Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139362e302f32332d3233203d3e20323632373931.roa
File:                     3138362e3233332e3139362e302f32332d3233203d3e20323632373931.roa (raw, json)
Hash identifier:          wHX3wEkwkHOBNz3mOMwGFTv6xRINZQS00OSpIcv2O/Q=
Subject key identifier:   AC:4E:8C:5A:B5:51:A6:91:10:1A:5D:AE:31:F0:55:04:79:9C:4B:55
Certificate issuer:       /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial:       53C5F4BBFEA6ACA172AA1E70B3DB8CC97DD8DDD3
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139362e302f32332d3233203d3e20323632373931.roa
Signing time:             Wed 24 Apr 2024 17:31:49 +0000
ROA not before:           Wed 24 Apr 2024 17:26:49 +0000
ROA not after:            Wed 23 Apr 2025 17:31:49 +0000
asID:                     262791
IP address blocks:        186.233.196.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c5:f4:bb:fe:a6:ac:a1:72:aa:1e:70:b3:db:8c:c9:7d:d8:dd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
        Validity
            Not Before: Apr 24 17:26:49 2024 GMT
            Not After : Apr 23 17:31:49 2025 GMT
        Subject: CN=AC4E8C5AB551A691101A5DAE31F05504799C4B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8c:51:7b:ec:46:91:b5:26:87:cc:a8:9e:15:
                    87:9b:50:a7:e9:f0:e4:2d:e4:34:6d:1f:ee:b8:4e:
                    96:96:f0:5d:48:c3:06:f0:5c:dc:75:c8:89:f7:a3:
                    06:fb:68:ed:88:d8:8a:8c:4f:d1:36:13:75:35:d6:
                    4f:84:72:b9:5f:fc:1f:81:6a:aa:b3:66:9b:22:9f:
                    d6:63:25:49:59:1e:69:44:09:08:7c:9a:fc:65:b5:
                    94:09:d1:68:83:a6:06:d7:15:1f:1e:fd:81:93:87:
                    cf:77:73:88:28:19:85:80:38:20:ff:16:db:10:28:
                    77:c5:a6:c9:9c:32:68:2c:23:b4:b4:c6:3c:99:ab:
                    8b:8d:0d:bc:82:71:2b:05:f9:48:7b:09:69:e9:d2:
                    7f:da:cf:b6:87:08:dc:86:de:73:e1:44:27:61:64:
                    a7:5c:94:a6:ff:17:17:41:d6:99:bd:45:ba:e9:25:
                    e7:c9:96:2f:ed:88:d7:93:02:7f:21:4b:9f:17:45:
                    95:d9:81:ff:68:b6:02:fd:3e:34:74:5a:cf:4b:29:
                    fa:16:2c:c7:56:f8:d7:ea:59:78:de:8b:90:8b:a3:
                    c5:41:e9:e0:1b:52:85:5f:7e:06:31:c4:62:fc:8d:
                    25:92:ca:1c:55:cc:7c:df:4d:63:02:a5:99:4f:d7:
                    f9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4E:8C:5A:B5:51:A6:91:10:1A:5D:AE:31:F0:55:04:79:9C:4B:55
            X509v3 Authority Key Identifier:
                keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139362e302f32332d3233203d3e20323632373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:30:ad:e4:c1:55:8c:a8:b4:86:f5:5f:8e:24:26:c5:a6:1d:
         31:e1:dc:b9:5a:66:97:31:29:5d:19:f9:78:31:3c:46:d4:1e:
         12:8c:16:ab:06:68:14:06:70:71:01:4c:0a:3b:ca:d9:d6:ca:
         62:c3:b5:1c:a0:1b:e2:33:f7:98:03:c4:b6:49:9d:74:b3:eb:
         4b:c8:b7:4a:65:3e:68:24:0e:0d:2a:66:c8:f9:5b:93:cb:2b:
         2b:6c:0a:3d:76:f4:f0:92:46:7c:f2:54:83:0b:d5:68:a0:20:
         2b:97:d4:48:c1:39:59:7d:7f:c4:8f:94:92:26:e5:aa:a5:0d:
         43:13:8e:c3:ea:12:cf:e7:34:f1:e8:fe:08:ab:42:84:b2:05:
         84:75:35:58:2d:e5:3a:81:bd:1c:43:06:53:f1:68:93:fc:07:
         f2:77:40:d4:5b:d7:b9:81:5a:a7:bd:34:11:12:c7:60:bc:0d:
         cf:47:c5:ae:3c:b7:ec:73:c6:f1:88:b3:42:83:5e:b6:24:70:
         67:61:2e:1d:ab:0b:af:12:56:47:4a:c8:b9:17:03:db:ff:21:
         90:6d:49:d0:32:96:c4:a5:ce:ca:a1:32:f2:ba:6b:76:8b:88:
         c5:2f:9d:2a:55:f5:b3:46:2d:90:05:ef:b1:a3:0a:6c:81:82:
         5a:fe:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org