Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/3138362e3235312e3138382e302f32342d3234203d3e20323633353638.roa
File:                     3138362e3235312e3138382e302f32342d3234203d3e20323633353638.roa (raw, json)
Hash identifier:          RSxtvin3i9cVpAJqETfFY4qPToab++Qu4OXIIKSFO2Y=
Subject key identifier:   FE:B3:F0:82:88:2F:71:F8:97:A8:31:AE:4D:E8:94:25:90:69:A9:42
Certificate issuer:       /CN=04A75801C908418A80A755C267E372A41CC92EA3
Certificate serial:       1DF2D0FD0C607635D905691353F7BD6231302A51
Authority key identifier: 04:A7:58:01:C9:08:41:8A:80:A7:55:C2:67:E3:72:A4:1C:C9:2E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04A75801C908418A80A755C267E372A41CC92EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/3138362e3235312e3138382e302f32342d3234203d3e20323633353638.roa
Signing time:             Thu 04 Apr 2024 10:07:21 +0000
ROA not before:           Thu 04 Apr 2024 10:02:21 +0000
ROA not after:            Thu 03 Apr 2025 10:07:21 +0000
asID:                     263568
IP address blocks:        186.251.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 14:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f2:d0:fd:0c:60:76:35:d9:05:69:13:53:f7:bd:62:31:30:2a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04A75801C908418A80A755C267E372A41CC92EA3
        Validity
            Not Before: Apr  4 10:02:21 2024 GMT
            Not After : Apr  3 10:07:21 2025 GMT
        Subject: CN=FEB3F082882F71F897A831AE4DE894259069A942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:26:c0:9b:7c:fc:8d:df:79:15:c3:43:6a:
                    48:9f:ff:59:7d:8f:b7:8d:13:cb:43:e4:44:b2:70:
                    43:0c:67:8b:e7:20:a4:8c:1c:f2:fd:1c:18:10:89:
                    e3:75:f9:5c:d4:cd:84:8d:96:43:1b:0e:34:a0:16:
                    c5:c9:f9:ad:79:a0:e3:26:68:d2:97:44:88:b4:11:
                    cf:fc:a7:57:ad:16:01:3c:2a:99:4f:0e:49:3f:27:
                    bc:fb:0d:0b:5a:6d:93:f7:e3:ba:8f:65:9b:8f:0e:
                    fa:95:e5:57:b5:9f:d3:9e:d9:5e:19:ee:48:2f:4e:
                    0b:29:50:e4:53:6e:73:b0:ed:c1:3f:b0:f2:46:05:
                    f1:3c:a5:65:84:29:c7:92:a2:81:2d:e7:08:7c:a9:
                    09:b7:80:26:55:c2:04:6f:51:52:f5:21:1b:3a:d4:
                    a5:69:bd:8b:7c:ff:b7:18:f9:b0:2b:c2:ba:72:9b:
                    04:dc:54:11:b5:e0:0f:16:35:bb:d6:6f:5b:29:66:
                    de:bc:17:6d:b4:9c:92:8c:c7:67:17:e1:7f:42:00:
                    86:83:fe:eb:79:5b:1d:d4:02:d6:ec:16:1f:5b:e9:
                    a5:fa:bf:a3:57:d8:b4:0b:9f:f1:ac:6b:60:ce:35:
                    d4:e6:47:11:26:1d:84:2e:f4:30:d6:b6:e0:f3:68:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B3:F0:82:88:2F:71:F8:97:A8:31:AE:4D:E8:94:25:90:69:A9:42
            X509v3 Authority Key Identifier:
                keyid:04:A7:58:01:C9:08:41:8A:80:A7:55:C2:67:E3:72:A4:1C:C9:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/04A75801C908418A80A755C267E372A41CC92EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04A75801C908418A80A755C267E372A41CC92EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/3138362e3235312e3138382e302f32342d3234203d3e20323633353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:ff:3d:14:f6:a7:47:fe:a1:7c:16:9e:93:da:ac:af:47:d3:
         9c:88:31:8e:b6:a9:53:f9:ec:8f:2b:e4:f6:8d:08:ca:f4:fc:
         9d:b4:ae:0a:f0:78:d1:53:75:ba:cd:ef:e8:cf:57:b4:36:7f:
         ad:46:57:29:01:1f:98:15:ea:72:4a:88:eb:a9:3d:8b:b2:70:
         c5:60:9d:b2:32:74:ad:6f:ad:36:45:cc:2c:a7:ea:f6:03:8c:
         29:ce:89:1c:a3:bf:6c:5d:45:0b:dc:6f:14:47:97:f9:4e:83:
         86:9b:1d:2f:5c:83:8a:d0:1a:6f:fd:93:f8:08:c8:1d:f5:e8:
         46:31:8b:80:a3:1d:0e:f9:16:aa:ee:77:90:e9:55:f3:13:7a:
         0b:86:29:24:e9:1b:ef:f1:83:ed:7f:48:1f:46:fa:7a:08:b9:
         bb:9d:1f:47:14:2b:81:14:b2:69:06:f8:09:f0:85:da:6c:59:
         f1:76:02:18:05:c1:e4:34:7a:22:24:1d:78:ae:b1:95:cf:75:
         59:e2:f3:44:dd:37:6f:1b:3a:1f:dd:7b:51:7c:ed:5d:25:60:
         e8:e1:64:b7:e2:db:e6:4a:ab:cf:97:8b:9a:15:75:77:6c:1e:
         8d:34:dc:68:a5:17:79:3f:c1:60:de:16:93:5a:ff:e2:0d:62:
         9e:53:b2:ca
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHfLQ/QxgdjXZBWkTU/e9YjEwKlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRBNzU4MDFDOTA4NDE4QTgwQTc1NUMyNjdFMzcyQTQx
Q0M5MkVBMzAeFw0yNDA0MDQxMDAyMjFaFw0yNTA0MDMxMDA3MjFaMDMxMTAvBgNV
BAMTKEZFQjNGMDgyODgyRjcxRjg5N0E4MzFBRTRERTg5NDI1OTA2OUE5NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9PibAm3z8jd95FcNDakif/1l9
j7eNE8tD5ESycEMMZ4vnIKSMHPL9HBgQieN1+VzUzYSNlkMbDjSgFsXJ+a15oOMm
aNKXRIi0Ec/8p1etFgE8KplPDkk/J7z7DQtabZP347qPZZuPDvqV5Ve1n9Oe2V4Z
7kgvTgspUORTbnOw7cE/sPJGBfE8pWWEKceSooEt5wh8qQm3gCZVwgRvUVL1IRs6
1KVpvYt8/7cY+bArwrpymwTcVBG14A8WNbvWb1spZt68F220nJKMx2cX4X9CAIaD
/ut5Wx3UAtbsFh9b6aX6v6NX2LQLn/Gsa2DONdTmRxEmHYQu9DDWtuDzaKJbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/rPwgogvcfiXqDGuTeiUJZBpqUIwHwYDVR0j
BBgwFoAUBKdYAckIQYqAp1XCZ+NypBzJLqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMldBNFE0RFFwOVl4REpucWQxQ1Z2QlJIVlFCaFZuRFBTbXBmalVDUDJF
Z0svMS8wNEE3NTgwMUM5MDg0MThBODBBNzU1QzI2N0UzNzJBNDFDQzkyRUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0QTc1ODAxQzkwODQxOEE4
MEE3NTVDMjY3RTM3MkE0MUNDOTJFQTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJXQTRRNERRcDlZeERKbnFkMUNWdkJSSFZRQmhWbkRQU21wZmpVQ1AyRWdLLzEv
MzEzODM2MmUzMjM1MzEyZTMxMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALr7vDANBgkqhkiG9w0BAQsFAAOCAQEAQP89
FPanR/6hfBaek9qsr0fTnIgxjrapU/nsjyvk9o0IyvT8nbSuCvB40VN1us3v6M9X
tDZ/rUZXKQEfmBXqckqI66k9i7JwxWCdsjJ0rW+tNkXMLKfq9gOMKc6JHKO/bF1F
C9xvFEeX+U6DhpsdL1yDitAab/2T+AjIHfXoRjGLgKMdDvkWqu53kOlV8xN6C4Yp
JOkb7/GD7X9IH0b6egi5u50fRxQrgRSyaQb4CfCF2mxZ8XYCGAXB5DR6IiQdeK6x
lc91WeLzRN03bxs6H917UXztXSVg6OFkt+Lb5kqrz5eLmhV1d2wejTTcaKUXeT/B
YN4Wk1r/4g1inlOyyg==
-----END CERTIFICATE-----
Generated at Fri Nov 1 18:17:05 2024 by rpki-client on console-ams.rpki-client.org