Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32312d3234203d3e20323633333338.roa
File:                     3139312e33362e3138342e302f32312d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          9HbjaFCfPDgJqyH289sd6qGZfADFl71/ZX65TsKCPb4=
Subject key identifier:   29:03:E5:25:D2:D5:CF:DC:08:2A:54:A9:F3:87:19:A2:38:B1:95:6B
Certificate issuer:       /CN=91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA
Certificate serial:       60F8EBEF8DB643AD2DAE84416A7EB726C7A47D0D
Authority key identifier: 91:A9:E6:C2:48:02:3A:A7:E8:9B:8B:2B:7D:09:50:ED:80:FD:54:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32312d3234203d3e20323633333338.roa
Signing time:             Fri 28 Jul 2023 14:12:00 +0000
ROA not before:           Fri 28 Jul 2023 14:07:00 +0000
ROA not after:            Fri 26 Jul 2024 14:12:00 +0000
asID:                     263338
IP address blocks:        191.36.184.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 Jul 2024 14:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f8:eb:ef:8d:b6:43:ad:2d:ae:84:41:6a:7e:b7:26:c7:a4:7d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA
        Validity
            Not Before: Jul 28 14:07:00 2023 GMT
            Not After : Jul 26 14:12:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:a2:60:7c:3b:5f:20:4f:49:e7:ab:15:06:
                    0e:61:82:4a:11:6f:54:ee:62:5d:d0:21:31:98:01:
                    c1:e2:e4:6c:e0:2c:1d:66:1c:54:96:55:09:9f:ce:
                    93:a8:bf:fc:f8:b0:5d:a3:0c:29:75:b3:cc:17:a9:
                    04:81:b9:a2:de:d7:fd:af:b7:cd:f6:0c:cd:36:f4:
                    0f:02:da:ac:3a:34:53:c2:af:2e:af:c1:27:be:b7:
                    99:ce:14:38:02:c8:c5:ba:4d:f8:e3:fa:c4:3c:49:
                    1f:cc:a0:3d:bc:71:9f:51:e6:ab:6b:e3:4a:3c:52:
                    92:65:0f:24:fc:f1:35:ff:55:0b:41:72:dc:dc:6d:
                    49:3e:27:4e:12:53:41:5f:99:61:0e:0a:37:f2:ed:
                    bc:c7:54:b6:73:b4:1a:98:28:39:44:83:1c:02:e6:
                    dc:ec:32:66:46:7f:bb:6b:d8:f3:ee:5d:35:22:27:
                    bd:b4:64:24:66:73:06:dd:67:43:23:2c:02:e9:49:
                    ce:27:3b:1c:21:d3:5a:4f:d3:20:e3:7f:3a:9d:b9:
                    b8:91:51:a6:5f:9e:b2:88:b4:fa:c4:e2:30:f5:25:
                    68:63:5d:fd:00:8a:ae:cf:72:bd:b3:f2:92:13:a0:
                    dd:c2:28:67:7c:b5:3e:fb:2e:a0:0d:10:3b:8e:86:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:03:E5:25:D2:D5:CF:DC:08:2A:54:A9:F3:87:19:A2:38:B1:95:6B
            X509v3 Authority Key Identifier:
                keyid:91:A9:E6:C2:48:02:3A:A7:E8:9B:8B:2B:7D:09:50:ED:80:FD:54:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32312d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:0b:f1:ec:9d:a6:17:5b:52:40:7e:8b:d1:54:f1:35:53:b7:
         39:2c:1e:da:17:be:eb:9f:82:a1:23:d0:3d:1d:1b:3d:b8:c1:
         c3:c7:15:a8:8d:6e:d8:97:c1:aa:8c:ae:02:3a:91:83:fe:12:
         74:c4:c9:b1:90:e1:54:c7:e7:fd:9f:4d:f2:c6:63:38:91:90:
         21:35:df:7f:c0:97:51:46:12:a7:14:2b:9d:55:96:b2:40:05:
         33:60:6f:bc:6f:4c:ab:0c:cc:fa:6f:f4:e1:67:83:03:09:c8:
         4a:6c:7f:00:da:b4:de:51:d0:ab:71:e2:44:cf:25:a0:6d:86:
         4b:a5:6a:b6:0f:30:ba:8f:2d:9d:20:b4:bd:7f:cc:ca:da:71:
         a4:4b:1c:14:d8:e1:1e:4e:68:71:1c:71:79:f9:aa:46:7e:46:
         a1:d1:30:6e:1d:22:67:1d:1a:19:bc:12:09:fb:e7:25:d0:1a:
         f8:7e:0e:1a:33:ff:e9:f1:ff:09:ba:48:7e:3e:71:93:95:09:
         5b:52:6e:98:b3:6b:d8:92:e8:84:63:0e:ba:9b:0a:63:bb:17:
         a5:46:74:23:e3:97:84:42:c2:5e:ff:03:4c:da:62:90:cc:00:
         e9:02:af:47:85:5c:8e:10:04:ca:1e:c4:6d:86:f5:3f:3b:f9:
         aa:34:f3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 23:53:34 2024 by rpki-client on console-fra.rpki-client.org