Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3138362e3230392e3232332e302f32342d3234203d3e20323637343230.roa
File:                     3138362e3230392e3232332e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          F3jA5RwrSKmy4QJrL9zHQQ1b13dmVYurhgGiwuO2pkw=
Subject key identifier:   24:8B:F5:BA:C1:EB:44:F6:DB:37:B9:BD:7D:BC:6D:B2:93:BF:51:95
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       4F778074B31316B7BDE499784643EB530955F40C
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3138362e3230392e3232332e302f32342d3234203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:36 +0000
ROA not before:           Fri 05 Apr 2024 01:55:36 +0000
ROA not after:            Fri 04 Apr 2025 02:00:36 +0000
asID:                     267420
IP address blocks:        186.209.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 18:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:77:80:74:b3:13:16:b7:bd:e4:99:78:46:43:eb:53:09:55:f4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:36 2024 GMT
            Not After : Apr  4 02:00:36 2025 GMT
        Subject: CN=248BF5BAC1EB44F6DB37B9BD7DBC6DB293BF5195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:1c:5f:ee:1b:ec:ce:24:81:81:12:71:66:
                    a5:4b:2b:56:9b:70:61:1e:99:4f:9c:b1:72:fb:0b:
                    af:17:d0:66:8a:10:0c:77:6f:01:d5:d5:5e:4c:8a:
                    9a:ed:65:11:24:2f:22:57:4d:1d:94:77:4e:c4:0a:
                    64:11:11:8e:27:aa:a5:29:55:1e:45:f3:71:8f:17:
                    65:6f:f9:dd:bb:70:67:ed:9e:56:bd:e9:56:4c:bb:
                    a6:eb:ed:78:57:95:4d:5c:a6:56:6e:62:25:c9:37:
                    8b:8f:f8:89:e4:9d:1a:11:40:29:e1:94:a5:41:89:
                    64:b3:d8:b1:ed:04:e3:49:06:58:72:dc:d6:8e:bf:
                    30:fe:ca:ea:df:37:d8:13:97:bb:84:85:82:dc:63:
                    c0:09:33:d1:c8:7d:5b:8f:09:d8:6e:66:7f:cb:6f:
                    f4:88:90:e6:d8:e4:55:91:b0:50:91:e1:93:21:54:
                    15:b6:a4:ad:52:be:b3:6c:ef:96:c1:bc:88:4a:4b:
                    80:a8:18:7f:7b:9b:8c:f9:5d:2f:63:80:a4:c4:10:
                    ca:f6:d6:1d:71:aa:e9:c9:d1:94:47:6f:51:41:60:
                    c6:70:a0:c1:67:d2:0e:5e:d5:51:e8:8c:62:ba:0d:
                    90:a1:5b:8b:cb:cd:7d:92:6c:33:4a:71:f8:53:54:
                    a5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8B:F5:BA:C1:EB:44:F6:DB:37:B9:BD:7D:BC:6D:B2:93:BF:51:95
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3138362e3230392e3232332e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b5:45:0e:4b:d7:c6:8d:0c:92:69:70:31:60:2d:00:75:4f:
         72:fa:8d:5f:cb:0b:f4:69:da:ab:36:b8:cf:33:ed:59:dc:14:
         00:b3:0f:b7:b4:a7:64:f8:e4:01:94:57:51:ee:58:c8:ae:c8:
         6c:19:be:44:5c:02:1e:98:3e:29:47:b5:de:9e:2a:d2:f5:81:
         ce:95:b7:ae:54:8d:59:ec:ac:51:5a:67:b2:4c:c3:51:c1:32:
         18:87:a6:43:9b:1f:31:15:8c:e6:75:2e:cc:f1:3a:95:bd:08:
         6b:8a:3a:cf:8b:a1:77:75:ac:72:f3:79:81:24:e6:ca:1d:f4:
         e3:d9:a5:2e:0a:a8:76:c8:3c:36:f2:b5:74:e9:d5:48:9c:46:
         34:a9:7f:cc:f9:8a:07:ac:ba:f6:cd:48:d3:a0:8c:2d:16:8f:
         c4:d0:89:9e:05:69:62:9f:9b:69:36:e1:ba:7d:19:99:6c:0f:
         ff:ae:40:9e:12:5c:c1:e6:ac:68:26:f6:6e:20:46:0b:bd:9c:
         ff:ca:cb:63:a3:60:99:fd:32:b4:a7:eb:96:1c:65:dc:17:66:
         66:c1:94:97:23:11:9d:6a:e8:b4:e7:18:fb:15:9b:34:45:a5:
         be:d9:04:2e:18:32:6a:bc:81:09:84:24:d1:1a:97:06:4f:33:
         a4:d4:a4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org