Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3138362e3230392e3232322e302f32332d3233203d3e20323637343230.roa
File:                     3138362e3230392e3232322e302f32332d3233203d3e20323637343230.roa (raw, json)
Hash identifier:          lr4VRoB40yyIQtpLp1rjhE+Q8MsXZ4KNPFlafaO3RJ4=
Subject key identifier:   8C:F4:7F:EA:36:2D:CE:8B:6B:EE:A0:27:50:E5:0F:1E:6C:8E:48:29
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       161BEEEA5D3C041367A4736A74030A8CB4CAE953
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3138362e3230392e3232322e302f32332d3233203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        186.209.222.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1b:ee:ea:5d:3c:04:13:67:a4:73:6a:74:03:0a:8c:b4:ca:e9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=8CF47FEA362DCE8B6BEEA02750E50F1E6C8E4829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:f1:73:65:0e:f4:2f:c8:33:14:35:bf:1b:
                    3c:a2:ac:9f:ce:a1:37:d2:1d:e0:e4:1f:16:94:bc:
                    48:db:96:37:99:82:9a:65:00:dc:e2:d7:73:50:37:
                    71:4a:cc:ce:4d:c0:28:95:13:00:91:9e:5e:a7:00:
                    67:ba:99:e5:eb:20:85:6c:68:7b:50:f6:0e:7c:03:
                    59:65:e1:a3:bc:2e:3c:8e:6e:81:99:47:0d:4d:00:
                    af:59:fd:95:8d:6d:98:16:b1:b0:00:a3:9a:7e:7d:
                    00:f3:e7:86:13:6c:12:fc:8d:71:6a:ea:a7:91:af:
                    e1:d6:62:54:67:26:a7:00:e2:c8:05:14:71:a0:0b:
                    45:15:ee:01:77:b0:73:a3:f7:0f:21:f1:55:fb:e1:
                    19:45:ea:fa:0f:46:35:a2:69:02:58:a6:9a:34:d1:
                    a9:06:da:f3:85:c6:6e:21:d9:eb:a8:67:ac:2e:17:
                    ba:44:d4:7b:61:4d:f0:36:a3:fa:0b:af:b9:ee:de:
                    f9:26:27:b1:47:73:5f:dd:1b:6c:a1:de:56:06:f0:
                    c4:5c:9e:82:35:23:01:37:b1:8b:33:b4:94:ad:df:
                    af:f7:f1:4f:65:d5:be:b1:fe:3d:d1:93:5e:41:4c:
                    c8:0d:44:7c:1e:d3:ae:7a:6f:d5:60:53:1e:c4:c0:
                    e4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F4:7F:EA:36:2D:CE:8B:6B:EE:A0:27:50:E5:0F:1E:6C:8E:48:29
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3138362e3230392e3232322e302f32332d3233203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:3d:b7:ca:61:08:43:fa:f7:35:63:03:d5:bd:f5:0c:10:70:
         a1:8f:33:23:8c:ff:21:04:ff:e4:87:b8:c2:da:e5:2b:38:14:
         8e:bd:44:0c:22:b5:01:b0:be:6a:71:7d:0b:c3:80:ba:cf:63:
         11:e0:70:1d:0a:2a:0a:9f:8f:bc:76:73:90:61:64:47:50:a8:
         15:8a:0c:e0:9e:82:1c:51:50:c8:16:ac:ae:f1:b6:9b:de:4c:
         e9:59:60:74:e8:cf:f0:89:7c:94:5c:02:32:33:06:d0:13:96:
         52:cd:32:b2:ee:fb:c3:a2:ae:a3:7f:5b:06:cb:b8:0a:d4:73:
         3c:e5:3f:b7:3e:f3:77:09:ff:86:f3:a7:0d:5d:97:ca:9a:3a:
         6b:7e:6e:1d:fd:8f:b7:15:22:76:7e:71:c2:79:ab:fe:42:4a:
         1d:e7:7f:7d:cb:b2:2b:4f:fd:23:be:bc:4d:06:d4:57:96:38:
         8c:b1:6f:c3:5e:23:ab:37:bb:f2:4a:45:36:74:b2:30:9b:85:
         2a:b6:7d:0e:7a:d8:d1:b0:88:89:f8:37:0d:b4:2e:d1:9a:19:
         9c:7f:cc:50:9a:76:4f:17:49:19:ee:5a:f0:07:fc:88:e5:96:
         d8:35:17:ea:eb:c7:bc:70:a3:5b:f4:50:c0:ee:12:91:9e:63:
         24:11:2f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org