Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3132332e302f32342d3234203d3e20323637343230.roa
File:                     3138362e3230392e3132332e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          Xaa2X/ve/0f4def8QEXyY94PYDD6u2TckJPmxKV5BjU=
Subject key identifier:   64:62:E9:EB:2B:CE:1D:26:3E:AD:DD:D7:F0:B0:FE:B5:EF:F1:0E:C4
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       1671E4F4007FA4C0AC6E7A2602074AF0D0F22204
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3132332e302f32342d3234203d3e20323637343230.roa
Signing time:             Tue 19 Nov 2024 21:21:36 +0000
ROA not before:           Tue 19 Nov 2024 21:16:36 +0000
ROA not after:            Tue 18 Nov 2025 21:21:36 +0000
asID:                     267420
IP address blocks:        186.209.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 01:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:71:e4:f4:00:7f:a4:c0:ac:6e:7a:26:02:07:4a:f0:d0:f2:22:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 19 21:16:36 2024 GMT
            Not After : Nov 18 21:21:36 2025 GMT
        Subject: CN=6462E9EB2BCE1D263EADDDD7F0B0FEB5EFF10EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4c:a7:29:17:6e:c0:b2:ed:90:40:3d:33:a8:
                    f6:57:b8:bc:58:cc:93:f6:c0:81:6c:76:e1:d9:98:
                    f7:70:cd:15:c8:d3:43:fc:09:66:53:b4:fe:18:ae:
                    c4:da:f7:a9:e7:ba:c6:1c:27:b9:12:6b:2d:bd:40:
                    72:0e:6f:57:ec:37:e5:2f:4d:33:81:5f:e2:f7:a0:
                    d4:a8:9d:25:85:fa:2d:03:f0:28:fc:8e:e2:6c:96:
                    2b:0b:61:58:9d:54:d9:69:fb:53:7a:b9:50:28:5b:
                    a8:fa:b0:85:a7:95:82:1d:7b:aa:45:d6:ea:bf:25:
                    c0:08:90:3c:53:86:db:69:2d:b8:e0:32:17:80:15:
                    a5:fc:eb:14:81:ba:f5:6b:cc:f6:57:7b:74:4a:d6:
                    29:b6:bb:21:2c:42:bc:94:2f:22:f1:ed:4b:6e:66:
                    ae:eb:c0:07:b7:6f:87:e3:a6:7f:bd:a7:d4:17:ad:
                    e7:d4:b7:8a:c8:6f:94:f4:7f:99:55:40:fc:24:83:
                    b1:e7:af:eb:e0:c8:bb:b6:2d:71:b5:a5:73:f1:3f:
                    13:d6:69:a8:1d:8a:d9:fb:9e:47:44:63:8e:7b:0f:
                    d8:8f:71:d7:ac:b7:ec:0b:58:76:51:64:9a:f7:d8:
                    c4:5c:f7:c9:1f:35:fc:6d:f8:1c:7b:48:a7:17:db:
                    e6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:62:E9:EB:2B:CE:1D:26:3E:AD:DD:D7:F0:B0:FE:B5:EF:F1:0E:C4
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3132332e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:7e:61:6e:09:e4:65:4f:93:98:6d:68:37:ab:05:74:ed:ec:
         c8:61:b6:3c:6f:2d:85:77:fd:c6:da:08:08:74:5e:fe:60:65:
         ed:71:a1:26:1e:56:c0:e6:b6:d4:61:82:c7:a2:c1:b0:41:86:
         25:c4:aa:29:8e:ac:fe:ab:8a:e8:1c:b5:3b:39:ad:65:6f:bb:
         4a:14:e5:14:87:a5:72:1b:43:07:eb:2f:d7:82:d3:b3:19:7c:
         d2:dd:e7:27:93:32:e0:2c:ac:07:6f:b0:71:00:72:a4:19:b1:
         0f:14:1f:a2:6c:2a:23:7d:92:33:70:59:d4:48:7f:6d:fd:e8:
         e1:6d:0f:6a:10:21:94:19:87:64:9a:5e:90:15:a9:8d:68:11:
         63:ee:5c:f9:00:b9:6d:9e:96:ae:8b:9d:7c:6b:8d:6c:69:60:
         de:12:0e:9d:7d:4e:32:9c:24:ce:44:c8:9b:8f:51:a6:58:68:
         6a:7a:0f:f9:51:57:eb:89:36:30:0c:11:27:2e:b3:d8:82:40:
         b2:0d:50:6e:b8:91:75:0a:6f:4d:20:6d:ec:b8:c4:d2:6c:08:
         f4:56:a4:a9:4d:9d:0c:d7:76:52:e5:be:7b:27:07:0f:fa:5f:
         30:da:0d:5e:c6:a1:ea:43:13:0a:6a:69:f5:79:c4:d3:e7:33:
         84:e1:ec:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 04:35:43 2024 by rpki-client on console-fra.rpki-client.org