Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130342e302f32322d3234203d3e20323633303733.roa
File:                     3138362e3233332e3130342e302f32322d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          hkbvWGcOEf4/nye0qjzlHy4so4Bo04BF2InpI+J2vFs=
Subject key identifier:   6E:F9:A5:DC:E0:4C:18:0D:FF:A9:1E:19:B8:D8:89:65:DF:EE:C4:9C
Certificate issuer:       /CN=117E2CD92BF6FDF22170F7F7470F9A6849FE2F68
Certificate serial:       50797D8001522D28C607165582A20329218AFC4F
Authority key identifier: 11:7E:2C:D9:2B:F6:FD:F2:21:70:F7:F7:47:0F:9A:68:49:FE:2F:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/117E2CD92BF6FDF22170F7F7470F9A6849FE2F68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130342e302f32322d3234203d3e20323633303733.roa
Signing time:             Thu 23 Nov 2023 20:28:05 +0000
ROA not before:           Thu 23 Nov 2023 20:23:05 +0000
ROA not after:            Thu 21 Nov 2024 20:28:05 +0000
asID:                     263073
IP address blocks:        186.233.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:79:7d:80:01:52:2d:28:c6:07:16:55:82:a2:03:29:21:8a:fc:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117E2CD92BF6FDF22170F7F7470F9A6849FE2F68
        Validity
            Not Before: Nov 23 20:23:05 2023 GMT
            Not After : Nov 21 20:28:05 2024 GMT
        Subject: CN=6EF9A5DCE04C180DFFA91E19B8D88965DFEEC49C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:17:87:3a:2f:4a:78:2f:0f:36:ad:d4:37:53:
                    59:52:b3:6e:f7:b8:43:93:1c:22:1a:39:e6:40:b7:
                    79:23:4c:e2:11:67:b4:37:40:f1:8b:b2:de:fb:07:
                    97:11:00:6e:75:5d:c5:de:bc:bb:f8:e9:99:c3:a2:
                    66:68:85:16:65:1a:8d:ab:7b:17:de:5d:70:12:04:
                    22:d6:7f:ee:00:a5:c1:64:e5:3e:24:76:d1:66:12:
                    ab:f6:4b:3a:13:7d:ca:23:13:ec:66:f5:a0:b9:2d:
                    5f:e2:a1:22:f2:9b:eb:58:a4:51:1b:74:da:7b:60:
                    10:17:11:75:66:83:7c:c4:98:7d:d2:d3:1e:78:55:
                    e7:59:09:cd:bc:4b:70:d0:5e:bf:e6:42:24:64:dc:
                    d6:f0:1f:c9:0f:e8:b6:f7:32:0c:c7:30:9f:80:9e:
                    31:e2:7b:b6:e4:36:da:3c:e5:3c:1a:8a:90:d8:94:
                    0e:46:36:0c:3d:e6:76:c3:90:37:0a:c6:a6:55:9f:
                    94:db:91:8c:b7:03:69:4c:35:7c:d8:b6:45:16:7c:
                    fe:23:c1:75:a7:2e:eb:c4:22:30:93:9c:69:72:3c:
                    c8:00:f0:05:f7:a6:48:d5:5b:7e:82:9f:cd:c5:e5:
                    48:47:52:18:17:f8:82:18:67:a7:2a:a7:e2:c8:f7:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F9:A5:DC:E0:4C:18:0D:FF:A9:1E:19:B8:D8:89:65:DF:EE:C4:9C
            X509v3 Authority Key Identifier:
                keyid:11:7E:2C:D9:2B:F6:FD:F2:21:70:F7:F7:47:0F:9A:68:49:FE:2F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/117E2CD92BF6FDF22170F7F7470F9A6849FE2F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/117E2CD92BF6FDF22170F7F7470F9A6849FE2F68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3138362e3233332e3130342e302f32322d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:e3:44:4b:0c:e9:24:5f:c6:23:14:9d:31:1f:80:8c:9d:10:
         00:7f:6e:7c:5d:96:4a:fe:87:16:83:0b:0f:9d:49:65:84:d7:
         dd:d4:4a:5c:ae:b2:72:bc:11:09:b3:bd:9f:37:a6:cd:4c:bf:
         f2:54:9c:80:93:55:f7:3b:2f:7e:f3:66:30:42:9b:78:0c:27:
         ec:c8:c6:11:d5:28:b4:d7:17:8e:7b:97:df:39:d0:b1:69:e5:
         f8:9b:94:76:98:2d:93:43:ff:c5:43:60:5f:98:d6:cc:04:ae:
         e3:e0:04:39:d1:7e:75:bd:c2:50:0a:7c:a8:c2:aa:ee:44:6d:
         bb:9c:f5:af:8c:76:d2:d5:0f:59:4c:09:95:a1:db:d6:70:a5:
         c6:71:dc:e7:bf:b9:e2:9a:3d:4d:9a:55:e0:9c:b8:f8:ad:5e:
         6f:47:2f:71:e2:85:2d:5a:b2:04:88:ee:c5:e3:4b:e2:3c:26:
         fa:a6:4c:b7:6b:38:2e:9d:59:b8:2f:0f:55:54:97:32:ea:3f:
         3d:07:48:d9:0a:86:ba:3f:51:16:0a:20:6f:b8:72:6d:8d:d5:
         34:7c:a9:2b:d2:5f:ed:49:c6:c1:dd:4b:d8:b5:26:e4:51:e3:
         6a:27:20:3c:8b:1a:7d:e1:3e:89:da:70:a1:84:44:22:a9:d1:
         66:cd:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 12:08:37 2023 by rpki-client on console-ams.rpki-client.org