Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139342e302f32342d3234203d3e20323632373733.roa
File:                     3138362e3233322e3139342e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          kt+6b/3arbJW+9a8p0lORhjIx6zvK3zz7j/FCrELGEM=
Subject key identifier:   1D:98:9E:2C:1B:DE:D0:D0:4B:57:2C:68:91:2D:53:63:4D:98:A4:F4
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       34E14973EB1B8F95ACC15FACED42383489ADAE0E
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139342e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:24 +0000
ROA not before:           Wed 14 Aug 2024 12:03:24 +0000
ROA not after:            Wed 13 Aug 2025 12:08:24 +0000
asID:                     262773
IP address blocks:        186.232.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e1:49:73:eb:1b:8f:95:ac:c1:5f:ac:ed:42:38:34:89:ad:ae:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:24 2024 GMT
            Not After : Aug 13 12:08:24 2025 GMT
        Subject: CN=1D989E2C1BDED0D04B572C68912D53634D98A4F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:25:1d:c9:8b:0c:21:fc:4e:12:0e:cc:a7:d0:
                    fc:93:6d:56:76:02:8d:d5:73:6a:11:68:a4:87:6c:
                    f0:99:27:d6:ee:35:c4:4f:f1:3c:d3:90:a1:22:41:
                    7b:6c:0b:d8:d1:19:f9:64:d2:cd:7a:09:c9:14:62:
                    3a:f1:72:47:ec:79:77:4e:bb:95:21:10:5c:5b:9d:
                    b6:09:1c:ba:4e:c3:aa:60:60:8f:c6:ca:b4:47:f8:
                    97:57:60:a5:be:12:01:35:32:25:d1:93:b5:e4:61:
                    ec:88:dc:03:12:33:6f:30:08:fd:3b:82:03:e2:9a:
                    85:02:61:65:48:44:de:b1:c0:dc:cf:55:54:6f:ba:
                    02:51:08:a4:09:04:c2:f2:35:ca:1e:c2:8d:38:e6:
                    7e:2c:05:fa:02:7c:ff:dd:bd:fe:ed:17:a9:24:20:
                    e7:26:fb:f2:61:b7:b4:1d:d5:43:81:ad:5f:c6:85:
                    d4:79:96:fc:64:f5:3d:1f:c6:07:32:eb:22:8e:5a:
                    af:0f:b9:b5:5a:f4:78:e3:52:23:e0:15:02:db:b7:
                    54:9a:db:26:c8:f5:4f:f3:eb:c5:72:75:db:00:d4:
                    78:27:82:46:da:e4:c2:bf:29:10:17:9e:21:57:7b:
                    75:04:0b:31:87:72:6a:c1:6c:41:a6:64:89:ad:76:
                    12:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:98:9E:2C:1B:DE:D0:D0:4B:57:2C:68:91:2D:53:63:4D:98:A4:F4
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139342e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:a9:d1:0e:e5:12:bb:96:eb:bf:00:9a:f3:0e:5a:d2:19:ab:
         08:8b:aa:b1:48:5c:86:01:26:b0:66:df:a8:ab:8c:f9:5c:ff:
         d1:44:92:ad:dd:fb:6f:33:a8:b7:f9:05:41:9d:88:8d:07:a8:
         97:88:ea:dc:29:a4:00:89:6f:aa:ec:1d:bb:69:3e:13:49:69:
         75:1b:f1:47:62:70:4e:06:18:5c:eb:f6:e5:02:7c:36:9d:c8:
         25:7a:8f:01:4a:ba:26:fc:25:2c:dd:b6:07:58:02:a8:21:54:
         79:c9:67:26:50:75:1b:a8:46:aa:46:74:64:d2:66:97:40:30:
         16:d5:b8:ed:4d:f4:66:25:a6:02:67:34:b7:5e:e9:f6:86:b9:
         18:45:82:0a:8d:62:a3:ba:f5:5b:ee:4d:d6:68:e6:52:0a:ac:
         7e:bf:34:d1:a3:fa:7a:f0:cc:ba:7e:22:28:58:f3:45:e8:58:
         9e:ce:25:e5:28:cc:c8:1b:ae:13:16:0f:05:a5:41:47:46:7d:
         7c:84:21:29:d8:fa:19:bd:b9:30:d0:58:5a:6f:06:4e:b4:6d:
         ea:61:67:d4:ab:95:30:4d:86:77:ca:62:d8:1d:c0:d5:ff:4e:
         e1:dd:c9:38:7b:0c:4d:9f:99:f2:71:59:4b:00:4a:29:c9:41:
         0b:9e:9a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:52 2024 by rpki-client on console-ams.rpki-client.org