Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135332e302f32342d3234203d3e20323632333136.roa
File:                     3136372e3235302e3135332e302f32342d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          n9zI1kZ+mTtcgcCvbDtzUeZ6jbtfUAzqoUNyFe8DrtM=
Subject key identifier:   D0:2F:E7:E1:60:70:44:D3:93:BB:AC:43:D0:F3:0E:BC:FB:64:DC:E3
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       3445C22717E54DFC4D60627A67A0EBF7978CCF7E
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135332e302f32342d3234203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:40 +0000
ROA not before:           Mon 21 Aug 2023 13:21:40 +0000
ROA not after:            Mon 19 Aug 2024 13:26:40 +0000
asID:                     262316
IP address blocks:        167.250.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:45:c2:27:17:e5:4d:fc:4d:60:62:7a:67:a0:eb:f7:97:8c:cf:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:40 2023 GMT
            Not After : Aug 19 13:26:40 2024 GMT
        Subject: CN=D02FE7E1607044D393BBAC43D0F30EBCFB64DCE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:a5:4e:0e:74:3e:b9:2f:bb:76:99:3c:2b:
                    b8:3c:42:9c:90:70:a8:72:69:e7:39:d6:51:cb:fb:
                    80:3f:06:09:c0:58:c9:12:ad:80:0e:92:ad:d2:dc:
                    ba:7e:d5:e5:e7:55:e6:a3:6d:ab:4a:01:65:56:d7:
                    d7:d2:a7:c5:c6:23:78:30:21:ed:be:4b:29:4a:af:
                    31:fa:41:fd:7e:db:03:99:19:d7:ae:ae:33:7a:87:
                    1e:bd:35:4e:d6:c8:b7:5b:b1:09:e3:2e:cd:e8:ee:
                    98:9c:3b:e0:e3:c8:b7:a6:31:5e:b4:6f:8b:5a:88:
                    53:c2:f1:96:56:8e:f5:a8:73:19:93:c4:dc:d8:29:
                    d9:09:96:cf:65:3d:2c:fa:a6:bf:17:d3:31:23:c9:
                    03:96:1f:d9:ce:25:3a:b6:2e:bb:6c:2a:4b:10:03:
                    a6:c2:3f:c2:75:82:b3:76:c5:31:d5:34:a1:6f:95:
                    8d:cd:cc:c3:4e:f0:f1:42:55:c4:a9:47:84:52:f1:
                    df:c1:e4:29:31:02:2e:f6:4d:2b:13:0a:18:45:ad:
                    34:14:47:b0:38:34:97:6a:f3:a9:80:90:ab:86:49:
                    0d:02:e2:b2:5f:6f:3e:6e:87:83:86:0b:73:59:00:
                    c6:45:e0:f1:8e:9d:b2:33:04:0f:5b:d7:de:45:fd:
                    78:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2F:E7:E1:60:70:44:D3:93:BB:AC:43:D0:F3:0E:BC:FB:64:DC:E3
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135332e302f32342d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:c5:b0:ab:21:4e:9c:33:da:eb:42:b8:c8:73:29:f1:e6:47:
         17:c7:a8:84:d5:50:bb:fb:b4:f2:67:ab:94:33:8c:63:35:32:
         0a:8b:63:d4:97:ba:45:60:6c:2d:21:cb:87:c0:3d:cd:b7:0b:
         55:86:0f:18:4b:81:3e:4d:f0:44:03:b2:97:38:14:07:ea:43:
         e8:a6:05:33:61:b8:9e:78:64:03:10:d7:55:81:9b:5c:1b:63:
         3d:ea:5d:fe:23:22:65:f5:8c:85:ed:b8:b9:ad:a9:6b:86:30:
         01:1c:fe:55:96:77:bc:50:95:39:4c:ac:cf:5b:86:ff:af:9b:
         c0:b9:0c:30:8b:e0:15:ec:b1:f5:c9:d6:fb:01:9f:11:9c:5d:
         27:b9:39:0d:d4:42:5a:17:e5:6b:95:52:be:e2:fe:b3:ba:a1:
         2b:09:a8:74:2b:94:26:c4:27:00:cb:bd:e7:49:98:35:68:99:
         0c:42:ac:b5:25:57:0d:67:1a:cf:13:d3:d2:84:eb:96:59:ad:
         c4:4e:cb:fb:52:6f:96:52:d4:0f:a5:7e:5c:a0:e3:91:cb:3a:
         55:cd:e7:a4:e0:1f:49:28:e8:1d:f9:3a:8e:54:eb:f4:82:9e:
         18:d9:21:c6:2d:94:8d:24:c1:7d:62:5a:7f:39:1c:89:55:39:
         b4:5b:d1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 15:09:07 2023 by rpki-client on console-ams.rpki-client.org