Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137382e302f32342d3234203d3e203533323039.roa
File:                     3138362e3233332e3137382e302f32342d3234203d3e203533323039.roa (raw, json)
Hash identifier:          hrWxnvj3sALdHvV7unP+IMUvS9U2gT0kXTf3cnsQBPI=
Subject key identifier:   86:EA:BD:0F:C8:D5:F9:AC:2A:F9:86:FC:17:E9:B8:0F:EB:04:AC:52
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       08412AE0E0B93431C44C5B765F8B65E4F485A417
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137382e302f32342d3234203d3e203533323039.roa
Signing time:             Tue 27 Aug 2024 13:00:43 +0000
ROA not before:           Tue 27 Aug 2024 12:55:43 +0000
ROA not after:            Tue 26 Aug 2025 13:00:43 +0000
asID:                     53209
IP address blocks:        186.233.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:41:2a:e0:e0:b9:34:31:c4:4c:5b:76:5f:8b:65:e4:f4:85:a4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug 27 12:55:43 2024 GMT
            Not After : Aug 26 13:00:43 2025 GMT
        Subject: CN=86EABD0FC8D5F9AC2AF986FC17E9B80FEB04AC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:43:f9:cf:33:72:62:28:70:83:5f:3c:c1:
                    48:ef:5c:a1:0b:e8:2b:89:41:68:c5:56:0d:d2:6d:
                    b7:df:d7:66:98:fc:cc:f1:6b:14:29:05:54:77:d2:
                    ad:e9:b9:79:73:1c:19:d9:38:e1:b9:41:53:2b:f6:
                    95:ef:c4:d8:81:f7:10:91:52:34:ce:dc:8b:1a:61:
                    8b:e9:cf:54:40:0f:ae:ee:6b:e7:34:97:64:57:0e:
                    f1:be:c8:a5:0a:b0:03:3e:6b:41:ef:61:da:72:9e:
                    2a:df:59:e2:4a:15:8b:08:52:b6:16:8b:ca:37:02:
                    62:62:fa:2a:68:ae:aa:91:61:bc:cd:fb:42:bb:ac:
                    58:ac:a1:cf:2f:02:e8:cc:2e:39:cc:9a:98:bd:7d:
                    df:fc:61:e1:bc:d7:5a:23:a8:ae:66:3a:a8:bc:99:
                    ee:ef:2f:a9:af:ff:7a:eb:87:dd:6b:0b:85:a2:ab:
                    19:eb:69:24:93:c0:fa:d5:a2:73:a1:a6:48:f9:79:
                    84:69:39:8e:e0:b0:25:f9:7c:bc:09:2e:03:6f:67:
                    44:66:3c:01:fe:da:7c:04:ac:bb:d5:05:af:74:04:
                    f7:35:56:c0:68:fc:67:5e:f8:45:cc:17:12:ee:e6:
                    a0:58:a0:6b:36:a9:50:86:17:a4:2b:34:89:b5:27:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EA:BD:0F:C8:D5:F9:AC:2A:F9:86:FC:17:E9:B8:0F:EB:04:AC:52
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137382e302f32342d3234203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:a9:be:f6:f1:8c:e3:6e:53:b1:d9:32:3a:84:44:63:02:87:
         26:b5:05:aa:ca:e1:a8:7d:cb:8a:81:01:ef:f0:84:c1:40:fe:
         b7:48:94:a8:c7:77:2a:04:86:d2:9c:5f:0e:27:42:95:b7:bc:
         e8:92:2e:42:58:d3:c8:2e:4a:a1:da:1f:de:f4:59:d7:97:ab:
         a5:98:2a:ef:6d:7c:fe:aa:1b:d9:88:01:fb:48:b4:2f:99:7f:
         a0:bf:df:d0:28:cf:47:05:7c:ab:3c:d8:99:14:38:4d:11:bb:
         26:79:5b:21:02:5e:c9:96:41:17:16:d7:4d:6d:62:47:1e:86:
         cf:58:ad:bb:54:7b:fa:b8:9e:ef:1c:17:12:55:b1:c7:67:69:
         1b:34:53:9b:01:fc:6f:96:57:c3:3a:41:85:6f:bd:a3:b0:2a:
         d6:47:41:d3:0c:6d:16:1c:48:55:dd:86:c3:80:ad:b4:c1:ca:
         be:ae:19:e7:8d:ec:0b:12:8a:1b:dc:44:46:2b:2e:0b:08:c8:
         70:62:c5:4f:de:b2:7e:be:0a:f9:a0:7e:0d:ed:26:4e:07:cd:
         bd:67:78:12:6c:e9:3f:47:2d:73:c6:87:7e:1e:5f:df:8a:15:
         bd:2a:b4:15:37:7f:2e:c6:96:7a:20:b9:4d:67:e2:18:1d:c7:
         8b:cb:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:57 2024 by rpki-client on console-ams.rpki-client.org