Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/3138392e38392e3230392e302f32342d3234203d3e203238313837.roa
File:                     3138392e38392e3230392e302f32342d3234203d3e203238313837.roa (raw, json)
Hash identifier:          fO9kGKVnTPId0Bg9a7HBjBBfyYTCkCP6IEboAh+3wgU=
Subject key identifier:   3E:66:61:08:5F:57:25:40:DB:F6:04:6C:6B:50:D0:37:02:06:4B:F7
Certificate issuer:       /CN=A800BDA00AA4C8C4388F18F8E8C53579D345D208
Certificate serial:       6C716C95F7276AD1AAE01E793BF624FC3247F9A8
Authority key identifier: A8:00:BD:A0:0A:A4:C8:C4:38:8F:18:F8:E8:C5:35:79:D3:45:D2:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/3138392e38392e3230392e302f32342d3234203d3e203238313837.roa
Signing time:             Wed 14 Aug 2024 14:01:34 +0000
ROA not before:           Wed 14 Aug 2024 13:56:34 +0000
ROA not after:            Wed 13 Aug 2025 14:01:34 +0000
asID:                     28187
IP address blocks:        189.89.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 14:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:71:6c:95:f7:27:6a:d1:aa:e0:1e:79:3b:f6:24:fc:32:47:f9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A800BDA00AA4C8C4388F18F8E8C53579D345D208
        Validity
            Not Before: Aug 14 13:56:34 2024 GMT
            Not After : Aug 13 14:01:34 2025 GMT
        Subject: CN=3E6661085F572540DBF6046C6B50D03702064BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:54:b2:17:f9:d5:dd:c7:06:08:a3:79:b4:
                    65:ab:d6:bb:69:2c:03:81:fe:db:99:c0:28:08:c4:
                    b8:fc:31:7f:fe:76:ea:18:27:37:45:40:41:cb:25:
                    f3:4c:56:56:23:6a:df:fa:cd:fa:c3:05:b4:2a:79:
                    ac:5b:bb:b1:f3:f5:15:fc:0b:e2:cd:b1:e2:59:99:
                    a6:09:6c:37:aa:6a:8f:6d:fe:a6:4b:98:ad:73:bf:
                    cb:aa:d2:a0:83:59:15:33:f4:4d:9b:d3:6a:67:c9:
                    85:ae:07:27:34:8b:3a:d8:75:c7:f9:7f:c7:51:e7:
                    4b:cd:d4:68:06:0b:5b:9c:12:d8:33:5b:6b:10:8b:
                    b1:2e:a3:84:58:74:14:2c:76:a0:9b:32:21:65:67:
                    5f:1b:5d:42:7a:51:7e:58:7a:c5:03:48:50:40:bd:
                    89:26:9f:9f:a2:62:13:a7:a5:c0:81:f9:71:dc:c5:
                    67:e5:8f:ad:31:02:60:db:26:27:d5:8d:84:17:14:
                    74:bf:51:09:32:aa:a8:7b:a1:e0:65:27:ae:c6:56:
                    06:1f:cf:11:17:18:c4:0c:e0:1a:2c:76:d3:67:8c:
                    1f:6f:cb:97:b0:94:fc:09:d4:52:88:57:c9:0c:25:
                    20:32:77:e9:ec:0d:1a:b0:a7:83:db:45:f1:f2:d3:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:66:61:08:5F:57:25:40:DB:F6:04:6C:6B:50:D0:37:02:06:4B:F7
            X509v3 Authority Key Identifier:
                keyid:A8:00:BD:A0:0A:A4:C8:C4:38:8F:18:F8:E8:C5:35:79:D3:45:D2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/3138392e38392e3230392e302f32342d3234203d3e203238313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e8:90:0c:2b:6f:5a:e9:28:bb:49:c7:73:81:0b:58:db:f1:24:
         bb:85:10:04:38:f7:3d:8f:34:e0:92:5a:ee:0e:81:ee:0b:7e:
         a5:69:c3:17:df:5e:2a:31:a4:31:81:67:e4:7d:27:1a:5f:0d:
         f0:d9:82:da:83:36:cc:f7:01:bd:7f:96:9f:7f:2a:29:b6:e7:
         4f:89:33:d4:93:dc:ad:20:a2:74:33:d4:35:e8:16:1b:82:92:
         2b:bb:c6:f9:27:4d:90:63:6e:44:65:da:45:9e:8b:da:ab:05:
         71:f6:d2:2d:23:91:7c:52:6f:58:60:ac:e4:85:2c:e4:68:37:
         58:ea:55:64:2d:e8:ad:61:33:d3:32:bf:f4:17:87:a4:09:b3:
         38:3a:dd:8d:bc:ba:fb:cc:e3:ed:32:37:43:02:12:3d:83:3b:
         7e:05:c4:5b:44:37:cf:00:1f:5c:4a:f8:d6:24:c9:fc:7c:41:
         10:20:f6:39:60:4e:0d:fc:94:aa:c0:24:9e:9c:4a:7d:a6:28:
         f1:70:b7:bd:6f:69:40:d1:14:2f:dc:c9:b8:34:bc:ed:a8:32:
         68:ae:99:f9:e6:1e:0d:f3:dd:bc:14:8f:bc:bf:97:e3:6e:90:
         94:36:de:5e:c6:c0:64:b1:4a:81:77:00:52:79:f9:22:0f:95:
         6b:f5:f6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 18:39:58 2024 by rpki-client on console-fra.rpki-client.org