Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139342e302f32332d3233203d3e20323632373733.roa
File:                     3138362e3233322e3139342e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          uH/gPKSyTvRqxMTGF/OBFCl0WFunEy2is3D4go/D8qo=
Subject key identifier:   91:3D:E0:8F:06:30:A7:32:F2:57:9F:6D:84:A7:8E:26:77:1B:41:DE
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       790FD362671736F78A416E02BCB5E188AA415313
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139342e302f32332d3233203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:28 +0000
ROA not before:           Wed 14 Aug 2024 12:03:28 +0000
ROA not after:            Wed 13 Aug 2025 12:08:28 +0000
asID:                     262773
IP address blocks:        186.232.194.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0f:d3:62:67:17:36:f7:8a:41:6e:02:bc:b5:e1:88:aa:41:53:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:28 2024 GMT
            Not After : Aug 13 12:08:28 2025 GMT
        Subject: CN=913DE08F0630A732F2579F6D84A78E26771B41DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e2:87:12:70:d1:96:09:2d:72:5f:81:96:0b:
                    37:df:44:a3:bd:75:d6:74:0b:1e:ec:79:16:cf:5b:
                    d1:18:95:d8:42:5a:ab:17:29:1c:ac:64:50:80:b0:
                    14:45:35:68:55:63:c6:75:dc:1c:80:f2:65:25:7a:
                    77:97:62:8a:82:09:35:bb:bd:ec:41:0c:38:66:c2:
                    4e:64:dc:00:a4:31:86:39:3e:26:fc:d1:f0:b5:28:
                    68:c1:c3:58:11:33:e6:5c:34:1e:3e:b8:fb:5f:1f:
                    b8:3c:89:86:9e:67:4a:e8:80:37:e0:96:be:91:aa:
                    9b:60:e5:32:ec:83:1c:e7:d5:4c:60:73:a7:d6:ec:
                    61:30:21:f6:6d:53:71:36:bc:0d:50:7e:48:e3:6d:
                    a0:b2:c1:d8:9d:cd:df:5e:2e:f5:73:46:ed:b3:6e:
                    bb:2d:69:ce:33:4a:80:38:70:df:1f:35:f7:17:88:
                    46:65:02:7d:df:7f:da:24:d7:92:7b:c5:9f:23:94:
                    a9:a1:c9:8b:5c:75:10:44:ea:c7:ea:ab:a4:8f:a3:
                    f0:23:d1:83:d9:28:93:f7:ba:38:77:3b:aa:59:89:
                    77:77:2e:8a:ec:62:c4:d0:db:06:ee:d6:a4:e6:11:
                    f3:30:bf:71:e8:39:77:d2:c9:aa:2e:58:92:5a:be:
                    92:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3D:E0:8F:06:30:A7:32:F2:57:9F:6D:84:A7:8E:26:77:1B:41:DE
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139342e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:ab:57:3f:ec:27:b7:fa:f3:0b:5a:64:2f:04:07:db:55:2b:
         cb:42:e5:00:66:ca:1b:12:c3:50:b1:6f:ff:d4:68:d0:3d:89:
         67:bc:f3:f1:0f:49:1c:9e:12:88:65:aa:aa:03:d7:d4:68:90:
         0d:ce:16:8b:99:f8:2d:3a:23:12:18:c3:3d:44:f0:63:77:b1:
         c4:47:2b:d8:31:c1:5a:6d:46:12:9e:fc:d3:0a:53:5b:51:10:
         72:de:28:20:51:c9:b0:e6:ea:d0:81:98:c1:48:6e:90:bc:ff:
         f5:2d:36:48:b1:ee:1b:73:34:b7:cc:2f:97:d4:92:05:36:a4:
         de:50:04:59:53:fc:a6:3a:58:29:5e:04:db:1b:1f:50:e4:54:
         e4:78:39:df:db:3c:6a:a4:57:08:1a:be:f1:75:85:16:86:c3:
         2a:8d:e0:de:2b:28:69:0e:e0:07:35:99:c9:2a:62:cc:82:30:
         d3:40:cd:82:c8:ea:88:32:85:26:48:22:7a:36:86:8c:be:52:
         57:b3:b4:56:73:d9:9a:6f:0d:85:65:c1:a9:59:69:a8:c4:1a:
         d9:93:1a:30:33:6c:a3:c8:ad:2f:b4:12:16:06:b5:9b:88:ee:
         66:fb:28:5e:0c:9a:0c:c6:2d:4e:23:dd:14:b6:2a:f1:53:48:
         76:a3:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org