Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3134332e3230322e3132342e302f32322d3232203d3e20323632373733.roa
File:                     3134332e3230322e3132342e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          X8RB3kuUfxj8VidVgKjRfuP2Pf/+eCQFC5YAg1C07oc=
Subject key identifier:   B0:01:A2:32:81:4F:4F:28:8F:24:B0:DD:4C:FB:55:16:EC:48:99:6B
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       67A39CEDD41F7B1EC46B1FF1215BA27FE52EE91F
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3134332e3230322e3132342e302f32322d3232203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:22 +0000
ROA not before:           Wed 14 Aug 2024 12:03:22 +0000
ROA not after:            Wed 13 Aug 2025 12:08:22 +0000
asID:                     262773
IP address blocks:        143.202.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a3:9c:ed:d4:1f:7b:1e:c4:6b:1f:f1:21:5b:a2:7f:e5:2e:e9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:22 2024 GMT
            Not After : Aug 13 12:08:22 2025 GMT
        Subject: CN=B001A232814F4F288F24B0DD4CFB5516EC48996B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:85:fd:c2:41:3c:a2:b0:c5:6d:4b:bd:94:
                    7a:af:89:9d:25:d6:9c:0f:16:8d:63:0e:19:d9:5e:
                    17:18:0c:38:70:21:39:33:5e:0c:f7:55:2a:93:79:
                    ee:1f:0c:a5:ad:c4:95:46:d5:c0:49:ab:f3:59:87:
                    d3:e0:ae:19:97:9a:f7:9d:80:f8:f4:05:d1:2c:41:
                    e4:42:b2:36:f5:45:33:32:ec:46:97:a8:a7:32:5f:
                    9f:98:5c:92:47:c2:3c:01:ca:52:53:3b:6a:82:19:
                    b3:f1:f1:b8:84:b2:6c:f3:f8:3d:e7:f3:df:c5:c7:
                    1a:dd:fd:9d:a0:9d:ce:01:da:39:57:cf:2a:82:17:
                    4f:e3:5d:0d:a3:f6:4f:65:f4:f1:d3:55:53:db:97:
                    9d:f4:42:5e:58:52:2b:8b:f4:c6:16:be:20:d1:5f:
                    56:e0:af:15:20:d8:03:48:2c:c2:dd:a0:0b:31:0e:
                    37:3c:02:5e:7d:99:f0:04:17:29:ca:da:a4:49:27:
                    2b:3c:28:b0:64:0a:73:33:1c:50:a9:0a:0d:e3:5f:
                    2d:10:d5:0c:54:77:b6:dd:23:de:f7:d7:a0:8a:ec:
                    e4:cc:0e:6e:10:ef:06:c0:a6:ca:0a:e0:3f:fa:b7:
                    6b:58:63:15:09:80:5e:db:07:be:52:5c:aa:72:73:
                    01:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:01:A2:32:81:4F:4F:28:8F:24:B0:DD:4C:FB:55:16:EC:48:99:6B
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3134332e3230322e3132342e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:12:89:1c:09:f0:c6:96:b4:0c:53:e3:34:48:90:15:87:4c:
         37:f6:b9:d1:40:0c:47:fb:5c:fb:f5:b2:8a:d5:f1:8a:1c:39:
         f7:3f:df:59:29:fa:78:14:78:c4:d8:5e:80:9e:11:ca:ee:6d:
         87:be:df:5b:b1:ad:e3:76:a4:00:e0:a0:fe:0f:68:46:68:3a:
         4d:3a:f5:07:fa:bb:28:ee:8d:40:f8:05:9e:b0:66:c3:05:f6:
         38:22:32:a6:17:37:39:bb:00:0d:ca:f3:51:13:09:11:39:7d:
         d3:31:a9:13:9f:6b:79:f2:61:3d:c3:c0:82:8a:99:5a:18:05:
         9e:ab:7c:9c:3d:bd:01:07:b4:05:b8:f7:ac:f6:bc:7f:cc:d6:
         92:dd:bf:b8:40:51:02:17:70:f4:bc:cf:d0:e7:38:90:23:b5:
         6a:04:ca:a6:17:35:be:54:2e:9d:ac:aa:fe:9c:04:2c:20:a9:
         f0:8d:ed:9b:d9:06:d7:17:60:28:cd:67:a0:0d:94:dc:57:71:
         9f:dd:de:38:ef:db:60:1a:de:7e:f3:6f:0f:09:fc:75:81:98:
         2d:9b:fc:6c:69:50:59:7d:5b:6c:2b:9b:fe:8a:c3:04:1a:26:
         62:a3:09:89:67:5d:20:8a:56:6e:86:cb:da:ee:aa:1d:8c:a0:
         74:94:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org