Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e36382e302e302f31342d3134203d3e203232303835.roa
File:                     3138372e36382e302e302f31342d3134203d3e203232303835.roa (raw, json)
Hash identifier:          qP9RuosmqCYy2xHCjIFIFaN5eqCZqIMRVxa05Y+ky9Q=
Subject key identifier:   33:4F:15:EC:44:63:93:E2:36:DB:6C:CD:1E:27:53:8E:D8:22:CA:AF
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       7EB41D7C7AC64AFA0D079A486BAE066953891361
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e36382e302e302f31342d3134203d3e203232303835.roa
Signing time:             Wed 03 Apr 2024 18:31:54 +0000
ROA not before:           Wed 03 Apr 2024 18:26:54 +0000
ROA not after:            Wed 02 Apr 2025 18:31:54 +0000
asID:                     22085
IP address blocks:        187.68.0.0/14 maxlen: 14

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b4:1d:7c:7a:c6:4a:fa:0d:07:9a:48:6b:ae:06:69:53:89:13:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Apr  3 18:26:54 2024 GMT
            Not After : Apr  2 18:31:54 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:8a:4e:89:91:8c:4c:db:78:ed:a4:d8:e9:
                    c4:33:cf:ad:fe:48:5d:fc:c0:48:9b:bb:f3:09:fe:
                    e7:02:0b:75:e8:9a:4a:d1:85:06:f3:63:4f:70:f8:
                    f5:c7:25:bc:fb:d5:7b:6e:f9:94:4d:c0:b5:d5:ad:
                    4f:85:84:a9:86:e1:03:93:9c:f2:59:e7:3c:0d:74:
                    c9:1d:7a:bf:75:bc:91:6c:ad:9b:6d:ff:b8:36:03:
                    b8:33:c6:67:92:93:7b:46:9d:ca:70:dc:12:74:72:
                    3e:f1:0c:3e:b4:1a:15:44:98:dd:5f:b5:3b:70:58:
                    0d:f0:3c:92:ef:63:ee:88:a8:28:35:48:d6:aa:97:
                    31:e2:2e:ac:28:db:bf:a0:c5:71:13:8c:7a:ab:5f:
                    53:d1:ee:f8:55:e1:0e:69:f7:08:3d:98:21:1d:b8:
                    82:72:e7:fd:f4:d1:4b:62:23:ad:e4:f2:cc:e4:57:
                    1f:cb:eb:59:5c:bc:59:40:91:28:3c:18:0b:4e:ce:
                    8a:7c:66:69:c6:96:9a:c0:b3:4d:4e:f3:2c:7e:1c:
                    a3:2a:4e:96:6f:a4:d9:96:50:ad:4a:d5:c6:a6:e1:
                    49:b5:06:1e:58:d4:5c:48:28:aa:d8:4b:0c:c8:0b:
                    82:2e:d5:5e:3e:70:06:a7:65:87:c4:6e:4c:61:e9:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4F:15:EC:44:63:93:E2:36:DB:6C:CD:1E:27:53:8E:D8:22:CA:AF
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e36382e302e302f31342d3134203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.68.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         4f:19:21:b1:9d:73:59:c7:b7:1d:e3:5d:6b:36:16:4a:d6:2c:
         fd:4f:1f:1c:6b:0b:0b:b3:9a:c8:89:53:4d:ac:ca:32:4b:f8:
         24:47:3c:00:3c:65:eb:12:32:36:c9:e7:b9:33:a4:5e:7c:e3:
         ab:f2:32:93:54:a1:61:42:f5:e5:76:24:b9:58:a8:b6:57:02:
         01:7a:81:7a:01:0b:83:4c:2c:5b:32:45:3a:38:9a:37:7a:c1:
         a3:9a:fb:92:6a:36:10:83:20:41:27:79:da:ab:02:57:d3:00:
         fa:53:17:9f:46:d1:2d:2c:d7:31:45:b6:2c:d3:9a:4a:83:2f:
         eb:c9:10:e2:dc:37:3f:9f:ec:7e:a1:84:42:4d:1e:78:51:ee:
         68:6c:84:17:cb:e0:59:9f:1a:0f:2b:cb:76:73:75:46:ae:22:
         ff:0f:ee:02:44:2f:97:c2:da:3a:7f:db:f2:bb:f9:0d:14:ed:
         5d:c7:45:c6:ea:88:00:3a:96:00:97:de:65:77:40:db:0e:85:
         9f:0b:a9:27:15:fb:27:8b:a8:60:8d:d1:e9:ec:68:90:e6:6f:
         61:ff:5d:35:65:fe:8d:c8:a8:c4:89:f2:8c:f3:ee:3e:a2:26:
         7e:4a:b3:91:06:d1:3b:05:36:e5:fd:16:4a:fd:08:4f:75:7a:
         2b:51:40:48
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUfrQdfHrGSvoNB5pIa64GaVOJE2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVFQkVFRkQ0NUEwRDkwQjVFNjBDRDhENEI0Mzg0MDk4
MzUzRTgyODAeFw0yNDA0MDMxODI2NTRaFw0yNTA0MDIxODMxNTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTg0RjhBNEU4OTkxOEM0Q0RC
NzhFREE0RDhFOUM0MzNDRkFERkU0ODVERkNDMDQ4OUJCQkYzMDlGRUU3MDIwQjc1
RTg5QTRBRDE4NTA2RjM2MzRGNzBGOEY1QzcyNUJDRkJENTdCNkVGOTk0NERDMEI1
RDVBRDRGODU4NEE5ODZFMTAzOTM5Q0YyNTlFNzNDMEQ3NEM5MUQ3QUJGNzVCQzkx
NkNBRDlCNkRGRkI4MzYwM0I4MzNDNjY3OTI5MzdCNDY5RENBNzBEQzEyNzQ3MjNF
RjEwQzNFQjQxQTE1NDQ5OERENUZCNTNCNzA1ODBERjAzQzkyRUY2M0VFODhBODI4
MzU0OEQ2QUE5NzMxRTIyRUFDMjhEQkJGQTBDNTcxMTM4QzdBQUI1RjUzRDFFRUY4
NTVFMTBFNjlGNzA4M0Q5ODIxMURCODgyNzJFN0ZERjREMTRCNjIyM0FERTRGMkND
RTQ1NzFGQ0JFQjU5NUNCQzU5NDA5MTI4M0MxODBCNEVDRThBN0M2NjY5QzY5NjlB
QzBCMzRENEVGMzJDN0UxQ0EzMkE0RTk2NkZBNEQ5OTY1MEFENEFENUM2QTZFMTQ5
QjUwNjFFNThENDVDNDgyOEFBRDg0QjBDQzgwQjgyMkVENTVFM0U3MDA2QTc2NTg3
QzQ2RTRDNjFFOUU0MzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmE+KTomRjEzbeO2k2OnEM8+t/khd/MBIm7vzCf7nAgt16JpK0YUG
82NPcPj1xyW8+9V7bvmUTcC11a1PhYSphuEDk5zyWec8DXTJHXq/dbyRbK2bbf+4
NgO4M8ZnkpN7Rp3KcNwSdHI+8Qw+tBoVRJjdX7U7cFgN8DyS72PuiKgoNUjWqpcx
4i6sKNu/oMVxE4x6q19T0e74VeEOafcIPZghHbiCcuf99NFLYiOt5PLM5Fcfy+tZ
XLxZQJEoPBgLTs6KfGZpxpaawLNNTvMsfhyjKk6Wb6TZllCtStXGpuFJtQYeWNRc
SCiq2EsMyAuCLtVePnAGp2WHxG5MYenkNwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FDNPFexEY5PiNttszR4nU47YIsqvMB8GA1UdIwQYMBaAFNXr7v1FoNkLXmDNjUtD
hAmDU+goMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hGWXFjckxWdjFKSld6
dlVGZ1I4cVp6cGlkTFFUdGtCa1haczZnZVFkdWllLzEvRDVFQkVFRkQ0NUEwRDkw
QjVFNjBDRDhENEI0Mzg0MDk4MzUzRTgyOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENUVCRUVGRDQ1QTBEOTBCNUU2MENEOEQ0QjQzODQwOTgzNTNF
ODI4LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IRllxY3JMVnYxSkpXenZVRmdS
OHFaenBpZExRVHRrQmtYWnM2Z2VRZHVpZS8xLzMxMzgzNzJlMzYzODJlMzAyZTMw
MmYzMTM0MmQzMTM0MjAzZDNlMjAzMjMyMzAzODM1LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCu0QwDQYJ
KoZIhvcNAQELBQADggEBAE8ZIbGdc1nHtx3jXWs2FkrWLP1PHxxrCwuzmsiJU02s
yjJL+CRHPAA8ZesSMjbJ57kzpF5846vyMpNUoWFC9eV2JLlYqLZXAgF6gXoBC4NM
LFsyRTo4mjd6waOa+5JqNhCDIEEnedqrAlfTAPpTF59G0S0s1zFFtizTmkqDL+vJ
EOLcNz+f7H6hhEJNHnhR7mhshBfL4FmfGg8ry3ZzdUauIv8P7gJEL5fC2jp/2/K7
+Q0U7V3HRcbqiAA6lgCX3mV3QNsOhZ8LqScV+yeLqGCN0ensaJDmb2H/XTVl/o3I
qMSJ8ozz7j6iJn5Ks5EG0TsFNuX9Fkr9CE91eitRQEg=
-----END CERTIFICATE-----
Generated at Tue Jul 16 20:13:36 2024 by rpki-client on console-fra.rpki-client.org