Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/3138362e3235312e3138392e302f32342d3234203d3e20323633353638.roa
File:                     3138362e3235312e3138392e302f32342d3234203d3e20323633353638.roa (raw, json)
Hash identifier:          u/RyngM9wMBxUdER2ZXr0U1/BzHr4nc8lBfHypbeeGg=
Subject key identifier:   31:04:47:29:FA:47:F5:E8:CE:E5:A6:5B:2E:EB:CE:48:93:61:27:3D
Certificate issuer:       /CN=04A75801C908418A80A755C267E372A41CC92EA3
Certificate serial:       520FCEF0C46189815DABEFBEB8310342F23669A4
Authority key identifier: 04:A7:58:01:C9:08:41:8A:80:A7:55:C2:67:E3:72:A4:1C:C9:2E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04A75801C908418A80A755C267E372A41CC92EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/3138362e3235312e3138392e302f32342d3234203d3e20323633353638.roa
Signing time:             Thu 04 Apr 2024 10:07:21 +0000
ROA not before:           Thu 04 Apr 2024 10:02:21 +0000
ROA not after:            Thu 03 Apr 2025 10:07:21 +0000
asID:                     263568
IP address blocks:        186.251.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 14:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0f:ce:f0:c4:61:89:81:5d:ab:ef:be:b8:31:03:42:f2:36:69:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04A75801C908418A80A755C267E372A41CC92EA3
        Validity
            Not Before: Apr  4 10:02:21 2024 GMT
            Not After : Apr  3 10:07:21 2025 GMT
        Subject: CN=31044729FA47F5E8CEE5A65B2EEBCE489361273D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:d8:aa:1a:3b:85:78:c7:e4:77:af:ac:df:
                    75:61:0d:4a:21:bb:fb:30:a7:5e:70:23:9f:16:e2:
                    58:47:62:eb:ae:dd:ca:30:d8:f6:c5:ab:c7:8e:9a:
                    cb:ba:af:a4:1d:3e:ac:66:d9:ea:f5:8e:4a:9d:56:
                    4e:29:fc:e3:33:8b:65:33:cc:b0:03:79:3c:a9:26:
                    73:27:8b:9f:7b:bc:aa:1f:56:3d:c0:ed:83:52:5d:
                    41:89:4d:98:af:89:87:7b:0a:84:41:d7:77:60:40:
                    17:63:f2:df:82:a3:a9:70:64:a1:53:80:09:d9:90:
                    02:b7:60:69:7d:0f:4f:0b:5c:15:98:a6:42:1f:6b:
                    ad:e8:69:dd:55:aa:cb:3b:34:5f:00:89:05:c7:99:
                    8c:95:2a:76:7b:11:50:8d:e7:8e:9e:33:d7:61:c8:
                    d4:57:a6:f7:2e:b3:bc:0a:a5:ce:21:57:58:c8:44:
                    ad:b4:a6:bc:7f:c9:4c:e1:31:85:a2:0d:10:26:c3:
                    ca:30:dc:ce:95:7a:23:2a:a5:b1:ab:55:ab:cf:dd:
                    63:53:9a:a3:66:d6:11:c4:d8:bc:3b:2b:83:2a:26:
                    97:91:96:a0:b4:dc:dc:13:fc:5f:25:b1:98:b3:35:
                    5f:25:41:ea:28:5e:c7:90:0d:c4:5e:66:1b:d3:b4:
                    7b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:04:47:29:FA:47:F5:E8:CE:E5:A6:5B:2E:EB:CE:48:93:61:27:3D
            X509v3 Authority Key Identifier:
                keyid:04:A7:58:01:C9:08:41:8A:80:A7:55:C2:67:E3:72:A4:1C:C9:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/04A75801C908418A80A755C267E372A41CC92EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04A75801C908418A80A755C267E372A41CC92EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/3138362e3235312e3138392e302f32342d3234203d3e20323633353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:35:46:95:a7:98:a3:55:33:9f:9c:77:d1:49:ab:18:fb:bd:
         76:29:67:c9:80:d6:ee:52:8d:20:9d:0e:30:59:f9:3d:7f:9a:
         b1:67:e4:f7:d0:fd:ad:70:91:95:26:ed:73:c1:fa:fc:df:2c:
         4c:81:ce:63:c0:ae:dd:b1:da:d1:b8:b4:95:77:2c:82:e3:4e:
         fe:03:2b:19:a1:fc:67:df:8c:c4:3b:8c:14:72:c0:56:82:dd:
         c5:94:92:a5:45:28:09:a7:3e:c2:e2:85:6f:85:49:71:01:e2:
         b0:c0:bc:09:02:8b:9d:aa:ab:8d:1b:aa:af:2d:01:42:7d:9b:
         44:fe:d2:33:a8:63:0a:29:19:a1:00:c5:cb:7a:bb:25:69:6b:
         a6:ec:b4:d9:16:8f:c7:fa:28:4a:67:cd:00:e9:e1:ef:55:82:
         59:8c:2e:b3:40:65:4c:6a:64:6a:09:33:19:ca:d0:47:c3:db:
         11:1b:dc:73:2b:32:28:b2:4a:04:e8:75:2c:1c:7d:53:15:33:
         2d:85:b3:df:53:0b:3f:6b:1e:78:27:3c:5c:54:70:b2:02:74:
         94:4d:c9:b0:49:41:8b:e4:65:73:c0:f7:2e:4e:c3:1b:c5:13:
         6c:c5:21:a3:85:39:22:68:62:21:8a:17:68:c0:d2:93:d4:5f:
         c9:86:6f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:20:17 2024 by rpki-client on console-fra.rpki-client.org