Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3230382e3130362e302f32332d3233203d3e20323632373733.roa
File:                     3138362e3230382e3130362e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          sRUqLc79E6XxBQ7JzQKQkFqtxBUSOKzRv4K8WUyA+DU=
Subject key identifier:   EF:70:29:0A:1E:37:28:21:58:26:03:8B:95:A5:D5:BA:8C:59:C4:FF
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       64789B88D1F79C0DD91301E54AA4DD76E7D88882
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3230382e3130362e302f32332d3233203d3e20323632373733.roa
Signing time:             Thu 04 Apr 2024 06:12:47 +0000
ROA not before:           Thu 04 Apr 2024 06:07:47 +0000
ROA not after:            Thu 03 Apr 2025 06:12:47 +0000
asID:                     262773
IP address blocks:        186.208.106.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 13:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:78:9b:88:d1:f7:9c:0d:d9:13:01:e5:4a:a4:dd:76:e7:d8:88:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Apr  4 06:07:47 2024 GMT
            Not After : Apr  3 06:12:47 2025 GMT
        Subject: CN=EF70290A1E3728215826038B95A5D5BA8C59C4FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:e5:2d:57:34:27:73:ed:06:97:5c:98:56:
                    a7:e5:e4:4f:67:38:12:41:59:c0:37:a9:10:3b:58:
                    c4:a9:93:1d:d2:ef:bc:ae:6e:fd:89:c9:e6:57:74:
                    0b:c8:ca:b2:6d:83:7e:4e:f7:da:62:3a:3f:14:28:
                    0c:b0:10:93:d1:f5:f0:1a:8d:df:6f:d0:97:84:d1:
                    05:dc:63:24:f4:df:de:05:4a:39:5b:e8:22:70:20:
                    df:9e:05:b9:92:72:e4:3b:70:3b:3c:1e:76:e9:e5:
                    71:bd:4e:12:e2:bb:50:3e:03:df:83:87:99:83:c8:
                    a6:a0:fa:de:4a:dd:67:3d:01:ef:ea:d2:b9:97:62:
                    38:b5:27:ff:dc:b1:2b:0e:94:e3:88:ae:e3:6b:9c:
                    71:55:d6:9f:d7:6b:40:5f:69:2e:b1:7b:43:c0:97:
                    77:35:7d:35:fa:4e:83:35:c6:c9:29:ac:44:fc:2f:
                    b6:23:3e:e9:00:ab:1d:53:d2:fc:06:6f:60:52:03:
                    93:bc:26:c1:8c:6f:0f:46:15:31:eb:81:88:01:41:
                    c4:e5:9e:66:d3:ce:7c:a8:de:66:e7:17:63:92:56:
                    1d:c8:a0:18:63:3c:0b:21:18:e3:d4:05:71:9f:41:
                    34:81:02:06:cc:b0:e2:7e:e7:f9:8b:fd:08:ed:05:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:70:29:0A:1E:37:28:21:58:26:03:8B:95:A5:D5:BA:8C:59:C4:FF
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3230382e3130362e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:ff:c6:09:52:ac:82:68:62:9d:02:67:7a:bc:0c:83:5e:a4:
         8a:72:7f:c7:6e:d5:1f:69:a1:41:44:36:8e:c6:15:69:3a:00:
         7f:50:12:99:81:61:79:7b:97:78:1f:f1:ff:43:1d:4f:4e:6d:
         7b:c9:90:48:25:27:c8:94:3e:35:f7:97:3f:3a:d2:3c:49:78:
         dd:8c:58:3b:fe:48:3d:f1:cd:fd:12:15:91:6c:0a:6c:66:6a:
         97:47:5b:91:73:f4:93:1e:3d:58:41:23:eb:0e:ee:57:1e:cf:
         08:4a:4a:43:6f:9c:96:99:bc:81:1e:06:e2:c4:aa:52:49:83:
         45:b5:0d:29:eb:79:ae:10:52:a4:85:28:26:d0:1c:61:b7:81:
         ab:3e:50:ce:68:19:21:96:6e:10:5d:ae:7d:e1:92:b9:47:b3:
         32:b8:dc:28:3c:d3:51:16:ee:b6:95:92:b2:3e:4f:e6:58:c4:
         5e:e3:08:a1:a2:e1:2a:8d:38:91:b3:30:dd:86:d1:4d:f2:75:
         3b:5b:25:70:33:85:97:ab:d4:4d:19:6c:ab:aa:8f:bf:a9:29:
         c8:1e:12:51:a3:25:27:df:a0:a1:5d:48:a5:2e:4f:91:4b:4e:
         35:b8:c8:40:f9:f5:75:37:6d:87:cd:7d:48:d9:6e:f6:ca:1c:
         be:d0:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:21:26 2024 by rpki-client on console-ams.rpki-client.org