Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230322e302f32332d3233203d3e20323632333136.roa
File:                     3133312e3232312e3230322e302f32332d3233203d3e20323632333136.roa (raw, json)
Hash identifier:          ofLAKIrpNOkYgXWldmkoZ783KnYQ0BjgEORKjenwB3g=
Subject key identifier:   3E:F8:8D:6C:64:EC:A8:E5:89:6A:35:FB:B1:7A:33:C0:9F:92:D0:11
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       591E3F06D71561F12EB101002D11D8F97C253FF8
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230322e302f32332d3233203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:38 +0000
ROA not before:           Mon 21 Aug 2023 13:21:38 +0000
ROA not after:            Mon 19 Aug 2024 13:26:38 +0000
asID:                     262316
IP address blocks:        131.221.202.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1e:3f:06:d7:15:61:f1:2e:b1:01:00:2d:11:d8:f9:7c:25:3f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:38 2023 GMT
            Not After : Aug 19 13:26:38 2024 GMT
        Subject: CN=3EF88D6C64ECA8E5896A35FBB17A33C09F92D011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:01:67:05:fb:c1:6f:eb:3f:63:82:84:87:
                    09:75:41:41:64:fc:0b:36:9d:c3:71:a2:fe:da:94:
                    27:bb:44:a1:60:75:ba:58:f0:71:92:32:d4:cc:73:
                    a7:6f:ea:05:1a:cd:77:01:c5:10:ef:71:b1:42:2d:
                    30:6b:6c:d5:39:3d:8b:c5:42:3b:6d:70:bb:b5:bf:
                    0c:ab:88:dd:1e:e0:f8:bd:34:8a:d7:e7:cb:8a:ba:
                    c0:c8:7e:90:21:87:70:ea:19:dc:2a:52:82:53:1e:
                    53:30:0f:97:98:e9:c4:16:f3:b2:f0:ee:92:52:cd:
                    9b:4b:bd:2b:2a:b2:59:e4:6d:f3:f3:49:e3:f9:8a:
                    01:4f:f1:5a:d1:d8:e0:c7:b7:7b:96:24:67:96:75:
                    2d:70:d1:38:c3:29:bd:91:34:08:be:7e:60:d9:32:
                    b1:80:05:3f:58:50:ad:47:98:5e:85:db:87:04:c2:
                    fc:1a:bb:00:c2:a0:13:90:13:df:70:5a:eb:4d:f9:
                    2d:4e:43:0b:ca:7b:7d:a0:49:9f:3a:18:1d:0d:ff:
                    ab:79:2d:52:87:72:90:c0:e9:ca:e1:13:93:19:8e:
                    96:e7:4a:00:96:f4:32:17:3c:3d:31:1d:82:3e:44:
                    17:47:aa:8f:29:d9:40:09:26:6c:45:ef:0a:7d:65:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F8:8D:6C:64:EC:A8:E5:89:6A:35:FB:B1:7A:33:C0:9F:92:D0:11
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230322e302f32332d3233203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:f3:85:e8:f5:b2:dd:cc:32:45:1e:f8:b6:a7:a5:1a:9f:
         ed:10:54:5e:ca:38:fe:81:52:2b:53:d7:d3:76:99:16:64:3c:
         68:8a:5f:43:e6:2f:f3:01:2f:69:1b:76:da:25:9c:e1:06:9a:
         eb:f6:6c:1b:b5:5f:ad:29:a3:e5:40:b6:d3:fb:3e:cb:3f:85:
         e3:12:c5:00:07:f2:9e:89:92:20:e6:5d:06:88:4d:ed:01:9a:
         2b:ff:0b:06:5c:78:17:78:c6:cc:59:f6:f8:66:9b:30:13:32:
         43:42:9b:48:83:d0:d5:0e:f0:f7:a3:28:d5:15:39:48:ab:4d:
         7e:0b:81:31:ec:8a:7e:e5:b7:4d:df:63:9b:ac:9c:41:25:dd:
         a8:0d:80:ec:7d:b9:ab:07:ce:a4:80:f4:5d:a8:ba:ad:99:20:
         f1:df:f5:ba:93:53:1d:49:06:b1:1e:4e:49:17:be:e1:ae:14:
         e1:7f:14:8c:65:da:fa:b9:52:43:0e:ef:49:a0:05:a0:4b:ae:
         a3:a1:20:f0:a4:fc:dc:89:21:ea:9e:dc:37:30:4f:1f:4f:71:
         49:67:bb:49:99:8e:1b:90:10:5e:fa:8d:d2:2b:c1:6f:95:ce:
         27:8c:dd:ae:f5:d9:d7:73:41:6a:ae:f1:95:9d:3b:f4:4e:49:
         02:7e:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 15:08:39 2023 by rpki-client on console-fra.rpki-client.org