Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/3138362e3235312e3138382e302f32332d3233203d3e20323633353638.roa
File:                     3138362e3235312e3138382e302f32332d3233203d3e20323633353638.roa (raw, json)
Hash identifier:          iJpvWrsBEPJDj0TmDmOgRTKQ2IaMKVZf2pgRGY1AedY=
Subject key identifier:   C4:D8:C9:74:C7:D9:E0:1A:37:4A:34:53:35:74:FB:96:CF:74:0C:A9
Certificate issuer:       /CN=04A75801C908418A80A755C267E372A41CC92EA3
Certificate serial:       2D79C9FF514B9E6DF88E138C5176D35E363F0A01
Authority key identifier: 04:A7:58:01:C9:08:41:8A:80:A7:55:C2:67:E3:72:A4:1C:C9:2E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04A75801C908418A80A755C267E372A41CC92EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/3138362e3235312e3138382e302f32332d3233203d3e20323633353638.roa
Signing time:             Thu 04 Apr 2024 10:07:22 +0000
ROA not before:           Thu 04 Apr 2024 10:02:22 +0000
ROA not after:            Thu 03 Apr 2025 10:07:22 +0000
asID:                     263568
IP address blocks:        186.251.188.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 14:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:79:c9:ff:51:4b:9e:6d:f8:8e:13:8c:51:76:d3:5e:36:3f:0a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04A75801C908418A80A755C267E372A41CC92EA3
        Validity
            Not Before: Apr  4 10:02:22 2024 GMT
            Not After : Apr  3 10:07:22 2025 GMT
        Subject: CN=C4D8C974C7D9E01A374A34533574FB96CF740CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:26:ea:28:83:d9:f2:cc:4c:90:0b:f7:01:
                    cb:2f:b9:6d:2b:a8:50:3b:c7:bf:c0:d3:cd:58:d9:
                    3b:0a:b4:f3:6c:ae:89:08:37:a8:55:a8:e3:ba:63:
                    d3:66:db:41:f1:42:5e:4d:b6:b4:73:2f:47:c4:fb:
                    c8:4c:71:4e:5d:08:74:b0:43:2c:70:54:db:d9:5c:
                    aa:43:56:1d:d9:dd:3b:f2:f1:14:57:0e:70:bb:50:
                    e5:5a:91:bd:c2:12:99:77:d2:c4:68:c3:1d:f5:d1:
                    5b:49:de:75:14:09:12:7c:30:21:3f:02:a2:44:be:
                    cf:1b:cd:d0:bb:dc:56:e6:2d:20:10:fa:dc:40:a2:
                    2b:52:5c:0d:07:03:2d:d4:2c:ac:c1:d6:8e:56:29:
                    bf:70:b9:b9:6d:73:90:7e:05:61:95:07:32:fb:24:
                    c6:8b:8b:11:09:e4:f2:ad:92:98:f2:a8:9b:07:85:
                    06:61:1a:56:25:67:cc:2c:f8:09:24:49:35:0f:1c:
                    f0:13:f0:73:28:2f:74:3e:41:06:c1:da:cb:84:d0:
                    b3:d0:97:96:b5:55:1c:66:cf:31:1a:1b:91:f7:0a:
                    46:16:eb:60:e1:7e:a8:76:39:ce:f2:9a:4f:1a:da:
                    57:09:e5:cd:73:e5:db:fb:31:c3:63:cf:4d:4c:3c:
                    25:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D8:C9:74:C7:D9:E0:1A:37:4A:34:53:35:74:FB:96:CF:74:0C:A9
            X509v3 Authority Key Identifier:
                keyid:04:A7:58:01:C9:08:41:8A:80:A7:55:C2:67:E3:72:A4:1C:C9:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/04A75801C908418A80A755C267E372A41CC92EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04A75801C908418A80A755C267E372A41CC92EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/3138362e3235312e3138382e302f32332d3233203d3e20323633353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:c5:ab:2b:29:cb:61:83:73:45:70:60:11:b8:37:f0:c2:45:
         6b:e0:f1:30:79:b2:de:77:0d:6f:93:70:f7:13:82:75:60:12:
         95:3d:ff:97:3e:7c:db:18:62:71:2d:c5:6f:3b:a4:2b:0e:7b:
         2e:d9:ed:f6:8b:3d:05:44:ff:80:f9:26:65:aa:24:dc:ab:e2:
         6a:85:9c:05:fa:5d:c2:32:b0:7a:46:81:68:f0:25:7f:03:bb:
         94:88:fc:94:32:4e:8d:45:72:0c:68:2e:7d:32:61:0e:66:0e:
         58:8a:45:13:ff:aa:6b:69:b8:23:03:42:35:f3:de:75:a6:9e:
         dc:8c:78:9b:da:3a:0e:10:2e:fe:6f:f9:55:0b:27:43:1e:c9:
         12:3a:f9:19:7b:22:b7:fc:52:b0:bb:a5:a6:c3:03:08:20:01:
         6f:e2:f2:54:d7:0a:96:42:70:07:48:37:c4:0f:19:6c:3b:1e:
         ec:ab:b1:e6:da:a6:15:9f:97:b4:be:b0:75:21:b2:51:ee:ff:
         fe:a6:b0:f2:75:fa:9b:b4:2f:7b:31:ee:3c:75:91:f0:25:a2:
         d6:f0:a9:00:31:aa:76:5c:65:49:06:f5:20:55:05:f1:09:a3:
         c8:1d:a0:9c:08:ae:75:5c:ec:02:77:46:dd:00:c4:30:ca:0d:
         00:19:dc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 18:17:05 2024 by rpki-client on console-ams.rpki-client.org