Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/3133312e3139362e32382e302f32322d3232203d3e20323731343130.roa
File:                     3133312e3139362e32382e302f32322d3232203d3e20323731343130.roa (raw, json)
Hash identifier:          xp203IcvLnSzScuIOJk65Nfokf98YSpDczPk9mn8voo=
Subject key identifier:   86:90:81:16:D8:EB:FD:88:2F:C1:6C:F5:E6:82:7C:99:AB:C3:88:95
Certificate issuer:       /CN=0FBDD3F993E0EB0555216070730CE01AE2863A6A
Certificate serial:       71AF37D5ABBED1696673FA4B3A64360482F04EB8
Authority key identifier: 0F:BD:D3:F9:93:E0:EB:05:55:21:60:70:73:0C:E0:1A:E2:86:3A:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/3133312e3139362e32382e302f32322d3232203d3e20323731343130.roa
Signing time:             Wed 03 Apr 2024 23:11:52 +0000
ROA not before:           Wed 03 Apr 2024 23:06:52 +0000
ROA not after:            Wed 02 Apr 2025 23:11:52 +0000
asID:                     271410
IP address blocks:        131.196.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 15:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:af:37:d5:ab:be:d1:69:66:73:fa:4b:3a:64:36:04:82:f0:4e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBDD3F993E0EB0555216070730CE01AE2863A6A
        Validity
            Not Before: Apr  3 23:06:52 2024 GMT
            Not After : Apr  2 23:11:52 2025 GMT
        Subject: CN=86908116D8EBFD882FC16CF5E6827C99ABC38895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:4b:8d:93:6c:cf:45:4d:93:1a:27:75:f5:
                    8d:e2:7f:ec:d6:87:28:1d:ae:fd:2a:c1:29:af:ba:
                    56:dc:73:3f:ef:2f:c9:36:67:83:91:d2:10:29:01:
                    49:b7:51:19:2d:a2:af:bf:e4:01:76:bb:8b:9d:35:
                    ee:b5:4d:cb:74:94:99:3a:b9:2b:4e:1e:4c:3d:42:
                    b0:e1:7b:f2:7e:e4:7e:25:60:1a:36:8e:06:4b:2f:
                    76:d9:d9:e7:3e:f3:85:13:51:97:81:dd:dc:19:61:
                    3a:09:df:1f:f4:77:d1:a2:af:46:67:29:30:93:5d:
                    5a:13:b9:19:73:4f:d1:f0:b7:fe:83:2f:7f:14:c9:
                    06:f7:73:54:4d:34:97:66:fb:03:33:97:4d:8c:42:
                    03:4d:36:21:32:99:4f:e5:a8:4f:9a:93:69:ea:0a:
                    82:45:ec:32:a9:cd:6f:0c:f0:de:58:ec:0b:5f:78:
                    71:3e:62:eb:c1:78:34:28:32:75:07:6b:27:35:f7:
                    81:cc:b8:08:d0:f6:0e:e9:f8:d6:e4:d5:d2:c0:99:
                    7b:84:e5:d7:3f:f2:04:c3:d0:a2:c2:72:ec:4b:b1:
                    45:b8:e7:53:0d:55:87:b9:3b:b9:03:c5:c8:45:21:
                    fd:bf:7e:88:88:19:ea:ab:85:b5:73:cf:67:5a:3a:
                    1e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:90:81:16:D8:EB:FD:88:2F:C1:6C:F5:E6:82:7C:99:AB:C3:88:95
            X509v3 Authority Key Identifier:
                keyid:0F:BD:D3:F9:93:E0:EB:05:55:21:60:70:73:0C:E0:1A:E2:86:3A:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/3133312e3139362e32382e302f32322d3232203d3e20323731343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:6f:50:05:54:ed:36:9d:b4:ac:47:9a:bc:d1:b8:01:0d:c3:
         5c:65:0a:79:ae:b0:bd:34:b2:a2:15:e2:e3:10:86:00:81:d7:
         21:9c:f3:fe:23:15:e2:c6:f3:cb:39:c1:4b:bb:e3:48:6a:dc:
         96:88:df:25:50:8d:a2:66:25:26:e1:bd:0a:98:75:1e:e6:3d:
         8f:02:2f:2a:de:ab:d9:a4:71:a6:c0:b9:97:b6:56:d4:09:61:
         0a:1a:29:c2:27:e3:b6:de:58:8d:f7:05:19:62:c0:e9:fe:39:
         8e:e8:43:af:63:69:32:17:e9:b2:74:92:4d:b4:42:de:c0:76:
         b8:2f:64:95:6c:31:9b:71:74:64:4e:3a:79:2a:cd:5d:0a:11:
         b2:5d:88:f2:e5:1a:97:f7:25:cd:3f:ae:72:79:c6:68:81:21:
         bb:5a:7f:15:6e:3b:30:14:f7:32:29:24:1d:be:5f:c8:7d:81:
         98:e9:dc:2e:f5:83:84:4a:f5:73:30:c5:33:e6:f4:4d:d2:49:
         b6:5d:f2:6c:8e:ce:1b:54:53:5f:c8:68:0e:ff:00:8b:c0:44:
         8d:28:b4:ae:cf:5e:72:b9:bf:b3:9b:13:dd:3d:c5:e8:40:7e:
         d1:27:02:a0:19:04:f0:b5:66:a3:08:f3:23:b8:97:00:88:75:
         b9:bc:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 18:31:10 2024 by rpki-client on console-ams.rpki-client.org