Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135342e302f32342d3234203d3e20323632333136.roa
File:                     3136372e3235302e3135342e302f32342d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          FhqJ5nmnHmL7Q9tN2jCXKqHkYI/c0BjDJjvDasi3PEE=
Subject key identifier:   A9:8D:F9:85:91:56:8E:A0:EE:E8:3D:52:8C:68:02:D6:C1:99:59:68
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       6FFA82DFF99EEB73DF5686302FB7641F53FBC88D
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135342e302f32342d3234203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:36 +0000
ROA not before:           Mon 21 Aug 2023 13:21:36 +0000
ROA not after:            Mon 19 Aug 2024 13:26:36 +0000
asID:                     262316
IP address blocks:        167.250.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fa:82:df:f9:9e:eb:73:df:56:86:30:2f:b7:64:1f:53:fb:c8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:36 2023 GMT
            Not After : Aug 19 13:26:36 2024 GMT
        Subject: CN=A98DF98591568EA0EEE83D528C6802D6C1995968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:41:2f:d0:2f:e6:99:74:b5:e7:7a:da:f8:
                    e0:46:0a:6f:5a:3b:be:7b:cd:ce:bc:87:d8:b9:be:
                    e6:65:6c:43:d5:70:0b:e3:ad:aa:43:d8:83:b2:98:
                    18:f1:8b:3d:5f:71:c1:d6:19:1a:55:b8:8a:2b:9f:
                    59:bf:74:a5:a1:39:f3:5e:80:72:0b:95:18:8e:b8:
                    7a:60:e0:da:30:07:c3:05:f2:78:02:f1:a0:1d:94:
                    e3:7b:38:36:45:98:5e:7d:3a:26:f8:d0:2e:98:66:
                    02:17:d9:c2:ed:5d:b1:b5:3f:4d:7b:18:c0:d9:d9:
                    e1:b3:30:d9:4a:76:17:50:2b:89:1f:ff:00:aa:d3:
                    d7:8e:77:66:f4:2c:d6:52:22:bb:07:81:c0:bd:41:
                    f6:66:6c:97:b2:4d:b5:da:26:e6:2b:36:39:6e:86:
                    09:e3:f9:c3:aa:93:d8:e0:a0:ce:1f:63:b8:92:ed:
                    7c:19:7a:ce:51:5d:9c:4f:9c:1d:ac:b6:07:d4:e9:
                    17:5b:1a:72:1f:8f:2a:41:1a:de:51:33:bb:6a:8b:
                    62:d4:7f:60:8d:e8:a3:b7:52:15:b3:5d:55:df:0a:
                    be:f2:80:ec:64:4e:5a:c4:ea:70:ec:5e:23:f6:73:
                    a2:69:54:d1:5e:73:35:bf:6d:c8:14:6e:b5:d6:b7:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8D:F9:85:91:56:8E:A0:EE:E8:3D:52:8C:68:02:D6:C1:99:59:68
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135342e302f32342d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:78:a3:4b:83:40:b5:79:96:fc:b0:ec:5f:e6:c8:27:57:f4:
         c6:5b:4e:ab:8f:47:99:fb:82:d8:70:b9:a1:9b:da:a9:93:0a:
         c0:5a:bf:23:8c:4e:b8:96:19:f9:ed:e9:35:47:00:55:5c:b0:
         29:0a:b2:81:b0:93:44:5d:8a:2d:19:2c:23:9e:72:f5:48:f0:
         be:cb:0b:a4:27:9f:90:a6:bd:85:82:65:b7:1f:4f:0d:df:dc:
         75:4a:a0:5f:20:a7:ba:63:e6:16:1a:c5:11:bf:b8:d8:ec:1a:
         3a:42:c5:1d:14:82:1b:dd:ae:9e:f5:12:ca:37:ed:d0:33:f3:
         5f:77:7a:48:14:87:b0:ed:45:c6:2a:dd:0a:97:58:76:69:5a:
         d9:e0:10:22:49:33:d5:58:91:63:37:47:2f:90:28:b5:8b:b7:
         51:15:85:c6:22:e3:7a:69:1e:1c:69:ea:82:0d:31:8d:fc:9d:
         46:fe:b2:de:b1:71:b9:85:ba:6a:bd:ca:1d:86:bd:cd:18:b4:
         07:c2:46:3b:b5:4e:54:8d:61:63:69:5a:cb:15:85:f6:de:c8:
         03:61:94:27:86:2c:31:cf:d6:04:c9:e6:e2:bf:b4:13:a4:5a:
         2e:01:36:51:67:a8:01:64:93:4b:8f:d3:37:82:19:a8:5c:56:
         6f:be:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 15:08:39 2023 by rpki-client on console-fra.rpki-client.org