Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3230382e3130382e302f32322d3232203d3e20323632373733.roa
File:                     3138362e3230382e3130382e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          fmcDDhxESbv9e42OFMKo8Wwob7R1dafNp3AuOeWqTSU=
Subject key identifier:   86:57:F1:5C:40:61:A8:8B:98:64:F3:34:36:0D:4F:D0:37:4C:D8:AF
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       283BA99F39E1F227989AE2E81CDA60448E1CFA03
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3230382e3130382e302f32322d3232203d3e20323632373733.roa
Signing time:             Thu 04 Apr 2024 06:12:44 +0000
ROA not before:           Thu 04 Apr 2024 06:07:44 +0000
ROA not after:            Thu 03 Apr 2025 06:12:44 +0000
asID:                     262773
IP address blocks:        186.208.108.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 13:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3b:a9:9f:39:e1:f2:27:98:9a:e2:e8:1c:da:60:44:8e:1c:fa:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Apr  4 06:07:44 2024 GMT
            Not After : Apr  3 06:12:44 2025 GMT
        Subject: CN=8657F15C4061A88B9864F334360D4FD0374CD8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:04:f0:0b:21:f4:38:87:99:83:65:64:58:
                    a8:05:cf:e6:61:89:a6:d1:d9:5f:4d:05:cc:a2:8c:
                    bf:90:1a:96:e0:02:68:6f:4f:8b:cc:77:33:6d:41:
                    d1:94:52:b1:ed:a3:9d:aa:ae:af:90:dd:d3:85:3c:
                    3a:29:41:77:4e:41:a0:fe:8d:79:6a:86:09:a2:63:
                    68:08:c7:36:5e:62:ef:c9:95:3a:fd:b9:93:ae:0d:
                    80:ed:eb:c8:c9:ed:40:13:5d:0c:d6:63:93:08:90:
                    f6:17:f8:18:54:0a:5f:2d:f8:6a:93:30:01:ea:05:
                    ad:c2:d8:19:2a:80:c4:d7:c5:5a:67:a1:79:32:46:
                    dd:e9:66:26:ae:6c:26:e6:fe:61:19:06:ec:c0:9d:
                    47:b6:92:af:eb:6d:a3:c4:68:f3:fc:d5:05:fb:93:
                    86:01:92:d8:c2:63:ba:1c:14:5a:0d:96:4d:fc:0b:
                    51:a5:ab:04:2e:8c:06:cd:fd:4d:1d:01:dc:48:d9:
                    8c:e9:1b:49:f8:aa:c8:2f:b7:a7:1d:63:fd:ad:bb:
                    25:c3:f4:82:f6:aa:dd:c3:f8:24:88:58:27:9d:99:
                    f8:e6:3f:a0:b2:a2:6f:b8:8f:e3:b6:58:d3:0f:7f:
                    fd:c9:bd:4b:26:37:ef:6b:98:82:d8:e2:d3:48:d5:
                    f0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:57:F1:5C:40:61:A8:8B:98:64:F3:34:36:0D:4F:D0:37:4C:D8:AF
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3230382e3130382e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:63:4d:61:3b:a0:97:0b:82:c4:18:d5:e8:53:b7:a8:9e:32:
         d0:37:36:c1:73:45:08:56:06:91:59:71:05:f5:34:5b:da:38:
         e3:2e:44:1b:22:22:e2:6f:94:83:04:61:17:00:47:a0:8e:f2:
         5d:fb:9f:97:ac:ee:82:03:f4:32:c8:b9:2e:01:48:11:96:0b:
         f1:22:bc:5f:e4:02:65:6f:4d:ce:b9:38:12:db:d5:1f:2d:77:
         75:9e:16:eb:3a:c2:7e:40:28:6f:5e:f3:c8:b4:a0:7f:1a:f6:
         d3:30:b8:3d:42:92:97:68:37:69:4d:db:8b:e7:63:07:2d:ef:
         7c:b7:7e:5b:d0:eb:f7:6c:94:8f:b9:44:ff:6a:87:72:f9:c0:
         9b:b7:c3:ff:a6:2b:cf:db:a7:22:2f:dc:53:bb:b3:8b:5b:66:
         79:ad:91:bc:51:cf:9b:95:b3:bc:0c:8b:af:f8:80:51:f6:11:
         8c:8e:da:03:f9:92:1d:8d:a5:85:79:6c:31:f4:cb:51:fa:ae:
         ce:27:b8:fe:f3:7f:60:91:a5:fa:b3:9e:9d:e9:7d:8f:c0:e4:
         4e:72:83:dc:22:51:db:df:b1:88:ae:88:71:84:13:a2:cb:15:
         83:d9:7c:57:82:9e:ec:ad:c7:97:85:09:ac:7c:09:f5:83:1d:
         e5:19:92:af
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKDupnznh8ieYmuLoHNpgRI4c+gMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA0MDQwNjA3NDRaFw0yNTA0MDMwNjEyNDRaMDMxMTAvBgNV
BAMTKDg2NTdGMTVDNDA2MUE4OEI5ODY0RjMzNDM2MEQ0RkQwMzc0Q0Q4QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDATwCyH0OIeZg2VkWKgFz+Zh
iabR2V9NBcyijL+QGpbgAmhvT4vMdzNtQdGUUrHto52qrq+Q3dOFPDopQXdOQaD+
jXlqhgmiY2gIxzZeYu/JlTr9uZOuDYDt68jJ7UATXQzWY5MIkPYX+BhUCl8t+GqT
MAHqBa3C2BkqgMTXxVpnoXkyRt3pZiaubCbm/mEZBuzAnUe2kq/rbaPEaPP81QX7
k4YBktjCY7ocFFoNlk38C1GlqwQujAbN/U0dAdxI2YzpG0n4qsgvt6cdY/2tuyXD
9IL2qt3D+CSIWCedmfjmP6Cyom+4j+O2WNMPf/3JvUsmN+9rmILY4tNI1fCnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUhlfxXEBhqIuYZPM0Ng1P0DdM2K8wHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzODM2MmUzMjMwMzgyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrQbDANBgkqhkiG9w0BAQsFAAOCAQEAbGNN
YTuglwuCxBjV6FO3qJ4y0Dc2wXNFCFYGkVlxBfU0W9o44y5EGyIi4m+UgwRhFwBH
oI7yXfufl6zuggP0Msi5LgFIEZYL8SK8X+QCZW9Nzrk4EtvVHy13dZ4W6zrCfkAo
b17zyLSgfxr20zC4PUKSl2g3aU3bi+djBy3vfLd+W9Dr92yUj7lE/2qHcvnAm7fD
/6Yrz9unIi/cU7uzi1tmea2RvFHPm5WzvAyLr/iAUfYRjI7aA/mSHY2lhXlsMfTL
Ufquzie4/vN/YJGl+rOenel9j8DkTnKD3CJR29+xiK6IcYQTossVg9l8V4Ke7K3H
l4UJrHwJ9YMd5RmSrw==
-----END CERTIFICATE-----
Generated at Mon Jul 1 16:11:28 2024 by rpki-client on console-fra.rpki-client.org