Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139372e37322e302f32322d3232203d3e20323632373733.roa
File:                     3136382e3139372e37322e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          /Yii60LKOOdFx9J/5niQ9aZaMGCto/dwczu+fX8W+fQ=
Subject key identifier:   C1:33:DF:4A:AA:1A:F6:95:C7:ED:88:B5:6B:01:61:11:13:81:35:4E
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       5C4725B9DA7D1488599393DC0807F3345C40B8CD
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139372e37322e302f32322d3232203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:23 +0000
ROA not before:           Wed 14 Aug 2024 12:03:23 +0000
ROA not after:            Wed 13 Aug 2025 12:08:23 +0000
asID:                     262773
IP address blocks:        168.197.72.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:47:25:b9:da:7d:14:88:59:93:93:dc:08:07:f3:34:5c:40:b8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:23 2024 GMT
            Not After : Aug 13 12:08:23 2025 GMT
        Subject: CN=C133DF4AAA1AF695C7ED88B56B0161111381354E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:aa:fe:a2:6f:09:a6:ae:6e:17:6f:96:d6:a4:
                    59:f0:c2:63:41:9a:2e:8c:f2:01:62:60:7d:3e:0a:
                    59:11:81:29:e7:50:14:b8:a5:b1:87:32:30:11:43:
                    5d:97:14:63:ac:9b:e7:64:d7:48:3f:0f:3a:f4:d1:
                    1b:28:a4:79:79:32:e3:70:50:3e:4b:76:79:51:3a:
                    1e:61:01:6e:c8:f1:b1:92:8c:49:28:39:e7:eb:97:
                    8a:85:63:00:fc:bd:2e:41:ee:e2:a8:57:1c:a3:94:
                    2d:a2:11:1a:e2:92:96:07:ba:8f:c0:b3:fc:87:c5:
                    5e:03:8c:6f:7b:96:8b:46:22:72:15:24:dc:11:80:
                    21:03:b4:21:96:d0:f3:76:81:f3:63:6d:37:62:30:
                    d7:6c:78:26:56:da:dc:47:e3:c6:7c:29:b4:ab:c1:
                    ed:cc:64:21:9c:aa:55:34:9d:71:f3:80:df:62:76:
                    2f:9c:e3:f1:e1:7f:d6:23:b6:ad:a1:0d:86:a4:df:
                    0c:44:ff:c2:63:7f:22:e2:04:59:4f:37:0c:7b:68:
                    7c:c3:4b:1e:00:e2:9d:33:2f:8f:fc:42:53:88:e3:
                    da:52:44:69:6b:d1:76:ce:52:b0:14:0a:19:d9:1f:
                    50:a0:4a:69:76:57:6b:65:a5:60:6f:d8:14:a2:47:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:33:DF:4A:AA:1A:F6:95:C7:ED:88:B5:6B:01:61:11:13:81:35:4E
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139372e37322e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:bc:70:b7:23:ef:d5:df:3c:9c:85:6c:6a:d2:c6:a6:49:11:
         b5:91:2d:52:4c:aa:5c:d1:b2:83:a2:1c:72:2e:84:19:55:c4:
         55:2c:53:13:8c:d6:b6:47:db:2b:61:96:f1:fe:d8:e3:85:e3:
         cd:97:a1:3f:90:8a:e4:b8:50:fe:57:a4:f4:bc:64:e1:9b:1f:
         92:85:6e:5d:7d:09:30:3c:01:33:a6:d3:05:08:d6:c7:cb:4b:
         c8:83:87:16:50:a1:2e:b5:1d:f7:ae:b4:96:c9:ef:bc:8d:30:
         f2:db:33:07:8c:50:95:2d:52:27:40:38:b0:c8:08:a8:77:b4:
         53:82:25:43:1f:d3:28:52:2b:6d:5d:04:42:e0:f9:b9:75:14:
         18:be:de:e6:44:f1:0e:b6:91:09:5b:c5:0d:43:38:a4:4b:85:
         ff:64:01:13:e5:db:8b:07:cb:3c:ea:2b:af:f2:64:39:60:14:
         5e:3c:9e:43:1c:32:c8:2d:93:fd:52:e5:66:6a:52:07:a6:1c:
         d2:68:67:5f:03:3d:0f:da:60:ea:66:c6:62:a5:99:1f:e4:51:
         5f:5d:1f:bb:92:42:d3:d7:56:86:05:fe:fa:f2:16:87:e1:10:
         71:ef:86:2e:0d:1c:8e:a1:00:bd:1a:ae:71:bc:5c:90:6b:e2:
         49:d6:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:51 2024 by rpki-client on console-ams.rpki-client.org