Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139342e3132302e302f32322d3232203d3e20323632373733.roa
File:                     3136382e3139342e3132302e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          2jnA+sYNih3sk9vLfVsP07G8l+69YZw7FgXpiFdy5ko=
Subject key identifier:   09:14:8D:D5:31:4A:8D:FE:7A:82:B5:80:50:BB:49:C0:02:60:BC:05
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       19E7B92FD0207179E9F2F043556C6307AAEC809C
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139342e3132302e302f32322d3232203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:24 +0000
ROA not before:           Wed 14 Aug 2024 12:03:24 +0000
ROA not after:            Wed 13 Aug 2025 12:08:24 +0000
asID:                     262773
IP address blocks:        168.194.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e7:b9:2f:d0:20:71:79:e9:f2:f0:43:55:6c:63:07:aa:ec:80:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:24 2024 GMT
            Not After : Aug 13 12:08:24 2025 GMT
        Subject: CN=09148DD5314A8DFE7A82B58050BB49C00260BC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:51:f9:68:d0:05:b1:25:b0:2f:95:31:d7:
                    f2:54:c1:01:00:3b:de:d0:3f:bc:38:b7:9c:bb:e4:
                    e0:c6:eb:e9:4c:46:fb:4c:bf:d0:72:a6:26:3b:b7:
                    a3:4d:8d:61:fc:86:f5:83:64:44:d2:e0:38:52:92:
                    5b:33:23:6d:17:d7:b6:0e:b9:5e:54:9e:82:69:c8:
                    34:ab:f9:93:bd:f0:c3:49:08:58:cb:03:aa:5e:ba:
                    80:3b:75:ee:77:e3:d8:85:d3:f2:e6:3c:0a:ae:88:
                    68:2c:32:5c:33:17:c4:67:d8:63:fd:c8:3a:4f:f9:
                    ab:25:75:fe:e4:06:8d:09:fb:5b:ce:fb:33:7a:19:
                    94:af:e2:82:3c:2b:eb:ca:d4:ce:4c:2b:38:97:ff:
                    13:2c:66:26:8a:2b:e2:89:15:7f:7b:ec:5b:64:20:
                    b4:0e:38:02:6e:ed:50:13:1b:e5:1e:d8:eb:97:e6:
                    5a:01:ac:b1:78:d3:31:39:3e:9b:fe:ed:c8:17:9b:
                    f3:95:d7:9b:6b:0a:d5:43:e6:20:32:21:91:fb:de:
                    0b:a1:e8:9c:7e:73:81:d0:50:af:2a:20:ea:7e:58:
                    8c:97:8a:ee:9e:9f:76:c2:6d:ef:24:f5:a7:e5:db:
                    84:7a:b0:b3:7d:53:88:c8:58:b3:0e:80:d0:d7:25:
                    08:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:14:8D:D5:31:4A:8D:FE:7A:82:B5:80:50:BB:49:C0:02:60:BC:05
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139342e3132302e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:ac:e9:2c:15:54:7b:a2:0b:00:61:91:8a:2a:a2:18:e3:5d:
         de:f0:f0:5a:f9:fa:cc:1b:8d:f9:d2:ce:97:b5:0b:1b:69:d5:
         49:ab:ae:d0:8e:dc:5e:ef:a8:4f:9e:04:90:20:2b:3c:1c:ec:
         a7:cc:2c:1a:af:08:5d:9a:e4:df:17:aa:f1:7e:58:fb:f0:e5:
         bc:70:1f:eb:bf:58:67:fb:4d:a3:63:71:29:13:5d:1a:10:6c:
         41:5c:4b:42:7f:2d:5a:4a:8b:29:bc:89:8b:58:81:a6:4d:37:
         f6:41:1e:8c:2f:1f:28:25:98:63:4b:3d:a8:fc:ec:ee:bf:67:
         ed:1d:79:c2:21:f5:90:69:ec:c3:0a:42:74:ad:1c:5f:9f:cb:
         44:6b:31:30:34:03:f5:24:39:ed:5d:7e:5a:c0:28:79:35:5b:
         68:5e:11:4f:9d:1b:4c:96:f0:a7:53:23:c3:37:60:b2:12:88:
         59:db:53:a8:94:e2:28:a4:70:f3:37:33:61:f9:cf:42:4e:9c:
         bf:25:ed:c5:7f:fa:ee:f8:a6:76:f6:15:f8:35:f7:b9:9b:f0:
         3d:36:b9:73:8a:bf:88:3d:e2:87:8f:6a:70:af:4a:8b:23:e4:
         60:f2:ef:bf:80:0a:cc:aa:ac:5e:f5:dc:24:91:47:94:d5:1e:
         d4:91:4c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----