Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139362e302f32322d3232203d3e203238333238.roa
File:                     3138392e31342e3139362e302f32322d3232203d3e203238333238.roa (raw, json)
Hash identifier:          jgYDNubICnSmlTlPYraY88ayl9d6lqNInZmNMPrrwM8=
Subject key identifier:   7E:57:9D:BC:26:F9:BF:62:BD:AF:D2:01:D9:32:77:9A:98:49:CE:E1
Certificate issuer:       /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial:       4CC5686AB8694F9CBFF40FBC2A59D8C50009F955
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139362e302f32322d3232203d3e203238333238.roa
Signing time:             Fri 26 Apr 2024 16:57:57 +0000
ROA not before:           Fri 26 Apr 2024 16:52:57 +0000
ROA not after:            Fri 25 Apr 2025 16:57:57 +0000
asID:                     28328
IP address blocks:        189.14.196.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 12:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c5:68:6a:b8:69:4f:9c:bf:f4:0f:bc:2a:59:d8:c5:00:09:f9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
        Validity
            Not Before: Apr 26 16:52:57 2024 GMT
            Not After : Apr 25 16:57:57 2025 GMT
        Subject: CN=7E579DBC26F9BF62BDAFD201D932779A9849CEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:b8:fa:96:9b:81:d4:d4:41:62:40:20:fb:
                    5b:b7:c4:12:98:7d:3d:d1:56:05:b5:cd:4c:43:63:
                    b8:a1:9e:2c:3a:a3:95:2f:73:7f:36:30:fb:49:6a:
                    be:c0:96:4d:bf:2a:72:1c:62:d3:7a:3a:28:04:6b:
                    52:c5:89:2c:a0:0e:42:41:c8:3d:e8:36:ba:77:5c:
                    8f:09:b2:56:a8:91:ff:16:f0:6c:df:af:63:06:75:
                    cc:c9:88:78:0b:6d:19:82:92:52:b0:8f:e3:32:3b:
                    4c:25:fb:2c:9d:d3:08:95:d2:98:87:21:2b:60:a1:
                    81:e9:06:6e:69:15:d8:d0:a7:53:80:59:07:f3:25:
                    c2:41:8f:a5:9b:d4:cc:34:eb:36:16:e0:72:ae:a7:
                    5a:07:3d:24:15:7c:3f:ce:ee:96:a7:94:fe:e1:4c:
                    5a:75:5e:6a:05:3f:9a:bd:d2:07:fa:55:d2:6d:5e:
                    a5:06:e7:29:f7:4a:b5:66:de:3b:66:82:bd:74:d7:
                    c7:07:1f:bf:f7:ac:b5:69:4d:32:89:de:61:94:85:
                    3f:4a:9f:94:59:c0:b9:ae:2d:d3:e6:be:86:1b:06:
                    e6:1d:db:8d:de:d8:40:36:e8:09:3b:d9:09:56:9d:
                    95:4e:52:3a:34:d5:f4:a8:b1:55:77:04:3a:42:42:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:57:9D:BC:26:F9:BF:62:BD:AF:D2:01:D9:32:77:9A:98:49:CE:E1
            X509v3 Authority Key Identifier:
                keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139362e302f32322d3232203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:96:12:1c:8b:13:e9:b6:d9:21:d9:39:d9:20:21:39:6e:1a:
         fe:66:bb:d6:79:52:4f:48:64:de:ff:0c:69:d7:3f:97:47:22:
         60:99:6a:32:d2:c3:04:0d:cd:61:7e:55:6f:78:4c:10:b2:6e:
         e9:e5:0e:de:f1:d7:34:f6:65:c7:5c:f3:ac:97:ec:47:8b:ee:
         01:eb:cd:c7:ad:88:40:90:1d:38:92:d9:02:00:e1:1c:bc:f1:
         7e:c9:29:e5:21:89:1c:39:9a:88:06:f6:f3:77:d2:2d:f9:9a:
         c9:01:5b:8f:18:3f:80:93:ed:75:33:0c:16:51:7c:7f:3d:31:
         a1:ef:85:89:4c:18:41:1a:e6:15:8a:02:bc:4d:52:03:56:63:
         aa:f2:13:f8:68:a2:73:3a:39:f8:cc:af:b3:2a:92:5a:e6:84:
         ce:79:95:21:07:8e:a7:5d:eb:eb:e7:4c:3b:01:fd:7a:45:7b:
         b8:e4:2a:3c:bb:03:22:37:12:be:0d:f7:95:13:a8:e0:43:c8:
         de:6e:73:10:6d:de:21:10:c5:9f:70:bf:ef:b4:67:26:67:b0:
         cd:a0:c5:2b:1c:05:95:47:5f:16:42:8f:07:dd:4a:dc:a2:a0:
         09:c9:f7:60:0b:b6:52:bb:1f:a7:85:4a:ab:3a:85:19:82:16:
         21:c5:de:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 13:52:10 2024 by rpki-client on console-fra.rpki-client.org