Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32332d3233203d3e20323632333136.roa
File:                     3136372e3235302e3135322e302f32332d3233203d3e20323632333136.roa (raw, json)
Hash identifier:          sQC/XqwLraIvOqqUhsYZvDxbtiR9K9WetS2EYob/sUo=
Subject key identifier:   7C:6C:AA:C9:A8:8F:E3:8F:A3:15:80:DF:C2:05:B5:3F:1E:05:08:02
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       10C0997A47020FB5E6F219B9CAC7C885544D7567
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32332d3233203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:38 +0000
ROA not before:           Mon 21 Aug 2023 13:21:38 +0000
ROA not after:            Mon 19 Aug 2024 13:26:38 +0000
asID:                     262316
IP address blocks:        167.250.152.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c0:99:7a:47:02:0f:b5:e6:f2:19:b9:ca:c7:c8:85:54:4d:75:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:38 2023 GMT
            Not After : Aug 19 13:26:38 2024 GMT
        Subject: CN=7C6CAAC9A88FE38FA31580DFC205B53F1E050802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:a9:1a:93:ba:e7:39:95:f7:55:18:48:b7:
                    16:1e:eb:4c:ce:c8:91:80:8e:36:71:fe:ac:ca:09:
                    bd:fe:a0:a2:6c:d8:e1:64:66:4e:c5:29:6d:0b:7d:
                    5d:32:d0:75:c9:60:2f:62:35:85:e2:5a:c0:00:7e:
                    e3:e0:61:4f:54:5c:5b:b4:38:2c:d8:51:a2:a6:65:
                    d2:9a:9f:1a:61:06:e4:36:34:2d:30:8d:82:5e:5f:
                    cc:39:f5:27:d6:04:ae:f9:55:bd:37:03:26:3a:45:
                    a9:b7:b9:8d:61:ce:08:79:11:3d:02:7d:67:10:fe:
                    ce:12:64:73:7a:40:f6:e4:42:b2:cd:ac:df:ae:1a:
                    2d:b6:13:5e:6f:db:b3:5d:06:a4:5a:19:1e:42:ad:
                    25:60:9f:c3:a4:9e:a9:42:e9:d7:ae:07:f2:9a:84:
                    ea:09:d5:6e:f9:34:1e:d6:d4:49:cb:dc:e8:fe:18:
                    45:cd:bb:59:50:25:7c:64:28:35:0f:c7:d6:aa:26:
                    6b:98:45:9f:ba:93:5a:3b:4d:92:f6:f9:00:22:d3:
                    c6:65:ba:c2:93:77:f6:6e:04:f6:85:11:15:eb:3c:
                    a0:1f:26:c9:22:8c:95:73:8c:d5:b6:9d:e4:aa:6c:
                    46:6d:f9:29:e8:a0:0b:f4:5c:31:9f:68:70:d0:70:
                    c4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6C:AA:C9:A8:8F:E3:8F:A3:15:80:DF:C2:05:B5:3F:1E:05:08:02
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32332d3233203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:cb:13:43:14:9d:85:19:4d:01:b7:7e:93:dc:56:be:dd:73:
         7b:b4:67:95:ab:b3:39:5c:af:6a:ea:1c:9e:71:93:42:77:06:
         44:62:53:1f:90:48:11:8f:02:38:f5:9a:83:c0:a4:6c:2e:42:
         13:1e:f5:06:6e:70:aa:d3:98:e4:bf:85:5a:f8:26:9e:e9:e3:
         d1:13:6e:bb:0b:05:20:8c:0e:ed:4e:fa:48:82:2c:44:97:ff:
         ef:d9:49:c4:09:6d:d9:0f:46:06:43:91:a4:68:f0:97:7b:0b:
         cf:ec:3c:9d:68:65:7b:36:a3:3a:01:3c:11:93:d4:86:1c:13:
         d7:ef:a1:bb:17:12:df:d1:11:cb:22:56:3b:5c:a7:4a:e8:b6:
         52:2f:7f:79:b4:6c:f4:6f:93:d8:b8:d4:11:a6:f0:d6:c8:ba:
         ff:02:6c:e7:10:d1:51:cb:0e:55:92:43:8b:1b:e0:14:f2:d1:
         e4:7c:14:ea:44:00:25:68:69:47:62:a1:b1:36:35:d7:00:dc:
         f1:f9:01:75:52:c1:1a:1c:d5:57:25:01:bc:99:79:84:61:f4:
         ab:aa:0f:b6:cf:a8:03:e1:62:8b:9f:79:ab:c1:30:0a:95:54:
         29:55:f6:a0:57:e7:d0:a6:54:c0:2a:9c:a7:85:81:f1:ff:64:
         50:27:5e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 15:09:07 2023 by rpki-client on console-ams.rpki-client.org