Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3233322e3131342e302f32342d3234203d3e20323632373733.roa
File:                     3136382e3233322e3131342e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          h8+ReZt1tInYDqR0ZB6gZoff54YQU5xzqQrbEx0GAu4=
Subject key identifier:   55:34:CE:7B:AF:56:84:EF:D7:E8:34:D3:3C:E8:F5:1D:8A:6D:11:3F
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       65EEDCCE9B4B3E21127371F414BF3CD25B648DDB
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3233322e3131342e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:23 +0000
ROA not before:           Wed 14 Aug 2024 12:03:23 +0000
ROA not after:            Wed 13 Aug 2025 12:08:23 +0000
asID:                     262773
IP address blocks:        168.232.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ee:dc:ce:9b:4b:3e:21:12:73:71:f4:14:bf:3c:d2:5b:64:8d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:23 2024 GMT
            Not After : Aug 13 12:08:23 2025 GMT
        Subject: CN=5534CE7BAF5684EFD7E834D33CE8F51D8A6D113F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d1:38:a9:fc:d9:09:5a:e9:d0:50:9d:78:67:
                    11:0f:43:80:f7:e2:ce:a8:2c:23:ed:ac:40:53:67:
                    e1:f4:98:dd:23:1d:a8:68:d1:62:f1:53:d3:13:cb:
                    ae:b4:e0:d0:23:6c:5b:21:89:3b:be:1a:0d:76:ea:
                    21:66:a8:0b:71:1f:f8:4e:be:1b:e4:ae:d7:b4:db:
                    ce:83:6d:32:b0:42:3e:27:38:e6:4f:d3:1b:a3:82:
                    d3:b0:4b:94:36:f8:1d:f6:55:95:d7:06:80:a8:3f:
                    d7:df:b1:ea:59:80:9d:0d:55:94:94:2e:1d:4c:ed:
                    32:59:d9:68:c2:3e:ff:f7:6f:07:97:7e:a8:87:f8:
                    37:46:2d:db:cd:4d:38:30:31:24:8f:03:12:06:71:
                    96:69:57:94:ee:96:be:7a:0e:94:20:8a:f8:4c:4e:
                    df:58:61:82:46:6c:a4:4a:5a:47:66:37:ae:04:1e:
                    2a:a7:9b:75:4b:01:63:cd:bb:58:fd:cf:1a:3e:49:
                    1f:ab:b8:7b:10:0f:8f:b1:c7:d3:12:ff:7f:15:ad:
                    85:e2:36:c0:26:a4:ee:dd:30:f4:80:c3:e5:3b:6c:
                    38:72:c9:32:fb:4e:a5:e0:5d:bb:d8:6c:8f:e8:a1:
                    7e:67:ed:6c:da:6f:b8:38:b8:dc:ec:06:e2:ce:35:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:34:CE:7B:AF:56:84:EF:D7:E8:34:D3:3C:E8:F5:1D:8A:6D:11:3F
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3233322e3131342e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:8c:ee:26:7f:21:93:84:9d:3f:f1:ff:43:3d:72:87:9a:c3:
         f0:81:ba:28:44:d0:a0:e4:30:ae:1a:ac:38:37:42:db:86:b1:
         99:a7:13:4e:f4:56:9e:51:33:71:1a:d5:f0:40:1c:8c:5a:ad:
         34:05:32:b4:73:90:b2:d5:15:0d:f1:95:f0:0c:94:df:06:bf:
         44:65:9a:9b:87:ae:a2:f3:64:c8:5d:08:f2:ff:59:07:e8:7a:
         e9:9b:56:b7:61:81:c5:00:4e:90:87:74:05:2a:f4:fd:16:24:
         d0:c7:d7:c1:45:91:1c:62:32:e9:c9:ad:e4:11:c3:04:67:41:
         25:2d:d8:36:80:33:4c:3d:f0:36:6f:44:08:d1:8a:f1:de:7a:
         78:2d:f1:0c:c3:30:3f:0f:ff:77:d1:e0:fb:19:da:31:53:57:
         c1:a1:02:3a:c6:df:c1:28:64:fe:04:cb:4e:1e:2d:09:e1:79:
         e8:61:b0:83:c9:4e:02:b6:8b:1e:24:aa:cc:c7:09:b1:5d:19:
         70:22:07:1a:3e:04:b8:ac:86:ca:9e:16:66:e9:15:8a:8c:eb:
         e6:7a:50:d6:b1:85:6f:fd:a3:03:99:2d:65:bc:43:86:02:ab:
         91:88:bc:45:16:ed:1f:1a:17:26:fb:03:d9:b6:03:84:2a:d1:
         72:bf:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:51 2024 by rpki-client on console-ams.rpki-client.org