Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139342e3132322e302f32332d3233203d3e20323632373733.roa
File:                     3136382e3139342e3132322e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          kNU8SwqnF/Aw6hslNMo6cFO3xSv1UUQ5iRVgjBskBgM=
Subject key identifier:   68:06:49:38:21:42:36:6F:BD:51:B6:1A:82:52:53:0D:E5:68:DC:EE
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       7F6BF87427524B257BC003E2AB3B41165850173C
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139342e3132322e302f32332d3233203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:26 +0000
ROA not before:           Wed 14 Aug 2024 12:03:26 +0000
ROA not after:            Wed 13 Aug 2025 12:08:26 +0000
asID:                     262773
IP address blocks:        168.194.122.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6b:f8:74:27:52:4b:25:7b:c0:03:e2:ab:3b:41:16:58:50:17:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:26 2024 GMT
            Not After : Aug 13 12:08:26 2025 GMT
        Subject: CN=680649382142366FBD51B61A8252530DE568DCEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:40:5f:a7:d5:da:d9:70:fb:99:a5:2e:99:
                    fe:4c:31:49:11:08:36:d4:a9:8b:e4:b8:ee:6d:83:
                    c5:47:44:1b:3c:20:e5:92:fe:9f:58:68:28:54:74:
                    5d:dd:8c:ad:7a:f2:4c:43:3f:86:82:87:35:b0:8b:
                    27:cd:5d:0f:c6:40:51:2b:0e:c2:5b:e1:26:0d:1b:
                    36:d1:82:f7:bc:d3:48:57:19:06:95:ae:48:53:c3:
                    51:a5:96:2a:6f:89:27:66:e0:e4:42:c8:40:88:38:
                    2b:50:f6:5c:e1:62:76:8a:24:5a:12:60:54:51:33:
                    a0:da:9d:89:96:84:0b:da:a7:6a:c5:55:5c:fb:f7:
                    f8:fa:6f:ad:cf:5e:e1:38:9a:c3:0f:60:78:6f:cc:
                    46:c9:ee:df:f5:75:61:99:b8:73:b3:ab:e6:3f:f3:
                    8e:47:3a:3f:80:54:9e:d3:f4:8d:45:d9:46:c6:4b:
                    b5:ab:55:3b:64:6d:ca:be:1d:a5:4d:02:4a:3a:6a:
                    94:54:a6:7b:2b:2b:e5:b6:7b:ca:c9:96:ba:1d:b7:
                    de:50:6f:39:21:17:c2:c3:fe:81:d5:93:2d:ff:cc:
                    18:06:db:45:6a:c6:4a:48:7d:62:9a:e0:04:50:f3:
                    7a:9e:98:00:df:ca:77:31:eb:c5:77:33:54:a0:d5:
                    49:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:06:49:38:21:42:36:6F:BD:51:B6:1A:82:52:53:0D:E5:68:DC:EE
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139342e3132322e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:d0:ea:3a:d8:df:64:9e:17:71:d1:03:2f:40:e2:fc:9e:b8:
         a6:4d:f4:c0:78:d0:63:de:2d:6e:12:80:60:21:7b:44:74:7b:
         e8:2d:26:27:c9:11:c4:e3:6a:db:8b:4a:c6:7a:fc:2d:92:c4:
         c3:e9:4b:97:0d:21:1e:91:d6:ff:92:c3:49:78:c7:b6:3c:56:
         21:9b:3f:af:f7:5f:8b:12:47:76:ae:b0:4e:4b:14:cf:07:b3:
         15:43:3c:1f:dd:2b:5c:80:77:86:56:d1:2d:30:88:1c:d1:24:
         e4:b8:7d:6a:3f:f4:e8:60:28:d9:d6:ca:ab:47:ee:57:6e:10:
         f9:e1:8e:81:dc:13:8f:ab:c8:ca:21:3b:e6:15:05:ba:bf:a0:
         35:49:ed:3c:81:ac:75:c9:73:26:47:6d:8f:15:9e:a3:bf:bb:
         6b:14:cc:ca:52:0b:1b:65:70:d6:fd:50:43:ab:3b:c6:40:87:
         96:44:ce:e0:f6:9f:d5:74:fa:12:6c:5b:0d:4e:e8:53:6a:05:
         56:cf:57:dd:65:06:b5:aa:39:cd:18:0b:36:1f:7f:c9:38:c3:
         f0:7f:06:0f:e2:f8:f1:9a:10:74:68:a5:cd:90:c4:bb:bf:56:
         65:8b:64:99:98:52:27:55:b1:6f:3d:c0:ee:00:32:34:d3:c0:
         95:3a:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----