Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/3138392e38392e3230382e302f32302d3234203d3e203238313837.roa
File:                     3138392e38392e3230382e302f32302d3234203d3e203238313837.roa (raw, json)
Hash identifier:          l3D3q5yjhL1YpwkJbGtZh+xegmqL8Mx0FB51xmGOQzQ=
Subject key identifier:   83:DB:EB:8C:BA:BC:62:05:CB:95:2B:67:EB:76:B2:2A:F7:98:D1:7A
Certificate issuer:       /CN=A800BDA00AA4C8C4388F18F8E8C53579D345D208
Certificate serial:       5CBB348BF014B16B4ED7E659A9587FD15548FA96
Authority key identifier: A8:00:BD:A0:0A:A4:C8:C4:38:8F:18:F8:E8:C5:35:79:D3:45:D2:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/3138392e38392e3230382e302f32302d3234203d3e203238313837.roa
Signing time:             Wed 14 Aug 2024 13:58:37 +0000
ROA not before:           Wed 14 Aug 2024 13:53:37 +0000
ROA not after:            Wed 13 Aug 2025 13:58:37 +0000
asID:                     28187
IP address blocks:        189.89.208.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 14:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bb:34:8b:f0:14:b1:6b:4e:d7:e6:59:a9:58:7f:d1:55:48:fa:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A800BDA00AA4C8C4388F18F8E8C53579D345D208
        Validity
            Not Before: Aug 14 13:53:37 2024 GMT
            Not After : Aug 13 13:58:37 2025 GMT
        Subject: CN=83DBEB8CBABC6205CB952B67EB76B22AF798D17A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8e:f7:f9:d4:7b:f0:c1:c2:72:0a:48:d3:72:
                    0c:52:00:d2:a5:95:e2:07:f6:d2:bf:e3:e8:04:f0:
                    14:6a:97:d6:40:5d:e1:f1:46:03:6e:8b:c4:0b:03:
                    d0:1b:63:cb:b0:f1:5b:dd:76:ca:3e:4c:85:9f:33:
                    1a:8c:6b:f4:f6:cc:40:df:26:74:e6:cd:06:60:4d:
                    22:b8:3c:35:72:93:cc:4b:6c:ff:b3:bf:c9:b9:96:
                    46:72:44:cd:21:cf:3a:38:f1:5d:4b:de:a2:e5:d9:
                    0f:18:ac:7c:42:10:ef:14:46:17:44:02:33:02:3f:
                    4b:6d:f8:50:42:37:a2:6d:97:a2:65:b9:a6:fa:93:
                    11:32:bc:59:54:dc:2c:e3:42:f2:9f:7b:da:55:ed:
                    81:c3:e9:35:17:97:09:bb:a8:1c:2e:d1:93:c1:f5:
                    4b:77:aa:9f:10:4d:3a:08:41:a3:b4:d3:7b:2b:e6:
                    6a:92:e1:37:f6:99:4a:2a:20:88:b2:ed:e6:41:40:
                    25:19:e4:c9:94:d6:cc:9e:58:c7:83:27:1b:66:b2:
                    1d:95:16:31:9a:6a:fd:e1:09:bf:87:b6:e6:43:f6:
                    cf:28:a1:73:54:21:87:61:0c:a3:be:e6:b7:74:19:
                    a9:35:c8:e2:26:5d:c1:b3:95:4c:86:39:81:f2:db:
                    99:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DB:EB:8C:BA:BC:62:05:CB:95:2B:67:EB:76:B2:2A:F7:98:D1:7A
            X509v3 Authority Key Identifier:
                keyid:A8:00:BD:A0:0A:A4:C8:C4:38:8F:18:F8:E8:C5:35:79:D3:45:D2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/3138392e38392e3230382e302f32302d3234203d3e203238313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:fa:92:1f:74:ce:dc:1f:68:b8:87:b8:57:0b:8c:6d:18:00:
         37:37:ca:4c:01:30:e6:18:98:95:34:40:45:b2:ac:4b:ef:6a:
         15:05:24:12:4e:0f:97:80:05:ed:d9:55:ca:cb:fc:25:dc:1f:
         20:4c:50:cf:56:42:45:52:eb:30:3e:ae:87:c2:b8:78:3a:66:
         e1:6a:67:0d:a6:fa:85:bd:ee:e0:ff:6c:7f:ff:de:77:f5:23:
         32:1a:db:18:62:cb:c9:dc:77:6c:a9:c1:a1:a7:31:d7:22:ea:
         70:07:50:f6:07:01:5a:8c:85:6d:61:68:87:90:a8:a2:a3:15:
         77:d7:9d:b9:f2:9a:9e:c4:e8:59:a9:f6:d1:7f:8e:92:a7:65:
         8f:4b:83:e5:c5:0c:af:5b:08:78:b2:c3:1e:52:6d:b9:2f:c0:
         6d:2d:f6:d5:4c:c5:a0:75:79:fd:79:d2:45:13:3b:0a:91:1c:
         b6:e0:33:e9:a1:f4:f1:ed:a8:97:da:f4:f3:c7:be:0a:07:31:
         b7:cb:eb:a9:b7:6d:1f:d8:14:92:5e:05:82:fd:16:39:1d:cf:
         bc:89:94:81:53:ab:2b:08:3b:2f:fa:41:01:45:e6:35:30:bf:
         83:e5:67:fd:ff:77:ed:57:28:39:91:dd:89:e2:84:77:d7:a8:
         dd:05:66:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 18:53:12 2024 by rpki-client on console-ams.rpki-client.org