Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3138362e3230382e3235312e302f32342d3234203d3e20323633303836.roa
File:                     3138362e3230382e3235312e302f32342d3234203d3e20323633303836.roa (raw, json)
Hash identifier:          TrUkE8t4Wyr04clIxMAvzeMn5f6twdaAZmdPUE0tzuY=
Subject key identifier:   10:77:7C:64:F5:19:EB:97:34:0C:E2:37:28:71:2F:B5:8D:87:A0:F1
Certificate issuer:       /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial:       25C84575D055709B16AE290BD643D528809A9D9C
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3138362e3230382e3235312e302f32342d3234203d3e20323633303836.roa
Signing time:             Tue 28 May 2024 14:29:01 +0000
ROA not before:           Tue 28 May 2024 14:24:01 +0000
ROA not after:            Tue 27 May 2025 14:29:01 +0000
asID:                     263086
IP address blocks:        186.208.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 17:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c8:45:75:d0:55:70:9b:16:ae:29:0b:d6:43:d5:28:80:9a:9d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
        Validity
            Not Before: May 28 14:24:01 2024 GMT
            Not After : May 27 14:29:01 2025 GMT
        Subject: CN=10777C64F519EB97340CE23728712FB58D87A0F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:a4:b8:0e:26:78:1a:7c:a0:f6:64:5b:93:
                    cd:88:43:08:67:f5:d2:d4:28:d4:97:c8:4a:ef:82:
                    ee:2a:8c:6a:df:9a:f4:a0:18:bd:6f:f6:9a:2c:6e:
                    9d:22:27:95:6b:ad:7e:c5:db:2c:6f:ab:1f:9e:1b:
                    e7:93:91:22:74:dd:9d:19:d1:0b:d2:4d:19:ac:29:
                    e9:3d:f0:e8:0e:da:3e:aa:29:f8:aa:cc:bb:9e:7d:
                    6a:5e:04:ce:a1:27:a6:44:dd:02:5a:06:5b:e0:dd:
                    c8:2e:42:32:69:5e:6a:99:30:bb:0e:18:ff:87:57:
                    19:e0:ab:7c:76:68:48:e3:e5:3e:89:13:50:8e:03:
                    c1:a4:35:a8:52:0d:c8:49:a2:3e:b3:e2:0d:bf:fa:
                    2a:45:95:99:23:ff:a8:b3:57:3b:bf:51:26:5e:8f:
                    a3:20:ae:33:60:5d:18:c4:1b:7b:36:08:51:56:27:
                    2f:bf:c3:27:8f:88:92:56:b8:59:69:09:0d:d7:87:
                    45:21:50:da:7e:8d:2c:b2:ed:58:b7:9e:4d:90:12:
                    f2:e8:cc:3e:b1:6e:32:a2:d7:72:b6:3c:f5:3b:06:
                    96:cf:88:2e:6d:6d:c6:fc:65:7e:c0:27:64:b3:6f:
                    f3:ed:e0:16:02:3f:a6:e9:56:4b:fb:69:0f:22:b1:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:77:7C:64:F5:19:EB:97:34:0C:E2:37:28:71:2F:B5:8D:87:A0:F1
            X509v3 Authority Key Identifier:
                keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3138362e3230382e3235312e302f32342d3234203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:24:a4:d5:19:da:64:c1:e0:02:e1:00:c7:9e:1a:da:54:d8:
         c1:6d:5a:3a:c8:5a:e3:59:d5:f4:66:12:85:53:d6:44:45:f3:
         92:2d:e2:0b:dd:f2:c5:c1:da:8b:18:38:26:e0:39:82:74:b6:
         51:fb:34:cb:66:c1:e3:ad:c0:f5:ed:23:f0:cc:a8:10:ea:2c:
         eb:bc:26:fe:43:a0:c3:c9:ee:6e:a8:a3:a5:42:fc:fa:7a:c5:
         a2:58:91:e8:cd:a1:05:09:17:32:d1:e4:8b:f8:c3:00:75:ee:
         71:78:de:f5:09:45:7d:eb:37:4b:96:a2:c3:23:95:2c:85:8b:
         71:9d:6f:a5:4b:51:6f:54:b3:98:8e:a1:5d:6d:e4:ee:a2:fb:
         7f:7f:e5:6a:ae:27:7a:06:9a:46:4d:41:96:92:d8:b8:6e:06:
         c4:f9:8d:0b:07:35:08:2c:90:d5:87:e0:f5:ff:03:a9:2e:7d:
         1d:f5:4a:47:7c:38:75:9d:c2:ed:fc:05:6f:24:7d:65:3a:ef:
         65:83:03:de:7d:d7:ed:f9:c6:8e:81:44:a7:b9:eb:7b:f8:4f:
         40:ba:6c:95:3c:0d:9e:83:6b:cd:6f:27:db:0b:63:ce:ec:34:
         8b:3a:77:bf:d2:c9:dc:4a:90:ea:11:15:4a:0d:a7:40:f3:95:
         24:84:e6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 00:00:37 2024 by rpki-client on console-ams.rpki-client.org