Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137372e302f32342d3234203d3e20323632383237.roa
File:                     3138372e38342e3137372e302f32342d3234203d3e20323632383237.roa (raw, json)
Hash identifier:          Vus+JUrgH5e4b7cZ606u7i7lu/7w7dV0AgX/BCKlCa8=
Subject key identifier:   D2:EB:FE:AC:CD:81:AF:DD:E1:41:61:3F:6D:B4:DA:B7:DB:A1:D9:62
Certificate issuer:       /CN=DADE0C80639BA985F0F9357586063522E5D2116B
Certificate serial:       336C66982C285C923CE0FED0728344AD019F3844
Authority key identifier: DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137372e302f32342d3234203d3e20323632383237.roa
Signing time:             Thu 15 Feb 2024 13:52:29 +0000
ROA not before:           Thu 15 Feb 2024 13:47:29 +0000
ROA not after:            Thu 13 Feb 2025 13:52:29 +0000
asID:                     262827
IP address blocks:        187.84.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 13:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6c:66:98:2c:28:5c:92:3c:e0:fe:d0:72:83:44:ad:01:9f:38:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADE0C80639BA985F0F9357586063522E5D2116B
        Validity
            Not Before: Feb 15 13:47:29 2024 GMT
            Not After : Feb 13 13:52:29 2025 GMT
        Subject: CN=D2EBFEACCD81AFDDE141613F6DB4DAB7DBA1D962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:36:16:89:2e:e7:c0:44:a8:7b:46:e9:ec:
                    83:3d:53:45:5a:e3:c9:23:e0:4b:be:91:a4:6f:19:
                    bc:0f:e4:07:08:00:36:04:4f:4a:b8:27:22:59:c0:
                    82:f8:08:b8:0d:34:e1:14:e4:65:a7:3a:49:05:2a:
                    be:93:e9:d0:8a:c4:de:47:a4:56:05:8e:58:1c:d7:
                    09:bf:fd:7d:da:ac:1a:cc:df:22:d3:87:b1:cc:52:
                    ee:e4:10:3e:52:89:2f:fa:da:ef:4b:30:47:65:76:
                    a4:7a:5a:b4:aa:22:5d:2c:07:6f:ec:d0:45:96:b7:
                    1f:c9:96:d4:b2:99:87:3a:4b:ae:0a:36:e1:58:f6:
                    f0:00:0b:75:96:e4:6b:cf:8f:20:b5:9d:b9:b6:ba:
                    42:8d:9b:3c:c6:42:29:3c:43:8f:33:6f:da:25:6a:
                    d7:f8:47:cb:5e:a7:7f:6d:44:99:58:27:38:ef:97:
                    49:fe:58:18:0f:63:38:f5:dc:d1:be:15:7a:fa:bb:
                    84:98:d3:fc:25:66:6d:c6:ce:be:1a:b8:93:39:d7:
                    c8:9c:e7:fb:0e:cf:a1:70:ce:6c:dd:24:81:39:53:
                    ef:a3:70:59:d1:0c:0f:b1:8e:5c:e2:a3:a9:e5:0a:
                    87:ff:ff:e3:ca:4f:d7:5e:31:93:59:73:66:3e:74:
                    60:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EB:FE:AC:CD:81:AF:DD:E1:41:61:3F:6D:B4:DA:B7:DB:A1:D9:62
            X509v3 Authority Key Identifier:
                keyid:DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/DADE0C80639BA985F0F9357586063522E5D2116B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137372e302f32342d3234203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:6f:ef:a0:70:3a:4a:f8:f0:7d:13:e2:0d:08:bd:a4:36:ec:
         33:fc:67:16:32:3a:31:6c:b2:15:ed:75:07:90:d9:7c:5c:ea:
         c8:49:ab:17:95:8d:b9:e0:08:2c:bd:29:2f:6c:1e:ee:a5:67:
         f0:7a:5f:e6:0d:14:99:38:11:9b:da:7d:f9:03:60:c3:c9:86:
         71:c3:7c:07:fb:f7:86:cc:e2:60:ae:5b:9c:bb:88:3c:86:38:
         a0:c0:5b:3f:de:16:76:35:97:d6:fa:10:61:c9:e5:36:10:4e:
         0d:08:03:ff:a6:34:78:3a:ef:52:c6:22:85:8d:11:04:b6:28:
         e6:bd:e0:5c:a6:0a:17:8e:7b:40:ed:04:9a:94:49:19:cb:e1:
         7c:8b:87:75:ce:be:ca:6d:e9:8b:28:59:12:4e:92:31:63:07:
         50:c2:55:1f:eb:e8:b5:3b:ab:85:19:ec:f7:f2:36:ba:5f:c0:
         6a:1c:a9:a8:4d:ae:01:ac:35:29:06:89:f1:d4:b3:35:ec:9d:
         a8:cb:41:b0:6b:b9:4c:25:e5:dd:41:fa:db:99:89:97:7b:ec:
         1f:80:be:9f:27:29:93:d8:63:7c:a2:8a:ec:af:6d:96:80:00:
         70:40:16:8c:da:bc:c0:24:1c:ef:16:8b:e9:30:20:9b:40:bf:
         d3:af:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:40:11 2024 by rpki-client on console-ams.rpki-client.org