Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/3138362e3233372e3130302e302f32322d3233203d3e20323730363234.roa
File:                     3138362e3233372e3130302e302f32322d3233203d3e20323730363234.roa (raw, json)
Hash identifier:          6K5fzHAhy7cZf6JKyHMaGG68SH0I7lIBJiTMF7OkEYg=
Subject key identifier:   5B:7A:8B:D4:64:DB:95:0B:FD:56:55:F0:41:BF:8B:1E:D5:3C:B9:5C
Certificate issuer:       /CN=803A7C5B6496990909FCECFA71E79A79E3580104
Certificate serial:       3D26DAA4FFC502E1AED8CE971A974B78C9166708
Authority key identifier: 80:3A:7C:5B:64:96:99:09:09:FC:EC:FA:71:E7:9A:79:E3:58:01:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/803A7C5B6496990909FCECFA71E79A79E3580104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/3138362e3233372e3130302e302f32322d3233203d3e20323730363234.roa
Signing time:             Fri 24 May 2024 16:58:22 +0000
ROA not before:           Fri 24 May 2024 16:53:22 +0000
ROA not after:            Fri 23 May 2025 16:58:22 +0000
asID:                     270624
IP address blocks:        186.237.100.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 11:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:26:da:a4:ff:c5:02:e1:ae:d8:ce:97:1a:97:4b:78:c9:16:67:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803A7C5B6496990909FCECFA71E79A79E3580104
        Validity
            Not Before: May 24 16:53:22 2024 GMT
            Not After : May 23 16:58:22 2025 GMT
        Subject: CN=5B7A8BD464DB950BFD5655F041BF8B1ED53CB95C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:c9:54:f8:42:eb:9e:73:b5:86:0c:d9:b3:
                    c1:6a:60:e7:b5:41:90:56:6f:f0:68:7d:5c:f6:55:
                    57:7f:b8:db:30:35:88:fa:66:e1:38:52:d5:ea:45:
                    4b:25:53:49:a2:95:27:90:fe:07:68:08:08:a3:69:
                    c6:bf:88:cc:e0:0d:bf:47:a6:20:83:61:62:6e:10:
                    ab:85:59:6b:e1:98:5f:8e:41:46:10:db:9d:28:3c:
                    ad:97:6f:74:a1:a6:6e:81:7f:0d:5a:96:35:60:5b:
                    9c:4d:d2:36:69:8c:94:e3:58:0a:b7:9a:ce:c7:ad:
                    e6:f1:c7:57:03:7f:09:ab:90:08:4c:c8:de:c8:b3:
                    8e:83:b0:f1:47:c3:37:d5:02:5b:66:28:54:a4:8d:
                    cf:b1:05:ba:07:9b:0e:14:96:c1:b1:23:49:f5:7c:
                    dd:6e:67:91:c9:e3:26:05:49:34:f7:e7:14:1c:ed:
                    a3:c5:00:a6:90:b1:87:09:65:e7:f5:80:db:9d:4e:
                    f8:71:b5:44:f0:a6:e4:af:b5:01:fc:3e:3f:ea:5a:
                    6f:c3:09:00:04:cf:3b:db:47:9e:fe:0a:db:e4:74:
                    3f:c0:e4:f1:85:07:d9:49:12:c4:c5:20:ad:b9:f6:
                    2c:7e:be:c7:a2:59:28:4a:26:d9:49:50:56:59:53:
                    fb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7A:8B:D4:64:DB:95:0B:FD:56:55:F0:41:BF:8B:1E:D5:3C:B9:5C
            X509v3 Authority Key Identifier:
                keyid:80:3A:7C:5B:64:96:99:09:09:FC:EC:FA:71:E7:9A:79:E3:58:01:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/803A7C5B6496990909FCECFA71E79A79E3580104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/803A7C5B6496990909FCECFA71E79A79E3580104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/3138362e3233372e3130302e302f32322d3233203d3e20323730363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:f4:1b:37:a4:04:78:69:ea:75:fc:9f:c3:84:f4:0d:d3:a7:
         5d:6e:65:e1:68:90:bc:d1:48:e1:90:36:f1:56:17:67:10:d8:
         04:d5:b3:2b:2a:f1:9f:8c:d2:6b:63:20:4d:69:ee:43:ad:b2:
         3d:f8:7a:fd:d2:c1:34:4a:8b:b2:ec:9b:e5:82:d8:87:5c:75:
         25:b6:23:0c:0c:3f:eb:92:ae:1d:57:6d:65:29:57:07:b1:38:
         52:e6:3e:ff:c8:30:7f:5e:6f:b7:6e:ee:ff:1e:aa:85:46:84:
         39:e9:fe:84:3b:6e:35:c9:6a:0e:07:8d:86:36:1d:f0:4c:81:
         f4:77:a6:55:99:09:8e:34:71:5d:79:4c:47:c6:e6:25:53:98:
         60:d6:ac:b4:57:cf:ee:22:6c:79:e6:6e:80:4b:a8:55:e5:92:
         a3:58:ef:7b:c9:e2:d4:86:54:45:c9:4e:23:1a:95:46:91:c6:
         c8:1a:ff:7d:01:1e:3e:fd:1e:ea:89:b2:1e:b7:e9:ef:2c:91:
         c2:50:99:38:de:70:30:4b:ee:cf:fd:73:b5:a1:45:0d:46:41:
         74:53:d8:15:84:0a:dc:ed:5e:2e:09:9d:72:b5:89:1c:ac:bd:
         62:1e:26:1c:f4:a2:e0:3c:15:7d:0e:b8:11:4f:4b:2f:71:02:
         b6:34:6b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 14:39:50 2024 by rpki-client on console-fra.rpki-client.org