Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e3138352e3136342e302f32322d3234203d3e20323632373733.roa
File:                     3133382e3138352e3136342e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          d+P6cdDJYVxdhT0Sp+hZSslRb8oebgz3bm7eXncouR8=
Subject key identifier:   8C:85:32:A8:81:35:E8:08:CD:44:40:0C:2F:ED:93:52:ED:2C:74:80
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       36882D0ADA970ACAF11766541CDDD4555340414D
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e3138352e3136342e302f32322d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:26 +0000
ROA not before:           Wed 14 Aug 2024 12:03:26 +0000
ROA not after:            Wed 13 Aug 2025 12:08:26 +0000
asID:                     262773
IP address blocks:        138.185.164.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:88:2d:0a:da:97:0a:ca:f1:17:66:54:1c:dd:d4:55:53:40:41:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:26 2024 GMT
            Not After : Aug 13 12:08:26 2025 GMT
        Subject: CN=8C8532A88135E808CD44400C2FED9352ED2C7480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:80:95:e5:01:ae:2a:de:80:fd:98:2a:b6:
                    cf:3a:d9:ab:e5:af:8e:60:93:71:54:40:b4:09:99:
                    5b:f8:d5:49:42:06:c9:fb:96:85:ad:b4:b3:7a:6a:
                    51:98:04:95:d6:d3:2e:35:8b:cf:4e:80:54:61:3b:
                    a1:8a:d3:0e:aa:58:89:c7:1a:23:39:ff:bf:a3:56:
                    03:77:ec:3d:9c:77:3c:0f:11:ec:ed:ba:a6:ee:52:
                    c7:7d:b1:02:e2:b1:e4:95:86:d1:d4:e0:0e:95:19:
                    ce:f9:a6:8f:9b:1f:a8:b9:da:60:c6:a6:a2:ad:2f:
                    9f:b7:42:3b:af:29:46:e6:0c:6d:62:d0:3e:fc:f1:
                    a8:15:a2:56:63:28:f5:fd:34:ff:33:40:eb:f9:48:
                    9c:07:88:fb:e5:7c:39:d1:97:f1:75:e4:c1:0e:7c:
                    24:a6:bb:d2:8b:50:40:fd:5a:79:ee:fc:73:9d:b8:
                    21:4b:19:20:28:5d:62:ce:22:94:85:64:6f:55:d2:
                    f7:8d:bf:df:1f:9b:ee:9f:10:db:28:12:31:ef:8d:
                    f7:31:9d:ea:87:06:cf:34:84:ed:a2:76:d2:b5:fd:
                    a0:c6:22:74:c9:80:46:d6:3b:c2:a8:3f:95:13:02:
                    b4:81:fc:09:7f:4f:cf:83:16:02:fc:4b:25:31:c3:
                    2c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:85:32:A8:81:35:E8:08:CD:44:40:0C:2F:ED:93:52:ED:2C:74:80
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e3138352e3136342e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:cd:57:0a:a6:83:74:46:c9:bf:11:79:83:f6:ea:50:cc:83:
         5a:89:ad:f5:6f:af:d8:a4:93:be:d5:ef:4b:e9:af:f1:e6:75:
         7f:d1:ef:c3:c6:48:86:68:c3:59:94:1f:f5:e4:fd:99:1f:5f:
         5c:65:ca:05:07:58:e0:af:d4:fe:6c:6f:88:8e:36:61:f6:54:
         31:06:d6:9a:11:50:2f:52:84:1c:f4:ff:b3:47:d7:3e:75:80:
         c9:4d:51:a5:94:6c:fb:47:fa:f3:ed:f1:bd:ab:3d:25:42:a5:
         da:1f:06:4a:7e:c8:c6:fc:23:41:30:e8:2d:b4:20:a4:0a:04:
         07:14:49:84:d9:76:4a:61:94:70:af:db:b5:1b:41:63:c8:3b:
         73:18:25:e0:0c:5a:04:37:5f:84:51:3c:40:d1:43:ae:32:17:
         cd:97:02:46:de:fe:6d:24:d9:b3:c1:45:66:53:ac:26:20:6c:
         ff:24:7c:5d:05:e5:85:5f:4a:16:a6:f8:2c:5a:9a:62:1f:3e:
         be:04:68:32:b5:c6:81:17:5e:60:ff:7c:22:fa:9f:cf:1e:41:
         3e:c6:89:c1:3c:4b:6b:09:f2:48:41:b0:57:ea:75:9e:4a:ba:
         53:5f:bd:8e:a7:cd:06:1d:b0:5a:6a:1a:28:b0:3a:bf:1b:19:
         23:d3:2d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----