Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3233203d3e203631363231.roa
File:                     3138362e3230392e3232322e302f32332d3233203d3e203631363231.roa (raw, json)
Hash identifier:          Sgh1+yn4neL7B3CfOBAvUSH4yRoZOAAAr08IwYCxcZ4=
Subject key identifier:   C3:9A:C4:3F:8C:57:F0:A0:26:20:50:FA:1F:70:89:14:32:53:D4:A8
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       17BE16A03B33B1C113A5D09B6622652D22C39721
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3233203d3e203631363231.roa
Signing time:             Tue 19 Nov 2024 21:21:36 +0000
ROA not before:           Tue 19 Nov 2024 21:16:36 +0000
ROA not after:            Tue 18 Nov 2025 21:21:36 +0000
asID:                     61621
IP address blocks:        186.209.222.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 00:58:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:be:16:a0:3b:33:b1:c1:13:a5:d0:9b:66:22:65:2d:22:c3:97:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 19 21:16:36 2024 GMT
            Not After : Nov 18 21:21:36 2025 GMT
        Subject: CN=C39AC43F8C57F0A0262050FA1F7089143253D4A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:87:a7:e5:a8:18:5a:58:0e:c0:14:c3:2a:c7:
                    4b:74:1e:ba:fb:ef:c0:ef:75:53:dc:0c:4d:68:73:
                    a1:8d:c6:47:cc:9d:f5:93:e7:b7:2d:61:27:78:e1:
                    bb:15:a2:61:05:67:8e:27:1e:1b:26:57:c6:01:44:
                    49:6b:b1:50:d3:b7:50:13:b0:a9:ec:73:a1:95:ea:
                    48:f9:c9:64:85:da:5f:1d:5c:e3:0d:89:60:d8:d2:
                    fc:e4:b9:4f:1f:89:f7:4c:64:09:0a:b2:7b:4d:7f:
                    9e:35:9f:49:c5:6a:45:40:0b:19:4a:27:ec:7e:e5:
                    94:9f:aa:77:3e:6a:78:90:77:d9:ad:50:29:c9:bd:
                    3b:65:52:5d:61:57:28:68:c8:30:13:2d:12:f7:af:
                    22:53:13:8f:fa:be:ff:67:24:14:5d:88:c7:9d:9f:
                    6d:3b:2d:ad:43:ac:c3:fa:e4:91:80:bf:e9:78:35:
                    e4:bf:2f:96:73:9c:e9:83:54:4f:76:3c:f6:6d:f7:
                    1a:79:32:bb:9e:d7:5d:74:92:48:99:d9:05:44:f6:
                    87:34:0c:a0:30:68:58:92:5c:da:4c:d5:c7:c8:f4:
                    21:66:26:8b:1d:ca:ea:82:4e:41:90:4d:e3:fc:1a:
                    2c:79:bc:f4:c8:93:3c:ab:5e:5f:c6:de:54:40:46:
                    3c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9A:C4:3F:8C:57:F0:A0:26:20:50:FA:1F:70:89:14:32:53:D4:A8
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3233203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:e3:00:a6:3d:be:cf:e0:7a:72:c0:4f:33:77:f1:e5:8f:52:
         95:2b:df:3b:a4:52:d5:ef:f8:68:c9:49:3f:58:5c:76:ac:39:
         07:4b:4b:38:04:e3:8c:5d:24:a6:74:f9:32:e7:0a:fe:76:89:
         f2:9d:9a:16:73:94:eb:56:7b:82:d9:1a:fc:53:a3:2a:68:41:
         e0:52:06:2d:f8:89:1d:ad:22:67:9f:6a:f7:9d:22:df:b9:58:
         ca:95:cc:bb:d6:cc:f5:51:59:40:cf:99:51:eb:72:40:02:db:
         96:fa:11:98:3f:35:db:99:bc:59:c5:43:d7:d2:29:df:00:5f:
         15:f1:a2:2c:d6:55:7f:5d:6c:ce:53:e2:66:42:34:12:45:3c:
         a6:ae:e4:5d:7d:36:55:49:ff:eb:d7:ab:8e:d6:a9:8d:e6:d1:
         62:f4:41:a0:77:d0:04:14:e6:9c:a3:bc:88:b9:c1:48:1b:47:
         ba:8a:16:db:64:b2:07:fe:a5:c9:5f:52:d3:06:1b:4a:02:8b:
         4f:34:fa:98:06:e9:a9:51:4b:2a:61:4d:70:7a:4f:9e:16:e6:
         28:48:6c:d8:ee:36:aa:2c:6b:a9:11:e5:a9:86:82:8c:b5:f9:
         a9:62:62:6d:0e:65:7d:bf:32:ca:d7:48:f6:f8:d1:2c:f2:86:
         b9:4f:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 04:35:43 2024 by rpki-client on console-fra.rpki-client.org