Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3138362e3230382e3235302e302f32332d3233203d3e20323633303836.roa
File:                     3138362e3230382e3235302e302f32332d3233203d3e20323633303836.roa (raw, json)
Hash identifier:          TxeGv9KeeW2DhbgRTgv04lM/q3rEe8sJorN5+lrwxTk=
Subject key identifier:   2E:56:AA:82:A1:7A:82:3A:86:DE:97:1F:E5:43:3A:C1:B8:B3:92:8C
Certificate issuer:       /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial:       3AA4939A21D2FA76A5372E3DDBC3865986732189
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3138362e3230382e3235302e302f32332d3233203d3e20323633303836.roa
Signing time:             Thu 04 Apr 2024 15:03:05 +0000
ROA not before:           Thu 04 Apr 2024 14:58:05 +0000
ROA not after:            Thu 03 Apr 2025 15:03:05 +0000
asID:                     263086
IP address blocks:        186.208.250.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a4:93:9a:21:d2:fa:76:a5:37:2e:3d:db:c3:86:59:86:73:21:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
        Validity
            Not Before: Apr  4 14:58:05 2024 GMT
            Not After : Apr  3 15:03:05 2025 GMT
        Subject: CN=2E56AA82A17A823A86DE971FE5433AC1B8B3928C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:af:2e:aa:cd:fb:6f:17:d1:2e:e3:b7:19:
                    be:33:b0:45:3c:42:f7:3b:ce:a1:ef:ed:39:f5:fa:
                    54:87:b3:8d:86:a6:36:17:9f:cb:0e:00:6d:d2:07:
                    3f:3e:3d:fa:7f:2c:81:e1:a6:c4:15:75:04:2f:eb:
                    b4:9c:f5:57:12:bd:ae:cd:47:e1:b4:b1:5f:a8:7a:
                    4a:79:06:cf:72:18:b1:8e:92:30:fa:44:9b:eb:10:
                    f7:7f:c7:c0:77:e6:84:0e:6d:e3:7a:60:1c:32:cd:
                    a9:51:cb:41:8f:42:df:bf:ed:4b:aa:f3:e9:71:80:
                    c4:f9:e8:5f:8f:7b:ec:90:1f:15:b7:d9:49:82:8a:
                    ac:7f:a0:e2:1c:11:6a:0d:db:dd:34:f9:61:20:80:
                    d4:fb:b3:6f:61:b0:46:9b:78:5e:65:e7:04:2e:30:
                    df:dd:fc:85:00:b0:2f:aa:9a:ea:6e:0e:69:5a:ee:
                    c8:cb:18:36:db:a8:f7:28:7c:f3:b4:b2:c6:05:82:
                    f5:c5:9c:f6:8f:fa:0c:cd:cf:0c:63:8e:54:1f:22:
                    ff:f7:07:fd:1d:a4:7a:c9:1b:7b:06:19:86:a8:73:
                    ec:36:2d:75:19:fd:c0:b9:ec:33:88:e3:34:fc:84:
                    ba:3f:c5:34:ba:1b:48:0f:29:b5:c1:a2:98:00:ae:
                    5f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:56:AA:82:A1:7A:82:3A:86:DE:97:1F:E5:43:3A:C1:B8:B3:92:8C
            X509v3 Authority Key Identifier:
                keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3138362e3230382e3235302e302f32332d3233203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:24:83:d3:d2:5c:e1:28:ae:00:08:47:a3:a5:81:cd:34:bf:
         c5:9b:d5:0f:9d:3d:8c:c4:5e:85:7a:53:84:74:42:27:e2:af:
         a0:1b:37:f6:23:dd:e3:63:5a:95:0c:b7:5d:c9:8b:4a:75:44:
         83:cf:09:e2:3a:3c:52:9f:72:64:15:2b:a6:b8:4b:d5:44:08:
         95:be:12:69:e5:91:96:38:08:4d:20:b6:bd:c6:58:43:20:5f:
         c3:f6:38:58:73:50:c1:72:39:89:6d:c1:b2:42:23:28:e5:a7:
         75:bd:e4:d2:66:1b:79:17:b2:13:b2:34:72:82:ae:29:21:89:
         bc:04:8c:65:20:62:56:ee:9d:ef:c1:3a:73:86:12:6c:2a:f0:
         8b:1c:d1:5a:f8:f9:6c:69:40:88:d5:d4:ec:e9:7e:54:a4:d6:
         ac:1a:75:9c:43:25:26:1c:fa:73:7e:c3:47:59:d6:62:aa:db:
         e7:f3:08:78:3c:bf:bb:79:e3:3c:03:b0:d0:43:8d:dd:39:69:
         e3:b0:c4:42:6a:ed:e8:cc:92:c9:53:67:cd:e1:fa:5c:e2:89:
         6f:7e:d9:2f:86:70:76:da:27:8a:4b:5b:ce:f1:4b:0b:64:53:
         f4:8c:ab:5b:6b:a2:90:63:18:3e:52:e0:41:40:a0:f7:61:ff:
         b9:72:d8:18
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOqSTmiHS+nalNy4928OGWYZzIYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkwNzVBNUI2MTY0MjMwQTczNzA1QTZFMzkzRDI2Q0Y4
MDJCNDVCNDAeFw0yNDA0MDQxNDU4MDVaFw0yNTA0MDMxNTAzMDVaMDMxMTAvBgNV
BAMTKDJFNTZBQTgyQTE3QTgyM0E4NkRFOTcxRkU1NDMzQUMxQjhCMzkyOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6y68uqs37bxfRLuO3Gb4zsEU8
Qvc7zqHv7Tn1+lSHs42GpjYXn8sOAG3SBz8+Pfp/LIHhpsQVdQQv67Sc9VcSva7N
R+G0sV+oekp5Bs9yGLGOkjD6RJvrEPd/x8B35oQObeN6YBwyzalRy0GPQt+/7Uuq
8+lxgMT56F+Pe+yQHxW32UmCiqx/oOIcEWoN2900+WEggNT7s29hsEabeF5l5wQu
MN/d/IUAsC+qmupuDmla7sjLGDbbqPcofPO0ssYFgvXFnPaP+gzNzwxjjlQfIv/3
B/0dpHrJG3sGGYaoc+w2LXUZ/cC57DOI4zT8hLo/xTS6G0gPKbXBopgArl/PAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULlaqgqF6gjqG3pcf5UM6wbizkowwHwYDVR0j
BBgwFoAUmQdaW2FkIwpzcFpuOT0mz4ArRbQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5
bmQvMS85OTA3NUE1QjYxNjQyMzBBNzM3MDVBNkUzOTNEMjZDRjgwMkI0NUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MDc1QTVCNjE2NDIzMEE3
MzcwNUE2RTM5M0QyNkNGODAyQjQ1QjQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RVNko0N0NRY2RicnJHd0o2WFdNMkVHUmNtU1U1dDUzQnY2RVhMeXRoeW5kLzEv
MzEzODM2MmUzMjMwMzgyZTMyMzUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzMwMzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrQ+jANBgkqhkiG9w0BAQsFAAOCAQEAESSD
09Jc4SiuAAhHo6WBzTS/xZvVD509jMRehXpThHRCJ+KvoBs39iPd42NalQy3XcmL
SnVEg88J4jo8Up9yZBUrprhL1UQIlb4SaeWRljgITSC2vcZYQyBfw/Y4WHNQwXI5
iW3BskIjKOWndb3k0mYbeReyE7I0coKuKSGJvASMZSBiVu6d78E6c4YSbCrwixzR
Wvj5bGlAiNXU7Ol+VKTWrBp1nEMlJhz6c37DR1nWYqrb5/MIeDy/u3njPAOw0EON
3Tlp47DEQmrt6MySyVNnzeH6XOKJb37ZL4ZwdtoniktbzvFLC2RT9IyrW2uikGMY
PlLgQUCg92H/uXLYGA==
-----END CERTIFICATE-----
Generated at Fri Sep 20 00:00:37 2024 by rpki-client on console-ams.rpki-client.org