Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3138312e302f32342d3234203d3e203533323039.roa
File:                     3138362e3233332e3138312e302f32342d3234203d3e203533323039.roa (raw, json)
Hash identifier:          iiVpzuiuMbPjPf87LZpwGmcCqE1D/CvBFBew1KQo+E8=
Subject key identifier:   38:F6:1F:45:94:4A:94:E2:CC:95:B8:C3:28:F0:EB:CE:28:C7:E3:F9
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       2ACA0EAF5B41ECF5321B61F575D9C09C304ECF1A
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3138312e302f32342d3234203d3e203533323039.roa
Signing time:             Tue 27 Aug 2024 13:01:40 +0000
ROA not before:           Tue 27 Aug 2024 12:56:40 +0000
ROA not after:            Tue 26 Aug 2025 13:01:40 +0000
asID:                     53209
IP address blocks:        186.233.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ca:0e:af:5b:41:ec:f5:32:1b:61:f5:75:d9:c0:9c:30:4e:cf:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug 27 12:56:40 2024 GMT
            Not After : Aug 26 13:01:40 2025 GMT
        Subject: CN=38F61F45944A94E2CC95B8C328F0EBCE28C7E3F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:8e:64:8a:b9:4f:2c:6f:73:6c:5c:0c:05:
                    1a:62:4b:3d:01:a1:ea:e7:24:dd:85:03:b3:9d:32:
                    75:05:18:37:e2:5e:1f:12:9a:ae:e1:7f:c7:a4:53:
                    01:1a:36:df:2b:45:9c:cd:81:de:39:e7:78:ce:44:
                    b4:fe:d4:44:f3:49:7c:9e:80:a8:b5:e1:3a:8d:f1:
                    d1:6f:66:15:aa:dd:85:70:f5:d3:3e:aa:66:b2:42:
                    35:cb:58:11:dc:b7:51:c8:cd:5c:1b:b1:bf:3f:6a:
                    f9:81:25:80:62:1a:c5:22:ac:67:c8:6e:29:af:09:
                    7c:d2:f9:9b:19:c9:05:00:94:3e:0a:8e:f8:6f:cd:
                    e4:49:80:a0:e7:53:c1:ac:6b:4e:18:72:2b:e4:0f:
                    fd:52:78:4d:05:e4:39:6f:49:66:7d:e6:b5:88:fe:
                    df:77:62:b3:50:33:5e:54:47:c1:74:b2:cd:b5:84:
                    f6:80:cc:91:de:c5:55:24:03:21:4f:c6:87:e3:64:
                    59:a5:3c:7b:4e:78:10:6c:bb:b3:01:a4:e0:58:ef:
                    02:7c:15:ce:66:86:68:a6:79:2b:58:8e:6b:51:1b:
                    a8:08:00:e6:dd:d0:33:ec:2d:20:24:93:1b:d4:05:
                    cf:ef:b7:73:02:b8:97:0a:73:29:9f:5f:af:7d:51:
                    9d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F6:1F:45:94:4A:94:E2:CC:95:B8:C3:28:F0:EB:CE:28:C7:E3:F9
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3138312e302f32342d3234203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:7b:e1:ab:55:ef:03:87:33:49:db:53:c7:71:4b:5a:62:4b:
         94:fb:13:96:01:a7:a5:5e:8d:d5:9c:69:8f:a2:53:00:6f:2b:
         15:f2:b2:e6:f8:23:28:96:93:9a:32:3f:38:20:55:63:54:c6:
         de:66:57:dc:3c:19:b4:5c:32:1e:d7:3c:17:7a:5d:82:a1:2b:
         ac:75:48:58:ed:31:91:d8:54:9f:e1:c2:49:a0:e2:d8:bb:2b:
         b1:09:d8:7a:8b:df:a3:28:cb:5b:8f:ac:3c:a5:64:b9:e1:cb:
         11:73:a1:86:29:3f:df:63:01:a6:56:e6:a9:31:93:61:1d:c7:
         43:67:40:63:10:d5:5e:ef:53:31:81:9c:78:48:5c:98:80:f2:
         ac:cf:65:4b:a9:67:79:a8:e5:e4:54:4e:a8:5a:4e:5d:1a:4c:
         b2:56:3f:c9:66:6e:e0:1e:d7:22:40:b2:87:51:4c:da:ab:cc:
         7d:0d:40:99:82:5f:ca:27:3c:04:d4:9f:7b:c9:be:d4:2e:ad:
         eb:8d:0e:45:6a:67:6f:00:91:a3:92:dd:ad:d4:10:ce:e7:0c:
         a5:81:61:3e:30:8c:24:7f:e7:29:b3:ca:3a:21:57:54:d0:79:
         65:62:a3:3f:85:51:60:f1:f2:f2:1b:4a:78:1f:4b:01:29:4e:
         14:9c:7f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:20:17 2024 by rpki-client on console-fra.rpki-client.org