Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139322e302f32342d3234203d3e20323632373931.roa
File:                     3138362e3233332e3139322e302f32342d3234203d3e20323632373931.roa (raw, json)
Hash identifier:          xbgn3/lQSb8kVtsmr2Bhb4nxeATEJzDhY++NxInI+EA=
Subject key identifier:   9F:F1:1D:AF:EB:F5:5D:3F:D6:9C:E2:53:C9:89:41:AA:F3:06:45:11
Certificate issuer:       /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial:       748F4475241BC91A18E0C8C6C1A507737BBEEE3F
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139322e302f32342d3234203d3e20323632373931.roa
Signing time:             Wed 24 Apr 2024 17:31:39 +0000
ROA not before:           Wed 24 Apr 2024 17:26:39 +0000
ROA not after:            Wed 23 Apr 2025 17:31:39 +0000
asID:                     262791
IP address blocks:        186.233.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:8f:44:75:24:1b:c9:1a:18:e0:c8:c6:c1:a5:07:73:7b:be:ee:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
        Validity
            Not Before: Apr 24 17:26:39 2024 GMT
            Not After : Apr 23 17:31:39 2025 GMT
        Subject: CN=9FF11DAFEBF55D3FD69CE253C98941AAF3064511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:5e:dd:07:20:54:4a:b7:97:bd:a7:5f:31:
                    dd:3c:8b:39:b2:27:21:63:5e:74:0b:db:2d:9c:e3:
                    7c:ca:e6:68:65:56:a2:a3:d2:31:e4:ee:73:f8:46:
                    ce:c8:d7:be:2d:f1:d7:bb:f5:07:a6:2f:4f:dc:9e:
                    c2:87:db:23:f3:4d:81:c1:90:f6:7b:2f:39:05:77:
                    66:c6:e4:c3:76:c0:ea:2d:60:dc:6b:90:12:07:36:
                    0f:aa:13:d7:e0:12:0c:09:f9:e9:9f:c9:36:22:2a:
                    e1:68:8c:f6:47:52:dd:da:ba:a7:f9:b8:a1:20:27:
                    26:f6:a9:93:26:92:3e:30:d7:f4:18:69:ac:9d:e8:
                    c7:80:9d:16:69:06:14:43:ca:e4:4d:6e:f3:74:83:
                    17:25:74:56:88:ee:4a:46:6d:1c:9c:46:06:2b:3f:
                    a7:fa:00:a8:75:65:24:b5:0a:68:fe:25:a5:19:e8:
                    9a:29:db:77:65:59:89:a2:09:3f:82:16:81:3c:ed:
                    c5:42:70:61:8b:ea:75:f0:65:48:32:bd:ca:b0:07:
                    a3:b7:5c:fd:57:ef:3a:5a:b6:04:4c:1b:1d:ca:f6:
                    6f:52:ed:89:a1:e9:ee:f7:8c:2f:08:c8:ee:0f:10:
                    64:9a:d6:67:50:84:9b:06:c4:aa:71:e8:ab:fe:11:
                    e8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F1:1D:AF:EB:F5:5D:3F:D6:9C:E2:53:C9:89:41:AA:F3:06:45:11
            X509v3 Authority Key Identifier:
                keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139322e302f32342d3234203d3e20323632373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:07:d4:3d:5c:cf:f5:54:59:2b:7d:28:d3:c1:42:f2:b6:ad:
         c1:b9:96:7b:ba:24:db:57:93:7b:2f:86:42:0b:37:eb:d2:7e:
         26:0d:65:c1:dd:d5:b6:32:6e:d8:6c:e4:fd:6a:8e:83:03:4b:
         72:dd:6b:30:3e:78:40:b2:d9:dc:50:29:f1:a2:51:7d:64:ae:
         44:30:47:47:a1:06:23:01:26:b0:9f:87:3a:61:a1:b0:d0:af:
         fd:ba:97:40:5e:f5:1f:81:7c:39:44:fb:a1:c4:98:ab:42:e6:
         96:5c:62:2a:f3:b4:0f:d9:33:51:25:2b:b5:44:9d:5c:b2:56:
         90:03:23:61:de:86:66:79:92:23:24:52:5e:a9:a3:fe:5b:2a:
         fe:31:01:f5:2a:fd:c3:a6:fc:66:4b:0e:b8:99:e7:33:03:9c:
         b0:d5:f2:c5:e9:53:a1:51:48:cc:56:f2:d5:d3:af:6a:40:8d:
         45:b9:0e:46:f1:c2:db:62:ad:e7:57:85:ca:31:57:27:77:4b:
         2f:c0:d9:36:35:2a:c3:68:5c:9f:56:9d:a2:fc:df:4a:d8:8c:
         1e:b9:e1:88:97:65:e3:25:96:61:c8:01:e9:69:18:16:57:70:
         20:26:af:13:f3:cd:47:c6:82:63:b6:1f:b3:e1:2f:d3:76:93:
         42:42:2a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org