Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138382e302f32332d3233203d3e20323632383237.roa
File:                     3138372e38342e3138382e302f32332d3233203d3e20323632383237.roa (raw, json)
Hash identifier:          Zyu06ZC7zTc+U3Sx7QGpjDEwgcPDvqInBmQqz2XCH0w=
Subject key identifier:   8F:90:6D:87:46:A9:2C:1D:86:B4:BD:D2:DB:08:F8:BC:8E:66:21:22
Certificate issuer:       /CN=DADE0C80639BA985F0F9357586063522E5D2116B
Certificate serial:       78388B48B8D6C4264C995FD6EBA1AD7EFD9D21CC
Authority key identifier: DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138382e302f32332d3233203d3e20323632383237.roa
Signing time:             Thu 15 Feb 2024 13:52:36 +0000
ROA not before:           Thu 15 Feb 2024 13:47:36 +0000
ROA not after:            Thu 13 Feb 2025 13:52:36 +0000
asID:                     262827
IP address blocks:        187.84.188.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 13:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:38:8b:48:b8:d6:c4:26:4c:99:5f:d6:eb:a1:ad:7e:fd:9d:21:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADE0C80639BA985F0F9357586063522E5D2116B
        Validity
            Not Before: Feb 15 13:47:36 2024 GMT
            Not After : Feb 13 13:52:36 2025 GMT
        Subject: CN=8F906D8746A92C1D86B4BDD2DB08F8BC8E662122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:d1:f4:1e:ce:cb:87:cc:1f:0d:e0:db:0a:
                    e0:2f:1e:86:7c:9e:8b:a6:03:ab:2d:d8:07:3a:42:
                    00:a8:e4:24:27:1a:ed:ac:3c:40:37:1c:38:1a:0f:
                    72:9b:21:5f:ef:4c:69:6e:f9:c7:1a:45:0e:73:7c:
                    4f:6d:b4:9f:71:be:9c:32:4b:d2:66:48:0f:60:13:
                    1a:66:6a:87:45:50:0d:80:60:a4:53:31:45:e1:36:
                    06:0a:21:2a:11:ce:03:f0:78:04:66:a4:bd:45:00:
                    4f:f6:fa:1c:00:09:90:c0:f1:28:13:07:1e:22:de:
                    2e:86:ba:bc:90:dc:5e:c1:dd:cf:5a:51:62:f8:70:
                    9b:eb:60:bf:b3:a0:44:73:c7:dc:31:ef:b3:34:60:
                    ba:64:9e:e5:a9:97:50:1b:4f:5b:95:e5:56:72:94:
                    df:82:08:c4:f8:0f:cb:bd:b9:cb:22:67:d4:cd:07:
                    7a:55:3a:c3:d6:09:96:d9:b0:a3:dd:dd:96:f9:8f:
                    a8:5e:60:87:31:0b:25:d2:bb:19:a1:1b:e3:48:ab:
                    81:8f:59:bc:23:1d:af:f6:33:0a:ab:c1:df:f7:30:
                    f3:d9:65:cd:34:e1:30:87:c0:a9:79:dd:62:5b:a5:
                    e9:30:11:a0:f8:62:47:f6:cf:16:2f:e1:99:73:aa:
                    2a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:90:6D:87:46:A9:2C:1D:86:B4:BD:D2:DB:08:F8:BC:8E:66:21:22
            X509v3 Authority Key Identifier:
                keyid:DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/DADE0C80639BA985F0F9357586063522E5D2116B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138382e302f32332d3233203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:be:6e:2c:9b:94:08:55:e3:60:a2:0d:ab:a2:b8:01:ed:18:
         43:1c:03:c1:f3:c7:49:ba:2c:0c:8c:59:d6:bf:6c:ec:ab:af:
         2a:ec:b7:76:9f:de:e9:c3:1b:91:57:89:32:94:15:ed:e6:62:
         a2:85:84:eb:5d:d2:3f:78:6d:43:46:9a:e8:b5:9c:fa:e5:e6:
         7f:ed:e3:71:f9:98:f3:f7:a9:1b:30:90:00:e7:47:23:57:e7:
         af:69:e2:81:d8:64:f2:e6:da:b0:83:d8:f1:1d:0d:6e:61:df:
         ec:91:fa:06:d1:4b:d1:24:5f:fe:fc:fd:87:a4:a4:7c:63:58:
         5c:df:ad:80:7a:c7:e9:05:75:d5:71:41:c4:54:98:2a:15:cb:
         e4:9a:36:77:92:3a:d7:85:5e:ef:2f:07:b1:54:a8:ed:30:9e:
         d1:89:9c:e1:e3:83:b4:7d:f1:cb:98:13:f4:14:96:9c:ae:c8:
         3d:a5:68:f1:31:39:d7:64:84:70:b3:9a:d5:84:72:00:c5:c6:
         d7:42:93:41:14:65:25:3b:6a:30:17:c0:7c:7f:f0:c4:ae:4d:
         da:cd:c6:86:4e:09:27:16:63:62:fc:0a:ea:e3:6c:0d:dd:5a:
         b0:92:6d:bb:0d:ed:1d:6a:71:78:ac:20:42:9d:1a:c6:81:12:
         32:16:66:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:53:30 2024 by rpki-client on console-fra.rpki-client.org