Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e39362e302f32322d3232203d3e203238323736.roa
File:                     3138372e3130322e39362e302f32322d3232203d3e203238323736.roa (raw, json)
Hash identifier:          VqLgLGpSWUbpJrhDG4BfNJub58fRznt6EWAG3dLsawE=
Subject key identifier:   3A:37:6C:8F:0D:8F:D5:2D:7D:FB:53:33:8A:31:57:A1:14:07:80:D1
Certificate issuer:       /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial:       751FA8CC65138A63266ABEEAFA7B29EA967B57F3
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e39362e302f32322d3232203d3e203238323736.roa
Signing time:             Tue 23 Apr 2024 19:03:45 +0000
ROA not before:           Tue 23 Apr 2024 18:58:45 +0000
ROA not after:            Tue 22 Apr 2025 19:03:45 +0000
asID:                     28276
IP address blocks:        187.102.96.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1f:a8:cc:65:13:8a:63:26:6a:be:ea:fa:7b:29:ea:96:7b:57:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Validity
            Not Before: Apr 23 18:58:45 2024 GMT
            Not After : Apr 22 19:03:45 2025 GMT
        Subject: CN=3A376C8F0D8FD52D7DFB53338A3157A1140780D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:04:dc:5c:f7:09:63:74:b5:ee:5a:f1:33:
                    64:9f:a4:a7:dd:4c:44:74:53:86:45:19:6f:b4:39:
                    79:9a:f2:30:bd:07:95:7d:c8:13:19:40:da:cf:98:
                    06:7a:5c:00:84:68:6a:61:af:ea:e4:ef:bb:66:06:
                    33:f3:22:47:27:7a:e3:4d:37:94:e7:d2:3f:92:eb:
                    4f:2d:80:eb:07:6b:d0:95:68:82:73:c8:09:a3:80:
                    e3:84:47:8d:da:79:52:5e:a1:11:30:c1:f7:95:b0:
                    4e:2c:1a:10:5b:15:8b:fc:05:d2:37:79:e5:50:70:
                    51:71:b1:fe:14:23:ea:e1:8f:94:9d:e9:5b:8c:f2:
                    9d:8d:12:ef:6c:3d:ec:16:98:24:12:a0:36:0c:bb:
                    09:96:67:ab:c9:13:29:d3:ef:b5:4f:92:c1:aa:98:
                    9f:e2:13:00:3c:ea:bf:76:c8:f9:66:d7:a7:b8:3e:
                    19:27:8e:16:fa:bc:93:98:62:7a:c9:4e:5f:e9:44:
                    cc:f7:71:e0:ae:b4:2a:52:bd:d3:78:98:22:73:42:
                    fc:09:bc:b4:1f:ae:84:3f:86:70:f2:13:a9:50:c6:
                    30:f8:31:1f:78:46:a6:67:b0:ba:98:87:38:b9:49:
                    38:fa:39:f9:49:20:fe:d9:1a:38:fb:9f:c3:3d:23:
                    76:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:37:6C:8F:0D:8F:D5:2D:7D:FB:53:33:8A:31:57:A1:14:07:80:D1
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e39362e302f32322d3232203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:a0:18:9b:8d:5a:d2:bc:a6:80:05:1f:fc:91:03:49:45:17:
         d1:11:99:2c:07:aa:14:63:15:34:d3:69:f1:2d:19:fb:0c:02:
         f8:f9:57:5c:4b:00:76:0d:71:1c:2c:fe:c2:a8:3a:e3:48:01:
         d0:0a:0f:94:3a:ae:c4:ce:0f:9e:f6:fd:be:ef:fa:b3:b1:c9:
         4a:e8:91:74:1c:5f:09:21:15:1e:f5:59:cd:eb:4a:34:71:b4:
         8f:ab:1b:10:54:5a:2b:6d:22:85:fc:5c:4f:93:08:2a:0d:53:
         95:59:02:02:15:34:db:2b:6c:9b:1b:d2:e3:25:26:43:cc:97:
         5d:7e:7c:fd:16:b5:a2:e5:f2:0d:9c:28:63:e3:94:84:f9:db:
         5f:6a:6a:46:b0:ff:57:d1:66:93:b9:64:c0:27:ce:ce:9e:2d:
         36:2f:0b:8b:b5:42:a8:34:f1:94:87:89:14:ac:ad:b9:48:d6:
         fc:c7:24:e0:d5:f3:0c:03:cf:f1:a9:2a:89:98:42:56:92:b8:
         6b:f1:b7:70:20:41:cc:72:98:e4:18:db:26:cd:62:bf:d3:44:
         7d:49:40:eb:8b:4a:12:77:a9:b8:8b:a9:e8:04:7a:a1:38:77:
         e3:72:e3:cc:6c:9a:ff:1a:53:e8:85:a2:21:02:b6:eb:27:c9:
         a1:6d:a4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org