Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3231362e302f32322d3232203d3e203238333238.roa
File:                     3138392e31342e3231362e302f32322d3232203d3e203238333238.roa (raw, json)
Hash identifier:          ct2fP6kc4+wJVuZktJ4I7CwfhZiml+eejRfg9/+TWD4=
Subject key identifier:   28:49:C0:FE:22:C8:C7:8B:AE:CB:AE:91:02:B5:78:0F:A5:0A:92:DD
Certificate issuer:       /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial:       3EC5E3EE923E7068BA48100900D816704FE3B818
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3231362e302f32322d3232203d3e203238333238.roa
Signing time:             Fri 26 Apr 2024 16:46:16 +0000
ROA not before:           Fri 26 Apr 2024 16:41:16 +0000
ROA not after:            Fri 25 Apr 2025 16:46:16 +0000
asID:                     28328
IP address blocks:        189.14.216.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 12:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c5:e3:ee:92:3e:70:68:ba:48:10:09:00:d8:16:70:4f:e3:b8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
        Validity
            Not Before: Apr 26 16:41:16 2024 GMT
            Not After : Apr 25 16:46:16 2025 GMT
        Subject: CN=2849C0FE22C8C78BAECBAE9102B5780FA50A92DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:b6:96:b7:dc:67:c1:6e:5f:26:55:78:04:
                    bd:b1:17:cf:16:1a:b4:cc:6e:d1:b5:f7:bd:e6:53:
                    25:ef:a7:f2:30:75:e7:57:bc:c8:92:a9:d8:e2:66:
                    66:5c:b5:ac:82:a5:9e:8c:94:4c:74:74:33:79:21:
                    00:1a:b4:e4:02:07:34:8a:5a:3e:4d:2e:07:70:59:
                    a3:71:f9:43:09:9c:26:3d:3f:bc:4c:fc:35:06:41:
                    c8:6f:af:4d:e8:70:74:e4:24:55:4e:2b:27:c0:96:
                    b6:aa:a9:56:1a:26:2e:f9:43:7c:41:a4:6f:c6:7c:
                    7c:0f:5b:31:7e:81:1f:8b:1c:2d:c2:2b:4b:ca:ae:
                    84:a8:54:c6:5c:41:37:4c:45:fd:32:d6:3c:56:81:
                    01:65:98:f1:4d:46:65:2b:6c:c1:2b:ae:ae:18:8f:
                    e9:6a:91:1e:db:ee:26:17:de:ab:0a:df:0d:63:1f:
                    b6:08:c8:ef:6a:c5:b3:12:da:28:89:3c:0d:37:31:
                    7e:89:02:16:2f:27:aa:01:29:87:0c:09:60:b9:f3:
                    3e:fd:82:7d:d2:48:d5:a4:21:89:3d:96:42:bf:aa:
                    01:98:4c:c6:03:02:54:6d:59:36:06:32:ba:08:34:
                    7d:db:d2:c8:1f:4c:88:ee:80:bb:b9:3d:f4:1a:09:
                    4c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:49:C0:FE:22:C8:C7:8B:AE:CB:AE:91:02:B5:78:0F:A5:0A:92:DD
            X509v3 Authority Key Identifier:
                keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3231362e302f32322d3232203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:42:5d:d1:c5:45:e4:22:c5:ff:47:02:05:32:fb:96:63:
         69:99:b9:67:97:ae:0f:3a:8c:c2:48:33:8f:77:cc:ba:33:2d:
         1a:4d:f8:56:4c:e2:e1:67:1b:e7:47:2f:9d:ff:f6:61:ec:6f:
         c1:fb:43:25:98:cd:64:3e:25:6f:96:b8:d0:c4:63:d6:38:cd:
         05:08:39:78:0c:59:35:38:7f:46:52:91:2b:4d:85:1c:22:3c:
         90:97:85:db:ca:89:e6:45:07:93:6f:ab:a3:55:9e:14:e9:89:
         df:6a:21:01:dc:63:a4:86:0e:4d:aa:c3:9f:de:fe:dd:e0:92:
         db:9e:d8:8d:39:7d:6f:4b:37:e6:a7:f6:03:cb:4b:79:99:6f:
         f1:ca:46:dd:88:9c:f9:48:23:5e:d4:7c:7f:68:ed:30:6f:bb:
         7a:0f:9c:9a:c6:c7:25:1a:c2:c3:ce:41:6c:87:e2:a7:7b:e3:
         95:12:b0:62:e0:5c:88:ed:15:e2:03:b0:52:7e:e4:81:89:9a:
         11:fc:81:05:6b:8f:dd:45:5d:f1:d6:5b:3d:3e:f7:f8:b7:32:
         5e:70:e3:ff:0f:8b:2b:5c:fc:84:f2:ad:1c:fa:82:9a:aa:99:
         4f:96:fc:da:dc:52:48:24:29:da:59:75:bf:43:d2:b5:29:bc:
         6d:80:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 13:52:10 2024 by rpki-client on console-fra.rpki-client.org