c2:52:ef:
                    2d:74:35:ec:db:5d:c7:0a:ed:86:92:d4:4f:24:9a:
                    92:ea:70:f7:17:b9:b2:5a:cd:ae:25:fd:16:ee:3d:
                    51:fa:29:3a:ee:ff:86:48:de:95:48:24:3f:ed:f7:
                    7d:c2:a7:38:97:91:0d:94:c4:61:6a:f2:9c:87:eb:
                    7f:35:a6:49:8d:67:df:72:ba:33:b9:40:5a:e5:0c:
                    20:2a:c6:d9:ae:7c:e8:c7:db:31:eb:12:8f:e2:60:
                    38:f2:fe:cb:a4:5b:5e:0c:8f:9b:98:b4:a1:c6:d6:
                    7d:72:df:84:29:81:39:7c:fe:75:b1:fa:d6:5e:3d:
                    b6:e9:c5:b8:1e:3a:e2:e0:d1:a5:a9:34:e0:a7:6e:
                    08:43:60:7a:aa:d7:c6:e0:2d:25:e8:28:7a:b2:49:
                    40:e0:a1:27:dc:62:ab:14:17:e9:33:2a:1f:d6:2d:
                    97:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:22:2D:CA:4D:A3:85:90:EC:FD:7D:64:2A:6C:81:94:2A:F4:85:BA
            X509v3 Authority Key Identifier:
                keyid:5C:A3:41:8C:8C:7C:A4:61:5E:84:AA:D4:D7:42:A5:C1:EC:34:5B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133342e302f32342d3234203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:1b:7a:0f:09:a0:06:fc:be:3d:52:e1:47:24:db:4f:b8:8e:
         8d:7b:75:b8:34:89:2f:da:19:3f:3e:a0:ab:cd:f7:0e:d3:dd:
         10:60:03:10:e4:a1:7f:93:b6:00:c5:fc:d1:d8:26:95:71:e7:
         e1:6c:77:dd:70:e7:5d:d9:b5:d8:e2:a4:e3:27:14:eb:6b:b2:
         aa:d8:21:f8:7f:72:5c:be:a1:c2:14:fc:8a:54:0d:1f:4e:d4:
         5d:57:b3:cc:eb:89:7a:70:e6:8c:98:78:a3:ae:e5:8c:f1:e6:
         af:59:90:57:b0:80:b4:6e:c7:bc:94:89:42:bd:60:af:db:3a:
         d5:be:07:10:98:80:a9:be:d0:68:b7:76:c8:2b:4b:33:e5:7a:
         48:81:b7:77:ed:d1:28:34:9a:2b:a4:3b:2b:67:0b:67:2e:87:
         df:0d:56:b0:57:f0:d0:a2:c2:c8:18:19:4a:28:e7:db:f8:95:
         31:73:22:64:e3:86:90:ac:9a:10:0a:67:04:86:2d:0c:b5:61:
         5f:16:8c:ee:c4:ef:5e:2b:83:cd:a6:be:6b:c9:3e:6d:a1:33:
         29:d5:c6:13:3b:20:93:73:68:9a:60:24:ec:21:d7:73:1d:6b:
         e7:3f:19:64:fd:e9:1d:f6:45:33:16:d1:52:8f:78:cc:fa:da:
         d5:67:22:06
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKu4RXC7ZbqveJ3wZ3v0vVzDq2PswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNBMzQxOEM4QzdDQTQ2MTVFODRBQUQ0RDc0MkE1QzFF
QzM0NUIxNzAeFw0yNDA5MTYxNzIxMjJaFw0yNTA5MTUxNzI2MjJaMDMxMTAvBgNV
BAMTKDgzMjIyRENBNERBMzg1OTBFQ0ZEN0Q2NDJBNkM4MTk0MkFGNDg1QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZpEpTgbVYVxwue/57v6VDUNJ
RIpHWhwWa+tq+K7YUxantcmjQkRrvT9OzjrEk1rV7eaFA9S/zHm78ichOtpH1FZe
WTIcK2JmqYsVfy8ZSJzkGOivaMJS7y10NezbXccK7YaS1E8kmpLqcPcXubJaza4l
/RbuPVH6KTru/4ZI3pVIJD/t933CpziXkQ2UxGFq8pyH6381pkmNZ99yujO5QFrl
DCAqxtmufOjH2zHrEo/iYDjy/sukW14Mj5uYtKHG1n1y34QpgTl8/nWx+tZePbbp
xbgeOuLg0aWpNOCnbghDYHqq18bgLSXoKHqySUDgoSfcYqsUF+kzKh/WLZcVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgyItyk2jhZDs/X1kKmyBlCr0hbowHwYDVR0j
BBgwFoAUXKNBjIx8pGFehKrU10Klwew0WxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1FiRkFMQm01RFk1anhYSmNKa3FYNVdYR0dqeEdkYkJSbW9UQ2hOU2s0
Z3QvMC81Q0EzNDE4QzhDN0NBNDYxNUU4NEFBRDRENzQyQTVDMUVDMzQ1QjE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDQTM0MThDOEM3Q0E0NjE1
RTg0QUFENEQ3NDJBNUMxRUMzNDVCMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdRYkZBTEJtNURZNWp4WEpjSmtxWDVXWEdHanhHZGJCUm1vVENoTlNrNGd0LzAv
MzEzNjM4MmUzOTMwMmUzMTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoWoYwDQYJKoZIhvcNAQELBQADggEBAB0beg8J
oAb8vj1S4Uck20+4jo17dbg0iS/aGT8+oKvN9w7T3RBgAxDkoX+TtgDF/NHYJpVx
5+Fsd91w513ZtdjipOMnFOtrsqrYIfh/cly+ocIU/IpUDR9O1F1Xs8zriXpw5oyY
eKOu5Yzx5q9ZkFewgLRux7yUiUK9YK/bOtW+BxCYgKm+0Gi3dsgrSzPlekiBt3ft
0Sg0miukOytnC2cuh98NVrBX8NCiwsgYGUoo59v4lTFzImTjhpCsmhAKZwSGLQy1
YV8WjO7E714rg82mvmvJPm2hMynVxhM7IJNzaJpgJOwh13Mda+c/GWT96R32RTMW
0VKPeMz62tVnIgY=
-----END CERTIFICATE-----
Generated at Tue Sep 17 04:24:35 2024 by rpki-client on console-ams.rpki-client.org