Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133312e3235352e3232302e302f32322d3234203d3e20323632373733.roa
File:                     3133312e3235352e3232302e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          1t1SfFsCtT0qUd+B3OIDecuDedlil4aQwgTqzr1jSMI=
Subject key identifier:   5F:75:C0:68:00:6B:B0:9A:A4:C1:E9:31:D6:10:F5:52:E7:F6:CC:94
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       7656BC9F5B4922D1C0EC82993069ACB111FD55E5
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133312e3235352e3232302e302f32322d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:25 +0000
ROA not before:           Wed 14 Aug 2024 12:03:25 +0000
ROA not after:            Wed 13 Aug 2025 12:08:25 +0000
asID:                     262773
IP address blocks:        131.255.220.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:56:bc:9f:5b:49:22:d1:c0:ec:82:99:30:69:ac:b1:11:fd:55:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:25 2024 GMT
            Not After : Aug 13 12:08:25 2025 GMT
        Subject: CN=5F75C068006BB09AA4C1E931D610F552E7F6CC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:b6:51:9d:fc:73:93:49:b3:f7:01:5b:75:
                    36:62:35:f0:4d:2b:aa:4b:ca:90:87:c5:c3:37:b6:
                    6b:f6:58:a4:c5:95:70:0c:34:23:45:5c:a5:67:44:
                    f8:b4:3e:0a:8f:fa:82:98:56:cf:a8:c8:5d:6a:b0:
                    ca:fa:fb:d7:4d:a5:71:52:70:e8:da:4b:c0:b4:d4:
                    58:59:a6:de:63:06:09:2f:f2:f4:72:ea:95:51:7e:
                    9e:9d:35:1e:7a:64:29:4a:96:eb:f4:70:53:2d:a2:
                    11:7b:c0:25:1e:03:18:c0:08:13:ed:72:7a:9e:78:
                    78:8c:4f:f0:64:0e:c5:21:e9:21:26:32:df:94:7b:
                    f2:61:04:75:20:56:6b:15:ad:35:80:57:1c:de:d2:
                    c1:f7:14:fe:39:b5:46:21:ef:8f:ac:99:27:ac:be:
                    39:a0:4c:ed:cc:c4:0e:ee:f4:5b:db:1b:58:ef:0c:
                    67:e1:bd:b6:7a:69:d6:fc:42:a4:b3:28:62:a7:6e:
                    4a:9f:1e:ad:7f:87:d8:3a:f1:c7:db:04:7c:29:76:
                    8a:14:ef:4d:98:3d:4e:ea:0d:cf:6c:1f:fd:69:19:
                    5c:4d:8e:cb:b6:de:84:23:ec:1d:3b:ea:32:ec:b5:
                    2f:5b:dc:a8:b5:10:3c:75:11:f2:6d:72:d8:d7:7c:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:75:C0:68:00:6B:B0:9A:A4:C1:E9:31:D6:10:F5:52:E7:F6:CC:94
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133312e3235352e3232302e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:70:40:d7:12:6b:f7:70:c5:e7:b8:7b:b3:02:af:e4:82:52:
         26:2c:7a:e0:c0:c4:ff:75:58:83:4c:65:81:f1:cc:8e:5f:0f:
         bf:b0:0d:23:c3:09:bd:1e:be:34:83:d9:d1:57:a6:f2:78:c6:
         be:5e:c5:b0:20:3b:32:df:72:f2:7c:da:2c:dd:bc:ac:34:d7:
         58:98:4b:b7:a6:e0:83:c1:1a:d5:d0:44:d3:6d:5b:c4:19:60:
         2a:24:e1:30:f8:30:87:4d:f6:93:b4:ba:90:8b:82:10:03:a0:
         ef:6c:b7:64:fc:5a:85:0e:34:42:f5:51:29:78:14:90:db:2b:
         24:dc:6c:80:e7:c2:c3:54:63:f1:33:ed:f6:70:a5:3b:1e:3c:
         c7:40:34:1a:c0:ce:94:b6:b9:c0:85:d7:40:94:b7:cd:7a:6a:
         4e:06:4b:f7:14:7d:19:9d:e5:fd:1a:db:20:a0:20:ff:eb:cd:
         48:ac:ae:ad:c4:07:bb:fe:86:6f:f6:d0:5c:32:29:53:3c:aa:
         7a:d1:02:ae:ee:5c:db:69:a1:d1:a0:ce:ba:bd:f0:59:2f:9c:
         e8:66:8c:1d:6c:9a:eb:2a:e1:f3:95:c6:a0:41:c4:6d:99:6a:
         be:f3:7d:9f:35:ee:d4:0b:88:cd:27:5f:e5:03:90:25:0c:f6:
         ef:19:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org