Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139322e302f32312d3231203d3e20323632373931.roa
File:                     3138362e3233332e3139322e302f32312d3231203d3e20323632373931.roa (raw, json)
Hash identifier:          F4uDhhKQbeV9ty5v2K4cli7jPc9SmzMgbuD9wkOKisM=
Subject key identifier:   7E:0B:9B:35:40:D5:06:92:DC:4C:3E:0F:32:C5:B5:69:2A:BE:26:01
Certificate issuer:       /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial:       2A8491123072E4CB9E7A8439E4840726E97FA6F8
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139322e302f32312d3231203d3e20323632373931.roa
Signing time:             Wed 24 Apr 2024 17:31:37 +0000
ROA not before:           Wed 24 Apr 2024 17:26:37 +0000
ROA not after:            Wed 23 Apr 2025 17:31:37 +0000
asID:                     262791
IP address blocks:        186.233.192.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:84:91:12:30:72:e4:cb:9e:7a:84:39:e4:84:07:26:e9:7f:a6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
        Validity
            Not Before: Apr 24 17:26:37 2024 GMT
            Not After : Apr 23 17:31:37 2025 GMT
        Subject: CN=7E0B9B3540D50692DC4C3E0F32C5B5692ABE2601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:54:47:3a:a0:f2:91:e2:c1:af:51:f0:72:ba:
                    27:c2:43:b6:c0:b2:aa:1b:65:a5:1f:c8:ee:29:f0:
                    bf:d0:12:c7:96:fe:fd:b1:5a:de:8b:e9:c7:05:7d:
                    de:72:c7:7b:40:1b:25:25:25:be:29:c3:bb:76:97:
                    45:7a:69:53:73:03:ae:84:e2:c9:3c:d3:85:ca:43:
                    bd:c6:f3:19:d2:64:6e:c0:ee:fa:9d:7f:fd:2e:c6:
                    09:90:82:98:5d:a8:94:2c:9e:2d:c3:de:a7:5a:9c:
                    48:b7:7d:9e:d0:dd:3f:2e:cb:24:72:35:d5:e4:53:
                    ef:ae:2d:94:7b:48:16:7e:ab:a0:dc:1e:7a:76:b2:
                    a6:32:da:27:53:7b:d9:16:27:74:71:6e:05:30:88:
                    7e:52:37:41:8a:ed:84:ca:4f:33:8d:38:10:09:d4:
                    70:ad:ce:ee:8e:24:0f:f3:a0:2a:b5:9a:93:72:d7:
                    db:73:17:c8:63:a7:21:bf:8d:b1:df:c7:c4:44:d5:
                    4b:e9:40:b5:a1:70:ff:e4:75:7f:2c:02:25:f8:70:
                    95:a9:fb:ce:96:37:d9:1b:9a:ff:92:5c:16:d8:79:
                    df:82:3c:ac:fb:16:04:80:d6:97:69:9e:a5:3e:79:
                    18:68:af:2d:b4:b5:a9:b1:8f:ae:6f:d1:64:db:06:
                    46:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0B:9B:35:40:D5:06:92:DC:4C:3E:0F:32:C5:B5:69:2A:BE:26:01
            X509v3 Authority Key Identifier:
                keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139322e302f32312d3231203d3e20323632373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:7c:a0:73:f7:e0:8c:c4:c5:22:c4:da:e2:d6:e7:3c:df:4e:
         d7:c1:bf:6d:3c:58:1a:43:4e:e9:b3:ad:a3:d0:a0:ed:0e:75:
         7d:6c:97:22:dd:b8:04:e6:18:7f:0e:53:f6:15:4c:16:45:cb:
         da:9c:03:dc:88:80:61:46:21:95:94:5f:ab:4c:69:ed:55:7a:
         24:62:b2:d2:3c:a8:57:19:ee:b0:32:d1:75:32:fc:af:fc:04:
         7c:0d:09:61:5a:fb:d1:4f:19:b4:d5:85:57:0b:a7:0b:e8:31:
         75:cd:6c:3f:66:67:71:c0:64:4f:32:6f:6b:11:c3:da:40:3b:
         5b:56:21:63:6f:f0:f9:b8:f7:5e:2b:54:9b:45:fa:19:6f:fb:
         0e:75:79:4d:92:80:c1:d3:5c:46:f2:1d:de:70:7e:96:34:d9:
         c7:c9:f6:03:6e:95:0e:0e:b8:56:76:e0:40:e2:d2:ee:43:a7:
         39:d6:07:e0:37:91:11:2d:f4:7c:45:0e:85:cc:ed:ae:87:c9:
         6e:68:db:cb:7b:1d:21:9f:15:46:c2:82:43:f3:cf:05:f1:60:
         06:ea:a1:0a:ff:66:71:97:1a:08:5c:b2:1c:86:e5:21:f6:26:
         06:14:11:76:4d:51:93:d0:65:60:6e:ab:59:4d:6d:01:ad:2c:
         3d:2f:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org