Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e32342e302e302f31342d3134203d3e203232303835.roa
File:                     3138372e32342e302e302f31342d3134203d3e203232303835.roa (raw, json)
Hash identifier:          2BrMEmroH7VspHxbHYvsCaezwVv+NZBusiICH2pdGPA=
Subject key identifier:   D3:59:F8:B5:9E:27:E7:E7:6E:17:60:10:A9:AC:65:6D:11:75:12:48
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       14CE1AF93F5B9A33B1E88007FC10626EC230FA13
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e32342e302e302f31342d3134203d3e203232303835.roa
Signing time:             Wed 03 Apr 2024 18:31:54 +0000
ROA not before:           Wed 03 Apr 2024 18:26:54 +0000
ROA not after:            Wed 02 Apr 2025 18:31:54 +0000
asID:                     22085
IP address blocks:        187.24.0.0/14 maxlen: 14

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ce:1a:f9:3f:5b:9a:33:b1:e8:80:07:fc:10:62:6e:c2:30:fa:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Apr  3 18:26:54 2024 GMT
            Not After : Apr  2 18:31:54 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:04:83:c3:0e:86:73:84:4b:f4:ef:1b:05:
                    31:2a:6f:f5:4e:00:cf:9a:71:cb:8e:aa:41:ac:20:
                    d5:4a:d2:d7:25:91:51:79:15:4b:6e:76:9b:3c:a3:
                    48:8c:7a:25:6c:c2:9a:5f:b6:55:59:e0:24:07:65:
                    60:1b:30:01:71:06:89:15:73:f7:b7:bd:97:8c:96:
                    3e:fc:1f:8a:e2:57:c4:a5:9a:98:c8:16:72:6a:96:
                    50:8a:12:3e:82:38:fa:10:6d:0e:5a:2d:f9:b7:22:
                    64:da:cd:33:e7:17:01:c8:2c:a7:72:b4:8b:f7:f2:
                    46:c3:e9:1f:06:b4:72:09:f7:1f:b3:56:19:7e:aa:
                    7c:3c:59:d8:b6:d5:cf:22:16:05:e5:af:07:da:7e:
                    ba:e8:c2:bf:c4:e0:de:e5:2a:18:e4:04:07:02:77:
                    ce:64:06:f0:bd:b3:43:85:e2:7b:d8:4b:cf:32:89:
                    46:86:54:90:20:7b:68:d6:ca:36:f6:eb:27:f5:3d:
                    9d:a2:84:c0:88:bd:3b:07:87:01:9f:6d:c8:8f:3d:
                    6a:01:8d:ed:90:c8:fd:09:6f:50:3c:56:77:b2:fb:
                    16:28:c8:20:db:8f:11:d3:0e:c6:dc:f1:64:ce:60:
                    e9:7e:0e:96:bb:ad:df:42:30:99:63:87:fc:ad:c2:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:59:F8:B5:9E:27:E7:E7:6E:17:60:10:A9:AC:65:6D:11:75:12:48
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e32342e302e302f31342d3134203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.24.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         99:3d:7a:19:45:37:a9:46:2c:74:7e:46:0c:e9:11:a9:7c:ff:
         33:bb:7b:b1:ee:2d:a8:38:45:b2:a1:a1:dd:b4:aa:e6:c5:58:
         8f:7a:cc:05:51:b3:7c:9e:a8:0c:ac:d0:8b:b3:1d:d2:81:0f:
         e2:cf:c8:4b:02:be:47:54:54:58:0f:58:38:38:5e:b4:b7:f7:
         f6:da:99:3f:8e:68:93:bf:b5:72:a8:7b:77:aa:a4:7c:e0:c3:
         18:96:b8:1b:1f:7b:0e:6a:f8:30:5b:50:98:9f:64:f5:c9:35:
         86:65:a9:1f:a1:08:68:fc:23:43:c3:16:c4:82:41:f6:f4:7d:
         23:75:14:49:92:29:16:b7:5f:54:60:ae:cb:68:53:92:cf:54:
         b8:0c:79:84:04:b9:88:a6:02:bd:15:50:bb:e0:8f:43:f1:63:
         51:1a:43:f4:65:6f:4b:28:76:a6:5a:f3:a9:f7:06:9a:36:56:
         18:f4:04:8d:b6:d2:ef:8d:08:70:4f:75:e3:93:67:aa:2c:bd:
         9c:ab:de:1f:af:cd:ec:ea:2c:72:69:ed:c7:4f:40:00:85:b2:
         38:2f:7d:05:8f:4b:42:53:f8:3c:26:86:1e:b2:41:b5:67:eb:
         8e:75:f6:b2:c9:94:87:c2:50:eb:d5:f8:af:49:9b:41:e8:bf:
         48:dc:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 18:33:28 2024 by rpki-client on console-ams.rpki-client.org