Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139322e302f32312d3231203d3e20323632373733.roa
File:                     3138362e3233322e3139322e302f32312d3231203d3e20323632373733.roa (raw, json)
Hash identifier:          L7DForxUU3NlGOg92rPk3LTU92Q6MDeoXHN2bWU8BxU=
Subject key identifier:   E6:54:FD:5F:52:B4:B5:84:82:D6:D4:47:44:B3:2B:84:47:2D:88:24
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       1E60FF850218A7F775227F0B5A66C7CF97E6A08E
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139322e302f32312d3231203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 18:08:34 +0000
ROA not before:           Wed 14 Aug 2024 18:03:34 +0000
ROA not after:            Wed 13 Aug 2025 18:08:34 +0000
asID:                     262773
IP address blocks:        186.232.192.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:60:ff:85:02:18:a7:f7:75:22:7f:0b:5a:66:c7:cf:97:e6:a0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 18:03:34 2024 GMT
            Not After : Aug 13 18:08:34 2025 GMT
        Subject: CN=E654FD5F52B4B58482D6D44744B32B84472D8824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:9c:49:6c:a5:f6:a1:e8:c8:e3:b6:93:1b:
                    2c:2e:40:fb:a0:29:ed:13:4b:73:0b:48:e2:d5:10:
                    fb:ac:68:eb:96:47:68:7d:73:c2:b8:ef:4e:e6:d8:
                    6e:44:73:6f:be:e5:3e:32:76:13:87:ea:d5:2d:9e:
                    69:b8:61:c6:51:1d:ad:0b:ca:f0:37:b4:4f:41:d6:
                    89:68:90:14:35:6b:02:8e:a4:5e:93:61:44:fb:ed:
                    b4:1d:a8:c1:07:c8:52:10:d2:32:e6:83:40:ec:db:
                    1b:8a:40:53:e2:20:c4:15:a8:53:11:31:c5:19:6a:
                    e8:cd:f8:35:24:20:af:76:bc:1e:17:09:8c:7b:da:
                    95:92:e4:c8:4b:7a:fd:78:37:3e:c7:15:54:65:e3:
                    8d:33:11:d0:89:47:90:df:ff:5c:26:f1:cd:cd:24:
                    39:69:7e:d9:9f:0b:48:81:81:cd:e4:43:00:c1:a3:
                    c6:a1:1b:1a:57:37:0d:9d:fd:9b:1d:5d:45:e6:2c:
                    d5:5b:e3:e6:38:d1:64:fc:fc:c7:4f:70:ef:ad:6a:
                    2a:61:43:b7:81:04:44:2e:13:a1:f1:65:e7:ac:5e:
                    64:88:f5:2e:fa:7a:15:79:38:e6:91:a6:fe:cd:20:
                    96:a8:81:b7:f2:5e:37:78:da:ca:75:f0:83:1d:9e:
                    e0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:54:FD:5F:52:B4:B5:84:82:D6:D4:47:44:B3:2B:84:47:2D:88:24
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139322e302f32312d3231203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a9:75:7b:8d:dc:85:8a:5d:f8:9c:ca:59:ed:b1:ba:78:26:e9:
         23:77:0a:63:53:1e:e7:26:4f:a9:66:8d:13:26:3c:e2:ca:9f:
         d0:34:a5:d1:1f:0c:c8:8f:88:61:0a:a0:05:8a:73:27:1e:27:
         45:62:e2:34:1a:3e:35:8a:12:52:1c:c0:ab:d5:d4:1f:e4:9a:
         fa:fe:a9:58:15:a6:d4:d2:1b:10:1e:f1:ad:92:ec:1f:a6:72:
         5e:5a:f6:2c:73:ce:b4:fe:c5:1b:d6:68:10:75:db:0e:c0:68:
         7b:be:3a:a4:8d:d8:07:3f:5a:5c:d4:c7:c5:73:d6:df:77:23:
         83:1f:1d:28:bf:db:00:6e:da:c3:8f:f4:81:30:97:92:f6:fb:
         34:77:3b:3f:98:a0:ae:ed:75:76:e1:57:f5:2d:b2:2e:81:fa:
         d3:e5:7d:23:87:17:7b:4a:ba:12:b9:36:59:92:99:64:c8:72:
         fd:66:3a:a0:ff:34:43:7d:b3:1c:bc:92:19:d3:2a:95:a2:cc:
         32:a7:b7:fc:73:04:31:3b:c0:41:48:5a:8d:d8:e9:83:2b:b5:
         77:bb:c6:4f:e4:d8:8c:c5:e4:d5:42:27:08:9f:3c:09:66:1f:
         b9:c2:46:e6:1a:1f:3d:60:a8:9f:78:85:8f:d8:03:ec:98:0c:
         ae:8f:dd:02
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHmD/hQIYp/d1In8LWmbHz5fmoI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA4MTQxODAzMzRaFw0yNTA4MTMxODA4MzRaMDMxMTAvBgNV
BAMTKEU2NTRGRDVGNTJCNEI1ODQ4MkQ2RDQ0NzQ0QjMyQjg0NDcyRDg4MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5JJxJbKX2oejI47aTGywuQPug
Ke0TS3MLSOLVEPusaOuWR2h9c8K4707m2G5Ec2++5T4ydhOH6tUtnmm4YcZRHa0L
yvA3tE9B1olokBQ1awKOpF6TYUT77bQdqMEHyFIQ0jLmg0Ds2xuKQFPiIMQVqFMR
McUZaujN+DUkIK92vB4XCYx72pWS5MhLev14Nz7HFVRl440zEdCJR5Df/1wm8c3N
JDlpftmfC0iBgc3kQwDBo8ahGxpXNw2d/ZsdXUXmLNVb4+Y40WT8/MdPcO+taiph
Q7eBBEQuE6HxZeesXmSI9S76ehV5OOaRpv7NIJaogbfyXjd42sp18IMdnuAjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5lT9X1K0tYSC1tRHRLMrhEctiCQwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzODM2MmUzMjMzMzIyZTMxMzkzMjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7rowDANBgkqhkiG9w0BAQsFAAOCAQEAqXV7
jdyFil34nMpZ7bG6eCbpI3cKY1Me5yZPqWaNEyY84sqf0DSl0R8MyI+IYQqgBYpz
Jx4nRWLiNBo+NYoSUhzAq9XUH+Sa+v6pWBWm1NIbEB7xrZLsH6ZyXlr2LHPOtP7F
G9ZoEHXbDsBoe746pI3YBz9aXNTHxXPW33cjgx8dKL/bAG7aw4/0gTCXkvb7NHc7
P5igru11duFX9S2yLoH60+V9I4cXe0q6Erk2WZKZZMhy/WY6oP80Q32zHLySGdMq
laLMMqe3/HMEMTvAQUhajdjpgyu1d7vGT+TYjMXk1UInCJ88CWYfucJG5hofPWCo
n3iFj9gD7JgMro/dAg==
-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:52 2024 by rpki-client on console-ams.rpki-client.org