Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/3138372e36302e3132382e302f32302d3234203d3e203238313837.roa
File:                     3138372e36302e3132382e302f32302d3234203d3e203238313837.roa (raw, json)
Hash identifier:          ioDc7pEvpJEbFbHeken/f+FsUFRIRVnc5N19PT+7TUo=
Subject key identifier:   35:62:1C:FC:90:7A:AB:5E:13:E9:57:C4:06:8E:AB:66:2B:49:3D:E6
Certificate issuer:       /CN=A800BDA00AA4C8C4388F18F8E8C53579D345D208
Certificate serial:       7EBE694E7CDAB60F8279D6758B04B516998E79D1
Authority key identifier: A8:00:BD:A0:0A:A4:C8:C4:38:8F:18:F8:E8:C5:35:79:D3:45:D2:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/3138372e36302e3132382e302f32302d3234203d3e203238313837.roa
Signing time:             Wed 14 Aug 2024 14:00:23 +0000
ROA not before:           Wed 14 Aug 2024 13:55:23 +0000
ROA not after:            Wed 13 Aug 2025 14:00:23 +0000
asID:                     28187
IP address blocks:        187.60.128.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 14:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:be:69:4e:7c:da:b6:0f:82:79:d6:75:8b:04:b5:16:99:8e:79:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A800BDA00AA4C8C4388F18F8E8C53579D345D208
        Validity
            Not Before: Aug 14 13:55:23 2024 GMT
            Not After : Aug 13 14:00:23 2025 GMT
        Subject: CN=35621CFC907AAB5E13E957C4068EAB662B493DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:16:09:86:bc:31:9e:7d:4f:71:95:71:7f:
                    70:a5:32:1c:91:6e:de:38:78:c0:2b:71:3f:b3:f8:
                    55:61:0b:f8:45:61:47:3d:96:15:b7:ce:9e:c0:6c:
                    02:08:eb:25:36:9a:04:91:83:30:7a:bc:33:6c:5f:
                    b6:68:27:d9:60:4c:fa:7c:98:97:0e:c3:50:db:b2:
                    ec:1f:08:2b:07:b4:7b:71:84:37:6d:6c:83:49:da:
                    9d:de:fd:00:22:b5:8d:97:0c:99:de:9e:33:7d:14:
                    68:99:ab:a2:85:f5:8a:76:c1:d4:3b:f1:33:85:13:
                    50:f4:b1:18:8d:71:27:98:d9:e6:20:7c:50:43:20:
                    73:65:95:8d:2f:2a:37:e9:58:9d:0d:be:7f:3e:f3:
                    bc:0d:ad:97:fd:44:03:56:84:af:4a:12:02:ae:51:
                    c0:ed:64:7e:0c:e0:8e:38:09:f1:b2:58:03:a6:e1:
                    d3:d9:85:a6:a5:34:b0:b0:93:ac:f3:67:df:e3:66:
                    2b:c6:d5:e3:32:ff:d3:bf:36:19:89:66:3e:f4:d9:
                    ea:93:40:ae:f1:e5:9b:f9:2d:77:20:43:d8:11:87:
                    19:d3:35:be:a6:6a:b3:2d:7c:43:0a:12:01:27:72:
                    27:3a:e0:c5:fe:78:e5:27:fe:7d:91:07:52:fb:db:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:62:1C:FC:90:7A:AB:5E:13:E9:57:C4:06:8E:AB:66:2B:49:3D:E6
            X509v3 Authority Key Identifier:
                keyid:A8:00:BD:A0:0A:A4:C8:C4:38:8F:18:F8:E8:C5:35:79:D3:45:D2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/3138372e36302e3132382e302f32302d3234203d3e203238313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.60.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:3c:46:32:77:8a:e4:6c:61:ad:3a:c3:9f:f1:28:51:13:c2:
         91:3c:09:40:f6:e9:ba:c6:01:5a:ba:29:cc:6e:02:1e:c8:5c:
         c0:61:fd:53:58:b0:4a:82:a6:38:9d:5b:c6:4f:c5:fd:76:5c:
         0f:dc:24:89:59:d4:cd:1d:f1:af:a5:26:fa:c7:16:cc:7f:56:
         36:d7:3a:d8:3c:b9:ff:0b:72:4f:c2:22:37:7f:89:e4:d9:2f:
         d0:2c:05:83:0b:8d:64:c3:e7:f2:48:af:60:07:5e:62:5f:63:
         5d:c0:13:6c:df:27:0a:89:8d:e9:03:65:5d:ff:bc:b7:b2:6e:
         48:e6:32:c3:09:59:78:35:b6:0f:cf:02:50:6d:c8:6d:a2:ca:
         12:54:3f:31:d4:16:18:eb:bc:d5:2f:20:b6:2b:14:d8:2a:f4:
         63:69:c0:a5:ee:82:5a:1f:02:7e:53:ac:eb:88:4e:3e:57:67:
         d7:b8:45:d7:91:b7:dd:6f:80:07:75:c6:e3:fb:3a:56:d9:44:
         a9:7b:0e:af:3f:89:2b:b1:18:2d:bf:2a:b0:c4:82:62:6c:66:
         ff:b5:75:8c:34:73:55:1b:8c:7c:57:21:40:8f:3b:2c:05:3a:
         8a:dc:27:71:71:5f:01:64:01:48:45:2d:20:80:76:36:15:d0:
         e1:42:2a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 18:39:58 2024 by rpki-client on console-fra.rpki-client.org