Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3230382e3130382e302f32332d3233203d3e20323632373733.roa
File:                     3138362e3230382e3130382e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          clI3osuMeUlHV50E9V/faJp/U/xva1+5RGt4Zw8ZYIo=
Subject key identifier:   F7:AF:1E:73:F1:99:48:49:04:F1:26:61:61:18:32:CD:C4:C1:CA:59
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       4CE4DE800B6FF936C21FC1A00997F27DBFA51739
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3230382e3130382e302f32332d3233203d3e20323632373733.roa
Signing time:             Thu 04 Apr 2024 06:12:50 +0000
ROA not before:           Thu 04 Apr 2024 06:07:50 +0000
ROA not after:            Thu 03 Apr 2025 06:12:50 +0000
asID:                     262773
IP address blocks:        186.208.108.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 13:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e4:de:80:0b:6f:f9:36:c2:1f:c1:a0:09:97:f2:7d:bf:a5:17:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Apr  4 06:07:50 2024 GMT
            Not After : Apr  3 06:12:50 2025 GMT
        Subject: CN=F7AF1E73F199484904F12661611832CDC4C1CA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:25:bf:03:76:70:f0:4e:fa:05:5d:be:fa:df:
                    42:4f:00:68:82:44:52:e2:e4:2e:39:cd:7e:91:07:
                    9a:9a:88:a2:c5:8a:2d:5a:0f:ce:2d:43:35:71:15:
                    00:c2:0b:91:2f:39:29:ff:99:1a:c1:6e:0b:14:cd:
                    b1:2d:be:5e:b4:74:3e:b3:2e:d0:d5:9c:d0:6f:3c:
                    98:15:eb:1c:9a:d1:63:39:28:26:67:59:34:0d:29:
                    71:5d:4d:11:51:f3:9c:85:23:b6:6d:e7:da:26:ad:
                    fc:38:ff:7f:2b:e2:30:71:73:91:c6:bf:22:03:03:
                    73:ff:35:87:b2:27:a5:ec:f6:99:32:65:b6:9b:8f:
                    a6:58:15:13:a2:92:c8:9b:8d:d6:5c:47:a4:f8:75:
                    eb:4c:bf:df:82:c9:db:30:0c:98:cc:1e:d6:f0:ef:
                    9e:40:50:13:9d:5c:29:6f:d2:6e:4a:f6:f6:61:35:
                    64:ac:94:e6:5c:56:ad:d1:fd:c9:8d:e8:e0:0f:ac:
                    a2:0f:89:0a:bb:d6:96:77:eb:45:84:73:47:5f:c4:
                    5f:44:c7:d5:28:bf:7b:a5:b4:00:f0:12:f5:4b:dd:
                    bb:fd:4b:3b:85:b7:0e:8f:e8:80:cb:e3:57:00:d6:
                    cd:b4:a5:df:e4:b5:76:06:64:6f:49:d7:de:9f:98:
                    b3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AF:1E:73:F1:99:48:49:04:F1:26:61:61:18:32:CD:C4:C1:CA:59
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3230382e3130382e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:41:e6:78:47:f3:a6:93:19:37:36:d9:3a:5c:a5:41:65:f5:
         c2:50:53:40:b9:60:13:64:3b:b2:e6:f3:1b:7e:ee:bc:2c:96:
         9e:3a:3c:de:44:cb:f9:d3:e4:34:f0:47:ed:a7:63:17:1c:89:
         24:80:9b:cd:1d:cd:96:8c:8e:57:2d:3d:ca:3f:33:7e:32:06:
         8c:41:1e:0f:a2:d5:2e:82:01:76:8c:b1:82:76:31:18:53:78:
         f0:0e:01:dd:9b:e9:16:f9:16:75:71:e9:ea:21:ce:9e:c4:60:
         e6:52:5e:37:f8:f5:14:a9:c2:a5:a3:69:7e:7c:b5:60:90:a0:
         37:82:9f:cb:a4:29:d8:45:d5:55:0d:25:ec:52:d8:e4:cf:5a:
         d9:b6:5b:45:2c:a1:c9:20:b3:fa:fa:50:1d:a1:b4:e1:01:ad:
         32:d5:90:48:54:37:5e:1b:a6:77:4f:45:5c:08:ea:d4:04:f8:
         d0:a1:83:8d:41:1c:75:ef:8b:4a:fe:82:75:49:ab:6e:57:50:
         fe:f6:32:d5:62:dc:a4:1f:bf:e3:f7:58:7c:94:6f:67:fa:d0:
         43:51:c6:e7:4c:22:6b:38:11:65:84:c0:dd:c7:cb:e7:90:69:
         fb:9e:f2:09:c6:a0:d0:fa:ac:07:03:54:b0:61:19:21:57:de:
         5b:93:77:38
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTOTegAtv+TbCH8GgCZfyfb+lFzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA0MDQwNjA3NTBaFw0yNTA0MDMwNjEyNTBaMDMxMTAvBgNV
BAMTKEY3QUYxRTczRjE5OTQ4NDkwNEYxMjY2MTYxMTgzMkNEQzRDMUNBNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8Jb8DdnDwTvoFXb7630JPAGiC
RFLi5C45zX6RB5qaiKLFii1aD84tQzVxFQDCC5EvOSn/mRrBbgsUzbEtvl60dD6z
LtDVnNBvPJgV6xya0WM5KCZnWTQNKXFdTRFR85yFI7Zt59omrfw4/38r4jBxc5HG
vyIDA3P/NYeyJ6Xs9pkyZbabj6ZYFROiksibjdZcR6T4detMv9+CydswDJjMHtbw
755AUBOdXClv0m5K9vZhNWSslOZcVq3R/cmN6OAPrKIPiQq71pZ360WEc0dfxF9E
x9Uov3ultADwEvVL3bv9SzuFtw6P6IDL41cA1s20pd/ktXYGZG9J196fmLO9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU968ec/GZSEkE8SZhYRgyzcTBylkwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzODM2MmUzMjMwMzgyZTMxMzAzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrQbDANBgkqhkiG9w0BAQsFAAOCAQEAykHm
eEfzppMZNzbZOlylQWX1wlBTQLlgE2Q7subzG37uvCyWnjo83kTL+dPkNPBH7adj
FxyJJICbzR3NloyOVy09yj8zfjIGjEEeD6LVLoIBdoyxgnYxGFN48A4B3ZvpFvkW
dXHp6iHOnsRg5lJeN/j1FKnCpaNpfny1YJCgN4Kfy6Qp2EXVVQ0l7FLY5M9a2bZb
RSyhySCz+vpQHaG04QGtMtWQSFQ3Xhumd09FXAjq1AT40KGDjUEcde+LSv6CdUmr
bldQ/vYy1WLcpB+/4/dYfJRvZ/rQQ1HG50wiazgRZYTA3cfL55Bp+57yCcag0Pqs
BwNUsGEZIVfeW5N3OA==
-----END CERTIFICATE-----
Generated at Mon Jul 1 16:11:28 2024 by rpki-client on console-fra.rpki-client.org