Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230382e302f32302d3233203d3e203238333238.roa
File:                     3138392e31342e3230382e302f32302d3233203d3e203238333238.roa (raw, json)
Hash identifier:          vQFCsokDb6PVIahIIvhWPjNovYOoir2gTFIh8rjZUcE=
Subject key identifier:   DC:B6:B8:60:F0:F8:4C:07:1C:94:F4:24:21:CB:CE:12:98:05:02:5C
Certificate issuer:       /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial:       7EC61C815A27B0D27965BCBC4121DC3AC192428C
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230382e302f32302d3233203d3e203238333238.roa
Signing time:             Mon 29 Jul 2024 12:37:21 +0000
ROA not before:           Mon 29 Jul 2024 12:32:21 +0000
ROA not after:            Mon 28 Jul 2025 12:37:21 +0000
asID:                     28328
IP address blocks:        189.14.208.0/20 maxlen: 23

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 13:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c6:1c:81:5a:27:b0:d2:79:65:bc:bc:41:21:dc:3a:c1:92:42:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
        Validity
            Not Before: Jul 29 12:32:21 2024 GMT
            Not After : Jul 28 12:37:21 2025 GMT
        Subject: CN=DCB6B860F0F84C071C94F42421CBCE129805025C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:7e:fc:b0:aa:4c:a1:51:c8:34:a6:e5:60:
                    5b:07:d0:d9:b9:ac:d4:06:3c:d1:0d:ad:a5:e2:0c:
                    5e:aa:03:72:d3:65:8b:a8:b0:53:a2:b5:da:67:de:
                    d3:f0:c8:e4:81:fe:3f:38:d0:d8:3c:63:23:fe:86:
                    a6:50:c1:58:a7:88:56:75:7e:ce:e1:7f:03:16:c4:
                    3c:82:01:a6:b5:34:50:a4:19:6a:fe:6e:ac:87:74:
                    62:4f:e4:5d:e6:24:af:91:d2:5c:51:71:57:11:ad:
                    ee:d8:1a:6b:9a:80:41:f9:8d:b9:2f:5b:f5:eb:a1:
                    60:eb:65:60:56:02:86:48:3e:e0:72:e8:6b:a6:6e:
                    b2:c5:a6:37:b0:6e:21:c3:59:34:9c:33:8c:69:52:
                    8e:95:be:35:27:fc:c9:a9:d8:73:df:f6:86:cb:6a:
                    96:da:e5:43:fd:3c:8f:e7:fd:1c:59:7e:ff:f9:40:
                    f0:5e:df:ab:d8:8f:70:9a:67:cf:25:bd:65:ad:f6:
                    0c:73:d7:fd:81:a4:4b:3d:49:58:a5:0e:03:44:fa:
                    43:e7:25:88:dd:33:e5:24:ce:d3:a6:86:87:90:5f:
                    d8:55:30:bd:94:1f:db:bb:ae:65:71:24:b5:0f:02:
                    27:a0:60:20:ab:34:37:9f:ce:2f:d4:77:e1:30:db:
                    93:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B6:B8:60:F0:F8:4C:07:1C:94:F4:24:21:CB:CE:12:98:05:02:5C
            X509v3 Authority Key Identifier:
                keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230382e302f32302d3233203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:bc:a4:73:af:c6:58:e1:f7:70:df:b1:8b:1e:c9:b4:01:52:
         8e:96:22:7b:6d:5f:51:d9:a5:6b:af:47:fa:a3:8c:60:b9:ed:
         d6:9b:82:4f:d3:89:48:1f:ca:7b:d8:aa:69:35:3e:f6:dd:35:
         16:a0:5d:9b:d7:ad:f1:37:2a:2c:44:d2:8a:23:5e:88:ad:ee:
         6f:27:5d:84:92:8e:c4:25:c9:28:47:34:b3:f8:1d:aa:12:e4:
         b9:ae:d0:10:b5:24:2a:86:76:00:b0:60:21:3e:d7:7c:b4:7f:
         85:28:d6:a8:b0:f6:df:72:5f:18:d1:59:7a:e1:8e:b2:00:b5:
         71:6a:b6:c2:85:07:98:4a:7d:c7:d1:e6:69:d6:a1:a1:d2:e4:
         87:1e:1f:28:b0:ca:45:38:69:3a:c3:1a:4b:3b:c9:3c:23:f0:
         20:c7:67:df:4e:89:32:e2:82:a5:5f:7d:88:88:a7:85:68:73:
         19:71:6e:f8:78:48:07:35:5a:9c:82:fb:0e:77:6f:9d:21:9b:
         d0:5c:73:82:5a:3c:4c:e8:ab:b6:a4:9e:d9:47:5b:1d:7b:d1:
         40:0e:59:94:53:60:57:18:2b:56:83:d5:c8:0e:30:34:d6:e1:
         c5:42:38:85:9e:2f:27:e6:12:1c:a8:c9:64:f2:ba:1c:a8:a5:
         d2:69:9a:79
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUfsYcgVonsNJ5Zby8QSHcOsGSQowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUIyRDJERjBBOTJEQTM3MzNERDcyMjU1MTVBNjNFM0Q2
QkY2NTc4NTAeFw0yNDA3MjkxMjMyMjFaFw0yNTA3MjgxMjM3MjFaMDMxMTAvBgNV
BAMTKERDQjZCODYwRjBGODRDMDcxQzk0RjQyNDIxQ0JDRTEyOTgwNTAyNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShX78sKpMoVHINKblYFsH0Nm5
rNQGPNENraXiDF6qA3LTZYuosFOitdpn3tPwyOSB/j840Ng8YyP+hqZQwViniFZ1
fs7hfwMWxDyCAaa1NFCkGWr+bqyHdGJP5F3mJK+R0lxRcVcRre7YGmuagEH5jbkv
W/XroWDrZWBWAoZIPuBy6GumbrLFpjewbiHDWTScM4xpUo6VvjUn/Mmp2HPf9obL
apba5UP9PI/n/RxZfv/5QPBe36vYj3CaZ88lvWWt9gxz1/2BpEs9SVilDgNE+kPn
JYjdM+UkztOmhoeQX9hVML2UH9u7rmVxJLUPAiegYCCrNDefzi/Ud+Ew25PTAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU3La4YPD4TAcclPQkIcvOEpgFAlwwHwYDVR0j
BBgwFoAUWy0t8Kkto3M91yJVFaY+PWv2V4UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YV1dWODc4QVhYMjNHOTlwRVhicnJuQUR2VkFheEpNdUttb2lVaERMeHZI
LzAvNUIyRDJERjBBOTJEQTM3MzNERDcyMjU1MTVBNjNFM0Q2QkY2NTc4NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81QjJEMkRGMEE5MkRBMzczM0RE
NzIyNTUxNUE2M0UzRDZCRjY1Nzg1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
V1dWODc4QVhYMjNHOTlwRVhicnJuQUR2VkFheEpNdUttb2lVaERMeHZILzAvMzEz
ODM5MmUzMTM0MmUzMjMwMzgyZTMwMmYzMjMwMmQzMjMzMjAzZDNlMjAzMjM4MzMz
MjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEvQ7QMA0GCSqGSIb3DQEBCwUAA4IBAQAlvKRzr8ZY4fdw
37GLHsm0AVKOliJ7bV9R2aVrr0f6o4xgue3Wm4JP04lIH8p72KppNT723TUWoF2b
163xNyosRNKKI16Ire5vJ12Eko7EJckoRzSz+B2qEuS5rtAQtSQqhnYAsGAhPtd8
tH+FKNaosPbfcl8Y0Vl64Y6yALVxarbChQeYSn3H0eZp1qGh0uSHHh8osMpFOGk6
wxpLO8k8I/Agx2ffToky4oKlX32IiKeFaHMZcW74eEgHNVqcgvsOd2+dIZvQXHOC
WjxM6Ku2pJ7ZR1sde9FADlmUU2BXGCtWg9XIDjA01uHFQjiFni8n5hIcqMlk8roc
qKXSaZp5
-----END CERTIFICATE-----
Generated at Mon Jul 29 17:07:29 2024 by rpki-client on console-ams.rpki-client.org