Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137362e302f32302d3230203d3e20323632383237.roa
File:                     3138372e38342e3137362e302f32302d3230203d3e20323632383237.roa (raw, json)
Hash identifier:          CBr8E2HX9rkYdv4oFEJYhoCkVJabHwwdhg2i/MYdQcs=
Subject key identifier:   D9:23:33:98:D8:D9:0A:9E:E9:8C:F9:F2:20:8F:7B:A3:79:F8:36:C0
Certificate issuer:       /CN=DADE0C80639BA985F0F9357586063522E5D2116B
Certificate serial:       161E8A687A1F5CE41D0B1CAA2582180B7F1C89B1
Authority key identifier: DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137362e302f32302d3230203d3e20323632383237.roa
Signing time:             Thu 15 Feb 2024 13:52:28 +0000
ROA not before:           Thu 15 Feb 2024 13:47:28 +0000
ROA not after:            Thu 13 Feb 2025 13:52:28 +0000
asID:                     262827
IP address blocks:        187.84.176.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1e:8a:68:7a:1f:5c:e4:1d:0b:1c:aa:25:82:18:0b:7f:1c:89:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADE0C80639BA985F0F9357586063522E5D2116B
        Validity
            Not Before: Feb 15 13:47:28 2024 GMT
            Not After : Feb 13 13:52:28 2025 GMT
        Subject: CN=D9233398D8D90A9EE98CF9F2208F7BA379F836C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:68:fc:e5:4e:71:9e:7f:f3:ee:6a:91:b9:b2:
                    b9:35:8e:cf:5e:9c:85:83:45:c6:5c:bf:ba:b1:1d:
                    ba:d5:a8:1d:88:1a:4f:28:1e:c6:c5:3a:36:03:df:
                    de:70:c1:a6:7f:18:6c:88:d6:38:8d:40:3b:23:d1:
                    29:c1:d5:f1:ca:c8:98:6e:1e:f9:e7:24:6e:7d:b4:
                    76:31:71:f2:34:4f:31:f0:3a:86:32:c0:06:79:cc:
                    64:12:9d:43:aa:32:e7:1f:ed:b5:f5:c4:a9:d5:99:
                    7c:3c:82:0f:b9:5f:ef:1c:67:2c:50:f8:df:72:82:
                    48:c2:69:d6:bd:db:1a:aa:02:fe:9d:10:46:a9:3f:
                    cc:d1:3a:9f:2a:51:19:47:0d:bb:49:d0:17:9b:e5:
                    cc:7b:f1:a8:6b:c6:0d:34:09:a9:ea:36:f9:bc:66:
                    1e:1e:81:8b:97:f7:d5:c2:8e:c3:89:44:b8:71:3f:
                    fe:ff:41:49:cb:0e:66:07:5f:57:2b:6e:94:bf:7c:
                    73:a8:03:08:77:9f:94:e2:7f:f4:cb:ee:fc:3f:0b:
                    b4:3e:11:a8:52:97:8d:bc:53:e0:5e:61:ff:4e:84:
                    b6:8e:9e:ff:f6:c9:97:44:10:c7:1d:56:f5:1e:1e:
                    9f:89:bd:e5:72:78:67:50:06:8f:77:e7:95:3a:1f:
                    1c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:23:33:98:D8:D9:0A:9E:E9:8C:F9:F2:20:8F:7B:A3:79:F8:36:C0
            X509v3 Authority Key Identifier:
                keyid:DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/DADE0C80639BA985F0F9357586063522E5D2116B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137362e302f32302d3230203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:98:75:6b:e1:14:c7:bf:42:38:95:7f:6b:82:77:f1:6d:f8:
         57:e7:ec:2c:a5:47:df:f4:88:59:53:a0:18:9d:eb:a6:50:68:
         5f:64:1e:3c:32:2a:37:ec:c6:6c:25:28:0d:fa:92:0f:6a:02:
         03:80:6b:36:86:77:fd:5d:5d:f1:c6:71:cd:5c:7b:89:09:3d:
         b6:71:7f:77:93:2d:f0:d0:33:d8:8d:bd:e1:ef:fb:24:38:a1:
         8c:05:fb:38:2a:55:83:41:52:c6:db:0e:ea:1f:db:af:ea:65:
         9c:42:94:d1:fc:1e:af:42:4f:6c:38:e7:90:d7:b3:18:62:37:
         21:13:49:d8:da:60:ee:c2:08:31:02:c4:b1:30:11:b4:04:ec:
         7e:f2:52:ad:cd:2c:8b:50:f9:9d:d3:3c:49:a0:b8:b3:1f:7f:
         45:88:b7:cb:ba:52:c0:b2:51:fe:c2:d9:c2:7f:63:e2:78:9b:
         ae:69:86:a0:b4:aa:5f:98:74:91:da:f5:8e:74:71:15:ea:e9:
         d1:5b:99:ab:d9:81:12:85:6d:14:de:f1:36:05:6f:cf:33:83:
         6b:9f:eb:63:1a:aa:b9:fc:a6:9b:c9:5e:d4:46:c1:f9:76:b9:
         0e:09:8a:f1:c5:58:1b:1b:16:24:64:67:61:9e:82:7d:73:8a:
         34:21:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:53:30 2024 by rpki-client on console-fra.rpki-client.org