Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3134342e302f32302d3234203d3e203238313630.roa
File:                     3138372e36322e3134342e302f32302d3234203d3e203238313630.roa (raw, json)
Hash identifier:          SBafgnxhcxNY7ygLI9LbQwbUYbkp+2bWIFwkNBIkYAw=
Subject key identifier:   35:A4:88:E5:C2:73:30:07:71:B9:2F:77:D4:35:0D:CF:CC:94:C4:AC
Certificate issuer:       /CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Certificate serial:       0F05B61DA153FD8974138BDE2BC8C7AC99CAFE4D
Authority key identifier: 72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3134342e302f32302d3234203d3e203238313630.roa
Signing time:             Sat 16 Nov 2024 13:17:04 +0000
ROA not before:           Sat 16 Nov 2024 13:12:04 +0000
ROA not after:            Sat 15 Nov 2025 13:17:04 +0000
asID:                     28160
IP address blocks:        187.62.144.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Sat 16 Nov 2024 15:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:05:b6:1d:a1:53:fd:89:74:13:8b:de:2b:c8:c7:ac:99:ca:fe:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
        Validity
            Not Before: Nov 16 13:12:04 2024 GMT
            Not After : Nov 15 13:17:04 2025 GMT
        Subject: CN=35A488E5C273300771B92F77D4350DCFCC94C4AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:ed:ba:d0:5e:fc:4f:af:0d:59:16:a5:b7:
                    bd:a6:6c:5c:47:be:63:98:7a:67:13:c1:f3:d0:3f:
                    94:37:92:a9:4e:f3:c9:0e:e9:21:3b:d1:41:bf:06:
                    46:d2:79:b1:f2:57:b5:31:27:55:12:9f:cc:58:6f:
                    45:f7:ce:24:d6:59:ae:3f:13:a0:db:c7:6b:13:fd:
                    79:aa:a1:81:d7:44:56:92:87:93:56:c2:67:39:d5:
                    1d:48:10:a4:ba:45:d2:87:7c:8b:e2:13:5f:90:47:
                    f8:a7:d0:94:da:30:ab:64:dd:1d:df:86:9a:51:55:
                    a1:8f:de:d7:d0:8c:c6:5d:02:b0:81:6e:69:01:6b:
                    5e:46:cc:26:a6:26:75:62:c8:e1:c7:c5:09:66:08:
                    5c:04:76:e7:b9:9e:11:67:97:b9:92:ec:28:0d:99:
                    0a:e8:ea:a8:ea:26:4a:ba:20:5c:30:94:f0:87:d6:
                    98:c0:9f:4b:66:43:33:7a:aa:4d:f2:06:3e:a8:5d:
                    59:e0:9e:0d:b5:ce:a9:99:43:85:ba:bd:63:96:1c:
                    75:99:8c:ac:c3:5a:0a:6e:57:84:83:2d:2f:5e:a1:
                    5b:a8:9d:23:1f:f0:ec:59:eb:de:c8:1b:93:a9:c1:
                    62:f3:40:5d:de:53:b7:93:bf:b5:62:8d:42:81:8a:
                    17:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A4:88:E5:C2:73:30:07:71:B9:2F:77:D4:35:0D:CF:CC:94:C4:AC
            X509v3 Authority Key Identifier:
                keyid:72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3134342e302f32302d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:f5:bf:53:22:08:d9:68:6e:7f:a6:70:a4:5d:b6:67:7d:6a:
         b9:5e:b7:a7:0a:59:9e:c5:42:75:74:db:d7:f0:c8:51:78:74:
         bd:67:73:42:f3:54:c6:98:cf:e7:c5:2d:e6:17:b6:97:7e:b2:
         ba:9f:35:85:1e:d3:00:fb:56:7e:8f:71:7b:51:9b:a0:53:8e:
         d8:6e:4b:6a:3a:b0:c9:78:b5:1f:1a:9f:ed:4c:88:f4:fa:eb:
         81:68:b1:a5:e2:ab:e1:11:19:54:cb:d2:87:ac:5a:c4:67:0f:
         7c:7f:79:4c:87:fe:6a:4e:87:2d:f3:11:8e:d7:4e:b8:9f:f2:
         19:61:98:1a:4d:1f:82:b7:7e:cb:78:ca:f4:00:04:ab:bc:2c:
         3a:33:dc:ad:7e:fb:6d:19:6b:0b:21:be:85:d2:5e:08:90:54:
         f6:9c:75:bc:9c:ba:30:b0:1f:1c:ae:1d:d9:a5:4f:66:1e:14:
         67:62:29:a4:eb:ec:f2:5e:9c:b8:85:74:95:93:db:19:20:d9:
         20:8e:17:c5:11:04:12:7b:a6:23:07:cd:bd:b1:90:48:74:08:
         0c:36:fa:ce:66:31:45:9a:c1:d0:a7:2b:a7:06:40:df:6a:22:
         da:07:8c:24:08:a5:de:02:cf:64:9f:96:11:0e:90:cb:a7:f4:
         d9:bd:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 16:48:09 2024 by rpki-client on console-ams.rpki-client.org