Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3138362e3230382e3234392e302f32342d3234203d3e20323633303836.roa
File:                     3138362e3230382e3234392e302f32342d3234203d3e20323633303836.roa (raw, json)
Hash identifier:          EnRSFSJ/uOCDnNycWfDwuQDk350dXNBUkyOMeeXvhGU=
Subject key identifier:   EA:86:62:2B:08:2C:C1:43:0E:D0:66:28:62:C1:16:82:46:5B:56:B6
Certificate issuer:       /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial:       086FBC77B2B1515C22A4D99A9B042DF348F52CA6
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3138362e3230382e3234392e302f32342d3234203d3e20323633303836.roa
Signing time:             Tue 28 May 2024 14:28:24 +0000
ROA not before:           Tue 28 May 2024 14:23:24 +0000
ROA not after:            Tue 27 May 2025 14:28:24 +0000
asID:                     263086
IP address blocks:        186.208.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 17:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6f:bc:77:b2:b1:51:5c:22:a4:d9:9a:9b:04:2d:f3:48:f5:2c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
        Validity
            Not Before: May 28 14:23:24 2024 GMT
            Not After : May 27 14:28:24 2025 GMT
        Subject: CN=EA86622B082CC1430ED0662862C11682465B56B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:62:00:ce:5e:ad:28:24:19:0f:d4:81:93:
                    cc:bf:25:d4:9c:f2:1f:5e:d6:14:3f:0e:1a:88:6c:
                    80:97:37:41:40:19:59:b1:ef:7c:07:4f:01:9c:b2:
                    91:b7:33:78:f0:5d:5f:22:ec:1f:d0:49:0b:e4:28:
                    59:b0:ed:51:f4:d9:25:be:47:45:6a:e3:f1:5f:21:
                    f0:88:15:0c:a6:b6:e5:ee:16:b7:0d:28:4b:20:a8:
                    20:88:5e:4f:8c:1c:bc:93:cb:67:f6:f6:ad:f6:b0:
                    b4:62:af:dd:37:f1:3d:ee:51:ed:31:af:fc:c8:05:
                    bf:f8:da:17:42:17:40:cf:5c:6f:52:bb:9f:2f:cf:
                    6f:e1:ed:b3:e2:03:66:cc:4b:60:f8:a6:00:79:87:
                    2c:96:34:34:5e:bd:26:3d:0b:04:00:50:44:96:36:
                    fe:63:d1:9e:ad:8d:b7:8f:60:75:1f:7e:2c:7a:97:
                    56:b8:d2:00:64:50:67:f5:14:c7:81:c4:f1:69:2d:
                    db:d3:36:66:59:4e:ea:db:96:f0:1c:b7:24:1d:15:
                    80:40:f6:6e:de:19:f2:74:3b:a4:c7:0b:5e:f4:41:
                    52:54:fd:dc:ab:96:9f:7e:b4:ac:25:43:83:e2:6b:
                    6a:6a:aa:7b:90:8e:01:5d:c8:5c:76:10:86:7b:cf:
                    d4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:86:62:2B:08:2C:C1:43:0E:D0:66:28:62:C1:16:82:46:5B:56:B6
            X509v3 Authority Key Identifier:
                keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3138362e3230382e3234392e302f32342d3234203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:30:c7:d9:9f:24:23:26:88:41:40:2d:cf:e3:9e:fa:95:55:
         99:dd:fe:3d:2e:29:23:25:a0:61:2b:e5:84:a6:ac:0f:2c:dc:
         8c:3e:2b:44:41:e9:82:55:a4:67:30:03:98:f4:14:ac:fc:3d:
         20:bc:86:fe:48:39:9d:bf:b4:3d:2d:3d:04:7d:92:0c:cd:3c:
         3e:b7:49:bd:d3:e8:b1:28:05:1e:f4:31:07:52:14:66:73:24:
         b7:f5:44:c9:1a:b8:c0:c8:ef:5c:39:72:bf:e4:fc:f2:98:5b:
         17:76:ed:35:22:63:ab:1c:c9:b4:b7:a0:b5:26:4d:8b:fe:7e:
         ad:1a:e0:88:33:7d:df:75:79:92:3b:cf:6e:84:c8:11:ee:ed:
         98:2b:36:92:2d:54:a2:95:02:1b:1e:48:06:67:cb:79:52:da:
         5f:15:f6:d6:bb:5f:28:fc:94:74:e3:0a:d7:3a:46:a2:d8:3a:
         6d:32:f1:2a:c0:b9:5d:8f:fd:17:29:ed:dd:b2:77:95:58:0f:
         aa:40:a1:ee:1f:b6:cc:b8:3d:f7:e4:2f:c7:5c:fc:12:39:26:
         d6:72:42:ca:5c:e3:db:8b:72:7f:fb:90:ba:53:4a:2a:2c:91:
         ad:b4:29:30:8d:a4:6d:41:77:f1:83:50:b4:31:7c:49:cc:bc:
         2f:f7:e8:62
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCG+8d7KxUVwipNmamwQt80j1LKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkwNzVBNUI2MTY0MjMwQTczNzA1QTZFMzkzRDI2Q0Y4
MDJCNDVCNDAeFw0yNDA1MjgxNDIzMjRaFw0yNTA1MjcxNDI4MjRaMDMxMTAvBgNV
BAMTKEVBODY2MjJCMDgyQ0MxNDMwRUQwNjYyODYyQzExNjgyNDY1QjU2QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzcWIAzl6tKCQZD9SBk8y/JdSc
8h9e1hQ/DhqIbICXN0FAGVmx73wHTwGcspG3M3jwXV8i7B/QSQvkKFmw7VH02SW+
R0Vq4/FfIfCIFQymtuXuFrcNKEsgqCCIXk+MHLyTy2f29q32sLRir9038T3uUe0x
r/zIBb/42hdCF0DPXG9Su58vz2/h7bPiA2bMS2D4pgB5hyyWNDRevSY9CwQAUESW
Nv5j0Z6tjbePYHUffix6l1a40gBkUGf1FMeBxPFpLdvTNmZZTurblvActyQdFYBA
9m7eGfJ0O6THC170QVJU/dyrlp9+tKwlQ4Pia2pqqnuQjgFdyFx2EIZ7z9SXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU6oZiKwgswUMO0GYoYsEWgkZbVrYwHwYDVR0j
BBgwFoAUmQdaW2FkIwpzcFpuOT0mz4ArRbQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5
bmQvMS85OTA3NUE1QjYxNjQyMzBBNzM3MDVBNkUzOTNEMjZDRjgwMkI0NUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MDc1QTVCNjE2NDIzMEE3
MzcwNUE2RTM5M0QyNkNGODAyQjQ1QjQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RVNko0N0NRY2RicnJHd0o2WFdNMkVHUmNtU1U1dDUzQnY2RVhMeXRoeW5kLzEv
MzEzODM2MmUzMjMwMzgyZTMyMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrQ+TANBgkqhkiG9w0BAQsFAAOCAQEApTDH
2Z8kIyaIQUAtz+Oe+pVVmd3+PS4pIyWgYSvlhKasDyzcjD4rREHpglWkZzADmPQU
rPw9ILyG/kg5nb+0PS09BH2SDM08PrdJvdPosSgFHvQxB1IUZnMkt/VEyRq4wMjv
XDlyv+T88phbF3btNSJjqxzJtLegtSZNi/5+rRrgiDN933V5kjvPboTIEe7tmCs2
ki1UopUCGx5IBmfLeVLaXxX21rtfKPyUdOMK1zpGotg6bTLxKsC5XY/9Fynt3bJ3
lVgPqkCh7h+2zLg99+Qvx1z8Ejkm1nJCylzj24tyf/uQulNKKiyRrbQpMI2kbUF3
8YNQtDF8Scy8L/foYg==
-----END CERTIFICATE-----
Generated at Thu Sep 19 21:35:30 2024 by rpki-client on console-fra.rpki-client.org