Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3233322e3131322e302f32332d3233203d3e20323632373733.roa
File:                     3136382e3233322e3131322e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          j20FJawSWr5jVVjA9gpouGQJF5jQCU55IljnWxOnsWc=
Subject key identifier:   0A:4A:6C:7A:99:07:DF:E2:AC:6E:87:8D:9B:60:5E:24:3D:E2:7C:9B
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       35E2211168EB5D1EC6DCCD4E971324C324AD6AF9
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3233322e3131322e302f32332d3233203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:21 +0000
ROA not before:           Wed 14 Aug 2024 12:03:21 +0000
ROA not after:            Wed 13 Aug 2025 12:08:21 +0000
asID:                     262773
IP address blocks:        168.232.112.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e2:21:11:68:eb:5d:1e:c6:dc:cd:4e:97:13:24:c3:24:ad:6a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:21 2024 GMT
            Not After : Aug 13 12:08:21 2025 GMT
        Subject: CN=0A4A6C7A9907DFE2AC6E878D9B605E243DE27C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:34:62:27:01:ff:c5:00:2d:3a:b1:c8:2d:
                    73:b2:f6:0c:13:63:0d:cd:85:09:1c:b3:b1:65:93:
                    79:58:e1:56:4b:ff:c2:7b:83:67:e6:7d:56:6f:44:
                    be:cc:60:e0:33:ae:25:60:88:6a:73:03:06:4c:33:
                    87:ab:63:61:c4:cf:6d:b6:b1:52:1a:9c:99:33:4d:
                    12:d0:2d:aa:64:6d:2a:6a:8a:41:7a:ad:1e:98:d7:
                    a6:3e:be:d3:1a:73:06:b2:31:9e:78:7d:c6:a1:d0:
                    a2:ae:66:46:b4:05:21:2c:c9:3b:e7:3a:4b:0c:2f:
                    a1:43:53:16:21:67:98:69:d5:99:c1:8a:dd:2b:f1:
                    f3:d8:7b:b6:79:8a:ec:9b:5f:68:d4:08:ef:19:2f:
                    9b:f5:d0:43:ab:1c:eb:f8:86:2f:00:a2:9e:13:f0:
                    a9:fd:b5:cb:83:94:b7:7b:5e:55:dd:33:26:f3:05:
                    bf:e0:9a:ba:ef:57:15:b6:d9:a9:42:aa:35:eb:fd:
                    24:ab:95:8d:cd:36:b3:96:f0:f8:d1:5e:9c:2d:7c:
                    69:d4:1a:4a:0d:84:53:b9:98:ea:6e:5e:36:74:b2:
                    58:ce:9b:54:ef:fc:fb:43:2a:23:82:45:b3:d2:38:
                    c6:b9:1f:43:13:d3:74:f0:08:f7:4c:cd:41:b6:92:
                    8a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4A:6C:7A:99:07:DF:E2:AC:6E:87:8D:9B:60:5E:24:3D:E2:7C:9B
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3233322e3131322e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:f6:b6:60:bb:bc:c1:05:1b:a4:5f:08:d1:60:61:6a:de:
         5b:99:33:c4:b6:57:81:42:8f:ef:00:12:af:a9:03:a7:41:b2:
         f8:0b:f4:ea:c6:72:ac:80:9a:72:22:a6:52:f2:d3:0e:45:39:
         fc:f8:e7:b6:af:f3:16:e1:f4:10:2a:1a:57:58:05:a8:df:ce:
         88:e1:84:af:0f:a2:b5:58:fb:b0:09:b7:4a:60:66:64:d0:8c:
         c1:88:e6:8b:34:33:21:48:d9:6f:07:8a:5e:57:30:d9:63:19:
         1c:18:ab:c9:f8:aa:5c:c1:ae:b9:9c:81:07:15:5d:2f:42:ac:
         d3:e5:26:c4:0b:cc:84:6e:24:e6:5a:ed:8e:b8:f4:89:1e:a9:
         28:ef:6e:7c:75:04:ab:ec:a0:47:46:36:73:bf:b8:00:92:d4:
         cd:15:87:be:36:8b:5f:9d:06:27:91:45:09:15:5b:f2:5d:63:
         47:e4:ec:57:8c:a6:b7:58:32:0c:21:be:5d:73:20:95:67:db:
         45:6c:dd:ed:a3:23:ba:be:5a:94:9a:77:46:4e:70:1e:bd:69:
         36:63:d7:4a:8f:cd:20:6f:3f:b4:9f:0a:e5:7e:d6:e3:ff:df:
         50:d3:3e:0a:38:0d:f8:b5:83:5a:84:05:56:25:e0:a0:42:fa:
         87:d4:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org