Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3139312e3234342e302e302f31342d3134203d3e203232303835.roa
File:                     3139312e3234342e302e302f31342d3134203d3e203232303835.roa (raw, json)
Hash identifier:          mEFwpL9HEDtBWBp5L728fXAbJxC8IzgQ2HZSV+tEXpk=
Subject key identifier:   13:93:8B:1F:89:12:EE:83:B9:27:FE:DD:CC:7B:C2:69:0C:9E:E3:AE
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       7893290585B6E1FB64E554463056691C84B02029
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3139312e3234342e302e302f31342d3134203d3e203232303835.roa
Signing time:             Wed 03 Apr 2024 18:31:53 +0000
ROA not before:           Wed 03 Apr 2024 18:26:53 +0000
ROA not after:            Wed 02 Apr 2025 18:31:53 +0000
asID:                     22085
IP address blocks:        191.244.0.0/14 maxlen: 14

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:93:29:05:85:b6:e1:fb:64:e5:54:46:30:56:69:1c:84:b0:20:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Apr  3 18:26:53 2024 GMT
            Not After : Apr  2 18:31:53 2025 GMT
        Subject: CN=3082010A0282010100E0EAFF0F9EE4A2480E7EF3BA799C8A16407CC4BC5300AB4258D82CC97070BB60B3CA8A3DCE4DC00A9D7DF0271E79365897110D3CA4D1AB641E68E01621B8D2ECE96E2E0154C0EF07AAF1C22A1BD1D283ED13BA309DA5E10785AC22784D4AA616B643707453F7236CEEDE778EAD6BE59FA1BF9364223840B539A5E7A2481DEEAD610B5965D2348DDB98D743854ADF877E30B682554BABDF9C365EA03542C9C73FA8D3AE512928384A08CB791151E3C64563836BD161C5D7E0B75D5FA3351140B60E6FA7DC5C64CA643993F3A9B9E488CA2D1792973010FA842A551C729BD8E68CC9BDBAA21EE8C4A772B3C2D1B0378E14F7E6292E44A74524B034C23CC64E151B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ea:ff:0f:9e:e4:a2:48:0e:7e:f3:ba:79:9c:
                    8a:16:40:7c:c4:bc:53:00:ab:42:58:d8:2c:c9:70:
                    70:bb:60:b3:ca:8a:3d:ce:4d:c0:0a:9d:7d:f0:27:
                    1e:79:36:58:97:11:0d:3c:a4:d1:ab:64:1e:68:e0:
                    16:21:b8:d2:ec:e9:6e:2e:01:54:c0:ef:07:aa:f1:
                    c2:2a:1b:d1:d2:83:ed:13:ba:30:9d:a5:e1:07:85:
                    ac:22:78:4d:4a:a6:16:b6:43:70:74:53:f7:23:6c:
                    ee:de:77:8e:ad:6b:e5:9f:a1:bf:93:64:22:38:40:
                    b5:39:a5:e7:a2:48:1d:ee:ad:61:0b:59:65:d2:34:
                    8d:db:98:d7:43:85:4a:df:87:7e:30:b6:82:55:4b:
                    ab:df:9c:36:5e:a0:35:42:c9:c7:3f:a8:d3:ae:51:
                    29:28:38:4a:08:cb:79:11:51:e3:c6:45:63:83:6b:
                    d1:61:c5:d7:e0:b7:5d:5f:a3:35:11:40:b6:0e:6f:
                    a7:dc:5c:64:ca:64:39:93:f3:a9:b9:e4:88:ca:2d:
                    17:92:97:30:10:fa:84:2a:55:1c:72:9b:d8:e6:8c:
                    c9:bd:ba:a2:1e:e8:c4:a7:72:b3:c2:d1:b0:37:8e:
                    14:f7:e6:29:2e:44:a7:45:24:b0:34:c2:3c:c6:4e:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:93:8B:1F:89:12:EE:83:B9:27:FE:DD:CC:7B:C2:69:0C:9E:E3:AE
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3139312e3234342e302e302f31342d3134203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.244.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         52:1f:fc:44:32:a7:74:dc:b4:dc:d7:97:94:a7:bf:b9:dc:7a:
         8a:2e:4d:0a:fc:3a:90:fe:54:75:8a:1c:92:08:45:d4:18:90:
         1f:e1:31:ba:53:3d:a8:fc:aa:0f:39:b2:47:0a:81:00:cf:f7:
         c2:bf:96:c1:fa:85:96:7f:fb:8d:9a:40:38:0c:71:54:1d:98:
         ca:fc:5e:e5:46:a1:36:8d:f9:af:5e:13:8c:73:de:10:c5:3e:
         60:d7:d2:e6:18:11:5f:a0:b3:59:5b:67:59:b1:9c:16:e0:73:
         10:cb:26:cb:4b:19:a4:3b:5b:7d:f4:c5:a6:4f:99:58:13:15:
         08:3e:3c:3e:59:75:b4:37:22:69:32:f9:0e:53:1a:41:09:df:
         22:b2:56:79:c1:d5:db:4b:50:4f:11:3a:2e:4b:bb:96:88:18:
         6c:35:41:f1:57:44:8e:21:e1:79:e8:6c:f0:26:1e:9c:0a:01:
         21:c4:ff:e4:d5:89:83:4b:46:28:5d:b4:04:cf:4c:a6:dc:3b:
         7a:95:40:64:3d:b4:74:73:8b:16:58:df:d4:69:93:a7:0b:1e:
         99:68:d8:00:3a:22:1c:89:15:fa:26:a5:b1:32:ce:94:26:5b:
         0c:ba:4c:e0:f5:44:c2:55:e7:2d:a2:b2:ac:ae:3e:2f:ec:08:
         8d:e8:a1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 18:30:11 2024 by rpki-client on console-fra.rpki-client.org