Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139382e302f32332d3233203d3e20323632373931.roa
File:                     3138362e3233332e3139382e302f32332d3233203d3e20323632373931.roa (raw, json)
Hash identifier:          f0FxDDOBAJgbj9vsFs6LBAumKjnLRy5rN57Cyue40uU=
Subject key identifier:   9A:9F:30:5D:BC:45:8F:20:96:7D:75:01:D5:70:D6:34:F1:C6:29:5E
Certificate issuer:       /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial:       1BE3FF6342CA716F6E0CD39256B478E1DFD6621D
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139382e302f32332d3233203d3e20323632373931.roa
Signing time:             Wed 24 Apr 2024 17:31:56 +0000
ROA not before:           Wed 24 Apr 2024 17:26:56 +0000
ROA not after:            Wed 23 Apr 2025 17:31:56 +0000
asID:                     262791
IP address blocks:        186.233.198.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e3:ff:63:42:ca:71:6f:6e:0c:d3:92:56:b4:78:e1:df:d6:62:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
        Validity
            Not Before: Apr 24 17:26:56 2024 GMT
            Not After : Apr 23 17:31:56 2025 GMT
        Subject: CN=9A9F305DBC458F20967D7501D570D634F1C6295E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:c3:7e:ec:fb:e2:e2:73:ec:a7:04:dc:9f:
                    a5:15:a9:9b:aa:f1:c0:ef:2f:7e:a9:93:c3:3f:9c:
                    f1:69:2d:79:ab:91:df:11:d3:4b:ee:c2:05:e7:21:
                    2a:96:54:2d:74:ee:00:a2:a6:dd:64:2a:d5:cd:f5:
                    98:32:cb:86:3a:f0:e9:4c:8d:ae:ce:0a:8e:c9:d0:
                    08:ec:2a:41:66:5a:52:47:ad:76:e4:e3:72:92:7e:
                    68:2c:8a:6b:e9:b9:49:6b:a4:2d:93:fb:53:0e:a8:
                    6f:37:b0:53:c2:21:38:d5:5a:fe:5c:e5:39:34:8e:
                    dd:2e:50:3e:99:30:1c:2b:75:c6:ef:8a:80:90:fa:
                    67:1e:75:cd:8b:f1:5d:cd:ca:f7:87:bb:80:86:e6:
                    ae:31:2d:0f:6c:bd:0a:1d:7b:46:6e:cf:07:51:1e:
                    1f:e9:4e:3f:6d:50:77:22:c0:72:56:cc:e1:c5:b4:
                    82:f8:07:69:b9:ee:c5:89:2d:af:2d:8d:85:2c:da:
                    44:27:30:e3:5a:86:54:a2:4f:9f:8e:2c:d7:22:f1:
                    d2:20:48:4c:fb:be:ad:77:65:ba:1a:62:27:ac:da:
                    39:a2:32:12:d6:7d:69:ab:d8:5f:ab:d9:21:84:f6:
                    7f:a1:e6:44:03:a2:8e:ca:a4:ea:fb:69:d0:7e:62:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9F:30:5D:BC:45:8F:20:96:7D:75:01:D5:70:D6:34:F1:C6:29:5E
            X509v3 Authority Key Identifier:
                keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139382e302f32332d3233203d3e20323632373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:4a:1f:be:4c:56:8f:bb:05:ef:a6:c6:66:21:9f:dc:ad:58:
         0f:4d:b4:d6:28:36:b6:04:aa:47:c2:f9:48:57:fc:fe:c5:11:
         23:0e:cc:b8:07:01:87:92:f9:b5:c2:89:0e:57:84:82:49:8a:
         8d:cf:48:89:ef:48:aa:be:7c:64:cc:2e:ca:5d:0f:c0:14:1f:
         5b:7d:84:5e:3c:1f:94:dc:22:fa:91:cb:69:31:83:06:c9:b0:
         25:c3:8a:6d:7e:17:f8:cd:a5:c4:cd:59:9b:49:ec:76:c5:74:
         41:22:d2:85:c1:ec:bd:cb:40:27:01:6a:3f:4a:e6:0e:e6:18:
         81:01:e2:51:6d:23:7a:29:e7:11:79:82:80:91:8e:cd:16:73:
         a3:07:cf:0f:b4:5f:26:25:b5:70:9b:a7:63:b1:7f:91:2d:0b:
         e7:e9:fa:ab:4c:01:35:5a:cc:47:03:8b:dc:09:c1:dc:dc:8c:
         50:fd:ca:40:6a:b1:2c:99:26:61:2f:e0:3e:5a:2a:a9:b2:37:
         b9:13:f3:d5:b5:85:97:7c:81:05:9c:02:20:f9:9b:da:0f:5f:
         36:2c:0e:ad:4c:8c:8a:12:b5:87:8f:2d:e8:65:bd:56:fd:65:
         fa:50:32:18:bb:a6:12:16:5a:64:c1:74:7d:5a:fd:ca:61:4e:
         69:58:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org