Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139352e302f32342d3234203d3e20323632373733.roa
File:                     3138362e3233322e3139352e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          M/ZfYUd3zCJAt0NyI8XcKKWEZnRmeNan5V221GgcZcE=
Subject key identifier:   F6:2F:12:7F:49:E9:53:15:F0:34:EC:09:5E:7E:47:C3:CD:06:AE:05
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       430464952CD0B2514FB7F04A8213BFA2C0B5BD6D
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139352e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:25 +0000
ROA not before:           Wed 14 Aug 2024 12:03:25 +0000
ROA not after:            Wed 13 Aug 2025 12:08:25 +0000
asID:                     262773
IP address blocks:        186.232.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:04:64:95:2c:d0:b2:51:4f:b7:f0:4a:82:13:bf:a2:c0:b5:bd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:25 2024 GMT
            Not After : Aug 13 12:08:25 2025 GMT
        Subject: CN=F62F127F49E95315F034EC095E7E47C3CD06AE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b4:5a:8f:12:89:44:c3:83:68:45:96:fb:11:
                    56:88:3c:03:74:d9:4f:55:ee:c6:91:bd:ba:b0:f9:
                    74:14:fc:fc:eb:b5:2c:e1:0f:bd:35:c3:1a:f9:1b:
                    69:b2:9e:3f:d5:b9:af:35:47:9d:60:6d:52:b7:63:
                    ec:e8:dd:6f:92:84:e9:af:fa:8e:89:be:30:95:99:
                    13:3c:59:1d:25:b9:f5:42:9e:23:b4:fe:7c:aa:36:
                    f9:33:b6:bc:bd:c7:6d:3e:1a:20:37:74:5a:fb:c9:
                    61:77:7a:24:3a:43:75:7f:ed:2a:14:dc:46:fd:f8:
                    ed:11:e6:3c:aa:3e:4a:00:b6:61:10:7d:9f:c0:8a:
                    40:cf:8f:41:bb:2c:9d:af:d4:0a:f2:4c:51:ed:3b:
                    4a:97:aa:ec:fd:16:97:d9:06:1c:5b:2e:f5:8b:8a:
                    da:57:b5:df:4b:62:4b:4d:3c:eb:63:6a:e8:4d:eb:
                    4c:27:ee:66:e9:ad:4e:0e:62:cb:db:a6:8b:34:4c:
                    f7:68:6b:f7:52:81:69:76:ef:6e:f9:a4:95:bd:7d:
                    91:87:c3:90:ac:15:c4:59:aa:65:0e:8a:07:7a:a0:
                    50:3b:d1:d6:49:62:81:31:d1:a6:d5:a5:57:7e:6d:
                    1a:b3:2d:46:14:78:44:96:65:40:91:64:83:f5:b2:
                    0f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2F:12:7F:49:E9:53:15:F0:34:EC:09:5E:7E:47:C3:CD:06:AE:05
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139352e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:66:2e:b2:7c:a6:68:db:f4:a0:c6:fa:98:e8:1a:93:95:98:
         0d:35:35:c6:e8:e9:65:d8:24:7e:1a:53:09:6e:c3:29:9c:75:
         1e:6a:2d:84:c2:ab:e5:c2:4e:2d:2d:be:43:ad:89:6b:d9:15:
         17:3b:8e:3f:6c:b9:6b:71:38:71:8f:39:a0:dc:49:3f:dc:03:
         fd:96:a8:67:50:b4:33:d3:62:34:b5:7c:b4:1e:3e:a7:f4:9e:
         d8:24:a5:eb:12:b1:ec:3a:65:52:92:ac:49:4a:8d:35:a4:f5:
         61:49:2e:4d:8f:6d:ae:18:44:b8:c8:81:5c:e3:47:5d:be:61:
         c6:6e:e8:d0:b2:4f:42:c0:1f:a8:13:63:55:1a:96:d6:81:5b:
         14:18:a9:db:4a:34:06:d6:32:04:41:dd:0b:75:b2:8f:43:43:
         f8:68:ad:e5:43:d2:6c:c6:31:e5:ff:69:46:f3:0b:93:69:49:
         71:a3:37:99:aa:d8:5c:63:d8:95:d9:f7:36:0c:27:20:a6:4c:
         43:76:06:8b:44:b8:25:80:73:66:db:ca:55:91:cd:8a:1a:4a:
         56:23:62:8d:62:8a:93:d2:16:15:86:cd:01:9c:cf:31:f7:9a:
         e5:91:ff:2c:68:cd:85:d0:21:8d:c2:70:fb:52:f7:bc:ce:79:
         a1:df:24:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:52 2024 by rpki-client on console-ams.rpki-client.org