Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139372e37342e302f32332d3233203d3e20323632373733.roa
File:                     3136382e3139372e37342e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          2LijEeI7orOB/4o1HrhMoF2CekzU/Ool2tZvQcxZcUc=
Subject key identifier:   AC:CA:CE:9D:C2:FD:61:89:21:C4:EC:88:56:91:7E:37:34:33:98:3E
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       24AF49DBFC8CC3115AD9C1F5CDB449ED84752B88
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139372e37342e302f32332d3233203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:25 +0000
ROA not before:           Wed 14 Aug 2024 12:03:25 +0000
ROA not after:            Wed 13 Aug 2025 12:08:25 +0000
asID:                     262773
IP address blocks:        168.197.74.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:af:49:db:fc:8c:c3:11:5a:d9:c1:f5:cd:b4:49:ed:84:75:2b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:25 2024 GMT
            Not After : Aug 13 12:08:25 2025 GMT
        Subject: CN=ACCACE9DC2FD618921C4EC8856917E373433983E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:34:82:89:31:c4:95:a1:a7:dc:a5:2e:6b:
                    a0:4e:08:64:26:64:3a:4a:08:e4:5f:51:ee:c1:89:
                    db:9e:77:b0:d7:13:77:b7:fd:3a:2a:92:a4:70:21:
                    8d:13:c9:da:12:fb:74:9e:13:99:78:99:9f:a7:8b:
                    07:78:f8:de:31:62:24:89:19:ca:65:9c:f1:d8:76:
                    8d:8d:a2:d6:61:8e:4b:79:31:0c:85:a2:f5:75:8c:
                    e0:40:92:c8:9e:c6:ee:8f:28:e0:28:3b:cc:78:0b:
                    16:a9:28:0a:b1:1a:73:68:c1:4f:e0:47:87:ee:f5:
                    31:16:8e:95:cb:c4:08:9d:45:7c:a1:48:2c:90:7a:
                    df:9e:4f:8e:e5:19:6f:71:86:24:f6:b8:77:a2:fb:
                    52:e3:4a:a7:eb:e7:3a:25:c2:83:a7:c1:0b:0e:4d:
                    6a:a4:0f:dd:a1:d5:58:65:01:6b:46:5b:bb:84:29:
                    69:fb:ef:f5:ae:d8:ef:3c:f0:49:a5:c6:0a:16:f4:
                    29:13:9e:c7:c0:3a:42:ce:a7:bd:18:75:f4:39:18:
                    f7:af:f5:bd:fc:8a:19:64:a7:b5:3d:e4:84:46:3b:
                    e3:b9:74:86:7e:83:1b:62:50:1e:bb:bc:83:e1:01:
                    dc:8a:12:50:ac:27:79:ee:78:e4:83:3a:4c:7b:9f:
                    41:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CA:CE:9D:C2:FD:61:89:21:C4:EC:88:56:91:7E:37:34:33:98:3E
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139372e37342e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:e6:00:dc:fc:93:b8:f5:fa:67:04:ab:38:d2:b6:6e:29:d8:
         9a:08:c8:e3:56:0b:13:a1:3b:51:3d:ab:41:fa:e1:a1:ab:8c:
         a5:aa:57:37:4d:f5:fe:bf:84:88:0f:01:b1:19:22:09:14:83:
         de:f6:15:d5:98:32:fd:ef:4d:44:7c:d4:1c:52:2b:94:dd:34:
         db:24:4f:36:1d:d7:4b:ba:b7:1e:fe:17:86:61:d6:2f:09:f8:
         9d:1f:a3:8a:94:90:5a:e8:6a:62:4b:f6:d3:0c:76:e6:f5:96:
         24:9d:64:4e:86:a7:17:11:73:04:42:62:42:7e:b6:5c:48:7f:
         cb:fb:d1:8e:95:bc:31:b7:69:b4:28:4c:dd:61:81:07:d2:fe:
         cb:e2:cf:24:e3:97:be:7f:21:b4:18:85:e9:96:b3:b3:70:86:
         ba:d1:9b:01:7c:1f:aa:7b:50:85:60:40:be:3e:33:1b:3d:7b:
         8c:1f:81:b5:e1:eb:53:8f:8b:7e:96:5b:ba:2b:4f:02:09:79:
         b8:41:38:bf:f6:12:82:e1:f2:55:46:18:a4:28:7d:17:b3:ea:
         de:4b:70:33:42:1b:c0:f0:e3:9b:c1:6f:2d:58:66:34:9b:5f:
         d9:c5:81:8c:34:7b:84:7e:5e:c7:f2:71:2b:e9:bb:5d:3f:bc:
         cf:0b:aa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org