Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139372e37322e302f32332d3233203d3e20323632373733.roa
File:                     3136382e3139372e37322e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          Xui9VPNnxaKPHKI7HALUge3SX1xV5UZxZ1G6KqSZaqo=
Subject key identifier:   CA:48:9F:C1:AC:13:CF:C9:50:33:75:BE:7B:F3:C3:D9:66:E0:6C:38
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       13487ECDA60FFCE0A0964C7305F8286CA16D6810
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139372e37322e302f32332d3233203d3e20323632373733.roa
Signing time:             Thu 04 Apr 2024 06:12:41 +0000
ROA not before:           Thu 04 Apr 2024 06:07:41 +0000
ROA not after:            Thu 03 Apr 2025 06:12:41 +0000
asID:                     262773
IP address blocks:        168.197.72.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 13:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:48:7e:cd:a6:0f:fc:e0:a0:96:4c:73:05:f8:28:6c:a1:6d:68:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Apr  4 06:07:41 2024 GMT
            Not After : Apr  3 06:12:41 2025 GMT
        Subject: CN=CA489FC1AC13CFC9503375BE7BF3C3D966E06C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:36:f0:2b:6a:f0:22:12:7e:66:48:cb:00:30:
                    66:22:a3:c8:db:77:86:7e:62:b8:9b:24:57:6a:ea:
                    dc:47:0f:e7:35:75:62:ce:f6:e7:a3:df:dc:1e:2b:
                    a0:85:01:b5:f9:7b:81:33:6b:78:8b:60:05:e3:1e:
                    45:71:75:4c:dc:bd:cd:39:69:4e:c2:65:d4:a2:55:
                    85:48:82:51:4d:a7:07:f8:9e:b3:a0:0d:07:28:af:
                    d3:55:de:08:b7:36:c2:fb:f3:70:4a:4b:d6:c4:b9:
                    41:14:85:3a:5e:f5:f0:f2:04:42:23:44:fc:78:31:
                    7e:9e:b4:ee:e6:c5:aa:f8:e1:da:f4:86:f6:bf:9d:
                    e2:c0:3b:af:70:f9:31:d3:b8:85:4b:01:f4:63:75:
                    af:3c:c1:ef:66:a5:57:b8:34:a7:3b:64:1b:f7:af:
                    67:20:8a:5f:15:e8:84:61:f2:c6:ad:5d:10:c6:f9:
                    1b:3a:eb:eb:52:69:17:ce:bc:b8:5d:eb:96:b8:03:
                    36:c6:c2:02:a1:0c:17:a9:74:9e:a9:79:1d:f9:7c:
                    3c:41:ef:06:04:5b:b7:89:5a:85:db:56:e1:26:43:
                    24:b0:17:b8:0d:51:32:2b:fd:e2:f7:83:2d:d7:35:
                    58:6d:86:fb:80:6d:72:56:67:e7:3b:82:c2:99:fb:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:48:9F:C1:AC:13:CF:C9:50:33:75:BE:7B:F3:C3:D9:66:E0:6C:38
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139372e37322e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:b8:03:4d:67:39:52:c7:d2:7a:6a:a9:99:ad:01:85:ac:b2:
         11:b7:8b:d5:c7:b3:e8:42:b2:8c:5a:ea:32:50:a8:74:24:7a:
         d4:fa:e8:3d:5b:ff:fd:af:af:b7:ad:87:36:2a:b8:33:dd:66:
         1a:a8:87:1d:7c:c4:e3:ff:50:49:f0:cf:20:12:31:ad:67:5c:
         a7:a2:c9:3d:0c:2a:ab:99:f9:10:6a:02:60:4e:b2:bb:fb:fb:
         47:2c:f6:87:7f:90:7c:a1:67:5d:a8:e5:0c:75:a9:7c:fe:5b:
         79:70:a5:08:a6:8b:c3:8e:ed:9b:a7:01:c8:d9:eb:bb:0c:18:
         6a:3d:cd:94:64:ec:dc:8a:77:c1:3b:c2:e4:7f:b6:b9:11:57:
         9a:c1:05:5c:e6:d1:42:97:7c:06:a0:bc:37:08:b9:73:f3:94:
         3a:da:71:d5:fc:74:83:21:24:29:be:22:b6:4f:6f:23:c0:0f:
         90:e5:2a:cb:52:37:b0:8e:74:c8:5f:6d:3f:12:f6:7a:11:2c:
         6d:d7:dd:41:5d:08:36:cf:0a:4f:46:b0:38:9c:a6:b8:b3:4f:
         a1:df:57:d9:99:41:93:13:9a:33:6e:c9:c6:04:ec:50:be:d6:
         5a:c6:9a:e0:ab:d0:cd:ea:2c:08:11:2d:71:18:55:be:3a:ef:
         03:d3:b0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:11:28 2024 by rpki-client on console-fra.rpki-client.org