Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e39362e302f32312d3231203d3e203238323736.roa
File:                     3138372e3130322e39362e302f32312d3231203d3e203238323736.roa (raw, json)
Hash identifier:          eJUuYRV4Nkt97UrsdlZTta62lNk0frbFyY5Mmu8Nyq0=
Subject key identifier:   41:D9:E0:A1:1A:4B:91:E9:4D:3D:BC:27:73:29:E3:D2:7B:D2:7D:F6
Certificate issuer:       /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial:       72F611A9D8D2242A0F3EC0BE8995F9DA4EC7D23E
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e39362e302f32312d3231203d3e203238323736.roa
Signing time:             Tue 23 Apr 2024 19:03:38 +0000
ROA not before:           Tue 23 Apr 2024 18:58:38 +0000
ROA not after:            Tue 22 Apr 2025 19:03:38 +0000
asID:                     28276
IP address blocks:        187.102.96.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f6:11:a9:d8:d2:24:2a:0f:3e:c0:be:89:95:f9:da:4e:c7:d2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Validity
            Not Before: Apr 23 18:58:38 2024 GMT
            Not After : Apr 22 19:03:38 2025 GMT
        Subject: CN=41D9E0A11A4B91E94D3DBC277329E3D27BD27DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:f6:9e:25:9a:ce:2e:b2:e7:06:5e:99:5c:08:
                    92:72:88:9e:6a:43:8c:66:dd:c6:f5:78:cc:b0:ab:
                    e3:2f:a7:35:e2:19:f7:57:7e:86:2e:79:78:9e:78:
                    52:10:2e:71:22:27:08:f3:41:35:70:e6:d1:64:27:
                    e9:dd:1b:a6:e8:ab:ab:a4:14:ac:2d:e7:cd:ef:7c:
                    c1:48:85:46:a6:df:f4:67:09:c9:9e:ee:46:f6:15:
                    a1:84:4c:bd:e8:ad:3b:80:69:10:00:d5:fa:14:00:
                    d3:82:07:98:ed:ee:73:d8:5a:bf:ad:82:ba:14:e7:
                    70:8a:81:50:8c:e8:c2:5c:0c:62:2f:04:09:fc:8b:
                    98:04:1d:24:fb:90:43:f0:71:5d:94:d1:4a:e5:cf:
                    4d:60:a1:4c:1d:55:b6:a3:38:77:48:d5:44:cc:95:
                    c1:6b:89:c9:51:21:20:4e:06:94:87:33:20:f6:06:
                    9d:4f:19:70:6a:e4:1b:d3:cd:26:85:dd:f0:e6:08:
                    b0:fa:75:a2:83:07:7f:44:65:4d:ca:67:fe:3f:04:
                    54:00:df:ec:50:ab:c3:ec:a9:dd:c5:a1:04:00:21:
                    88:36:10:2b:d7:c3:91:0a:9c:39:9f:0d:2a:ea:23:
                    98:7a:dc:cb:05:f3:60:d3:1d:4e:98:48:3c:0c:29:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D9:E0:A1:1A:4B:91:E9:4D:3D:BC:27:73:29:E3:D2:7B:D2:7D:F6
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e39362e302f32312d3231203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:b9:f0:20:56:72:53:b8:cd:25:b1:bf:ae:63:9f:bd:de:eb:
         74:c9:61:10:c2:75:6d:7c:79:11:90:a8:03:ee:e6:5b:08:d8:
         dd:dc:57:93:31:1d:dd:b3:a9:7d:c9:6d:93:3e:e3:43:de:4a:
         ad:b4:86:a1:77:b7:1e:8c:6f:51:6a:fe:70:e6:87:1b:e1:95:
         6e:e9:96:ec:2d:59:b6:92:a8:15:28:45:fc:1a:7b:e2:b4:e2:
         86:87:4d:03:e3:ce:6f:05:33:7e:34:3e:90:ee:e0:7a:2f:8b:
         c0:26:47:95:9d:c3:56:64:76:d4:c0:ae:6e:04:91:e8:6c:85:
         46:02:dd:0e:1f:51:57:e1:c2:84:8e:d6:6e:8e:ef:8f:1b:21:
         35:8e:b8:37:ef:97:0f:44:69:94:fa:fe:9f:89:d5:e5:bd:fe:
         e0:5e:98:39:cb:12:b2:20:c1:7b:36:66:d5:bb:df:3e:9e:f2:
         b0:f2:d3:b2:4b:a6:6f:f1:62:fa:e5:97:9a:d2:d8:12:05:cb:
         3d:9a:6a:12:26:7d:eb:30:ca:f3:9c:a7:57:00:6e:32:ee:52:
         77:46:9c:de:89:98:65:0c:50:ac:c6:17:10:3e:40:67:f7:97:
         ff:92:1d:78:16:fa:c3:5a:8e:86:de:76:ab:94:1c:32:6e:0d:
         9a:d4:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org