Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3233322e3131322e302f32322d3232203d3e20323632373733.roa
File:                     3136382e3233322e3131322e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          de/+ZHnRIRnYICPyIbIvYRi6wjGhOEunbg1sEsuH2iY=
Subject key identifier:   8A:D2:97:31:2B:0A:FA:E9:5C:84:66:3D:B0:91:D2:83:62:73:21:22
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       5A52FBA2DBF6922DC2863BF1D0A6565C3863FACF
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3233322e3131322e302f32322d3232203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:26 +0000
ROA not before:           Wed 14 Aug 2024 12:03:26 +0000
ROA not after:            Wed 13 Aug 2025 12:08:26 +0000
asID:                     262773
IP address blocks:        168.232.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:52:fb:a2:db:f6:92:2d:c2:86:3b:f1:d0:a6:56:5c:38:63:fa:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:26 2024 GMT
            Not After : Aug 13 12:08:26 2025 GMT
        Subject: CN=8AD297312B0AFAE95C84663DB091D28362732122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:16:10:5a:b2:c5:a6:a3:cf:79:65:22:1c:
                    15:f6:38:51:f2:7a:d5:3d:0d:c5:24:ac:34:55:4d:
                    2e:9f:aa:48:f8:9a:a5:de:5c:70:7d:9f:a0:5c:0f:
                    b0:1a:24:fb:9d:52:b3:aa:2e:1d:ca:6f:0e:75:6d:
                    e7:6f:12:94:00:0c:26:1f:34:a0:3b:f3:eb:1b:7a:
                    0b:c0:e0:64:77:00:8f:ec:36:71:a5:be:de:68:d8:
                    d3:17:11:ee:f7:a3:9a:8a:30:d2:34:39:97:ba:fc:
                    38:17:cc:b4:9d:25:c1:98:a4:e3:c5:4c:a3:6c:f4:
                    c9:83:89:e8:46:c2:98:c2:32:a7:c6:fc:bc:fc:e7:
                    0f:aa:d2:82:28:7c:c3:0a:cc:f5:ea:ab:b7:e8:b8:
                    42:d3:0d:a0:37:8c:52:27:01:c9:bd:84:fc:05:b8:
                    ee:93:e8:f4:2f:09:cf:59:8f:ca:34:37:63:86:8c:
                    93:73:93:53:29:ff:94:fe:65:57:2a:60:b4:8c:6d:
                    3c:4f:fe:26:e5:a5:1e:18:46:b8:cd:ef:4e:4d:b9:
                    8f:b2:18:85:2d:5d:95:41:97:af:24:12:70:89:d0:
                    64:ef:e0:f7:ec:cb:81:cc:e6:56:f4:9b:24:89:f6:
                    e8:34:d0:f8:9e:29:50:ec:98:84:8b:a6:36:47:dc:
                    31:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D2:97:31:2B:0A:FA:E9:5C:84:66:3D:B0:91:D2:83:62:73:21:22
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3233322e3131322e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:ad:8a:75:8d:67:7d:bc:65:9e:67:a3:cf:be:eb:da:9f:ce:
         2e:a3:a0:0c:b5:91:f2:5e:37:3c:be:a6:aa:f8:00:6c:7f:a6:
         9f:3f:ca:4a:e9:97:86:da:70:49:9e:5d:67:49:a0:d7:b1:cd:
         ce:bc:77:7a:5a:9b:52:32:26:cb:6f:f9:d2:b5:e2:f1:56:ca:
         1c:15:a0:67:34:19:4a:ae:b5:cc:4c:78:f1:c1:7f:03:84:d7:
         de:6e:eb:05:bd:15:d1:81:62:15:a0:03:bf:e3:64:7c:43:f7:
         59:cb:0d:24:7a:fe:1d:2b:b9:43:9b:2f:46:38:21:ff:76:ab:
         70:e7:44:39:35:55:41:e9:aa:a0:c1:af:59:18:57:0e:5b:5c:
         1d:b5:a5:9a:41:04:7d:1c:58:06:4b:98:e0:e3:83:fa:28:00:
         97:bd:90:58:24:a8:25:7a:c6:e5:3d:56:bb:ec:b3:09:5c:2c:
         4c:b0:ff:08:03:85:4f:bc:6c:3d:ad:e5:68:b0:ba:b7:a9:b7:
         3b:0f:76:b6:e5:cb:7f:77:8e:73:46:cf:d9:22:66:12:fb:6c:
         f7:22:6e:22:e1:1d:ec:bc:03:86:ee:9a:eb:43:18:4d:6c:51:
         56:3e:09:b4:1b:98:c7:5d:61:4e:f1:0b:a1:89:d1:bb:6e:8d:
         60:dd:d9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org