Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139392e302f32342d3234203d3e20323632373733.roa
File:                     3138362e3233322e3139392e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          7eEzA7f2aa9msyu7wD1G0ivPpAUcYn7+xhHHDaz0yJQ=
Subject key identifier:   24:A9:FA:AB:74:1A:DD:58:DC:8D:04:61:EB:89:13:06:B4:4D:5D:19
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       6CED173610BBF9CFDECA42B2ADD8CB9E7F52C3C2
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139392e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:23 +0000
ROA not before:           Wed 14 Aug 2024 12:03:23 +0000
ROA not after:            Wed 13 Aug 2025 12:08:23 +0000
asID:                     262773
IP address blocks:        186.232.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ed:17:36:10:bb:f9:cf:de:ca:42:b2:ad:d8:cb:9e:7f:52:c3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:23 2024 GMT
            Not After : Aug 13 12:08:23 2025 GMT
        Subject: CN=24A9FAAB741ADD58DC8D0461EB891306B44D5D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0c:41:54:15:6c:d0:52:16:f0:d4:13:05:d9:
                    50:a9:91:15:16:9e:fe:2a:f6:84:ba:75:5a:fa:02:
                    c6:db:18:15:3d:d6:06:4f:d6:8e:fd:90:29:c0:b7:
                    6b:38:46:11:be:5b:49:6c:57:17:f3:30:a8:97:54:
                    ad:cc:2a:6e:bc:12:6d:89:e1:39:c2:b3:81:63:d1:
                    a8:a3:00:56:46:16:5e:75:0b:9a:cf:09:9a:12:8d:
                    31:52:71:d7:c3:1c:94:10:e7:d3:5f:4c:9b:73:4b:
                    0b:02:5a:2a:5c:bd:20:3c:e9:3a:fb:4c:87:a7:67:
                    3e:73:01:7f:a5:fd:a6:c8:67:06:10:ec:c7:04:5d:
                    f8:59:4e:e9:24:da:04:db:b3:04:2c:66:cb:4c:20:
                    36:d7:2d:46:dc:35:11:f5:7e:36:1d:b1:af:23:71:
                    dd:f7:2a:cf:25:a5:30:c5:8e:b4:df:c0:88:9f:0a:
                    a8:18:93:8c:aa:b3:41:cd:d4:df:0e:fc:2c:11:c5:
                    cc:45:d0:ef:ea:d1:ac:1b:d9:96:fe:db:55:24:db:
                    00:1e:c4:d1:8d:57:1b:7d:d3:3b:49:c0:08:0c:a7:
                    f4:aa:e0:47:f5:2b:fd:de:7d:3b:8c:ff:df:50:87:
                    97:29:c9:d1:a4:da:b5:af:62:8b:5e:4b:39:93:c9:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A9:FA:AB:74:1A:DD:58:DC:8D:04:61:EB:89:13:06:B4:4D:5D:19
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139392e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ba:7d:63:36:e1:44:f0:fa:e0:2e:57:c9:a0:a7:59:e4:f3:
         94:b8:4d:aa:0c:c7:89:9d:dc:ef:fc:86:2d:74:a0:22:a0:e8:
         e2:a4:19:d5:66:25:b2:f2:a8:b0:45:81:2a:ca:46:35:89:c8:
         a8:89:41:74:a6:ce:bb:f9:55:8f:68:31:76:25:33:66:0c:37:
         e2:24:46:02:08:15:ad:32:6c:ae:7b:98:34:ac:8a:58:4b:fb:
         59:08:32:b2:3d:5a:0e:0d:c8:5e:fd:60:71:13:2c:a5:a6:5b:
         20:b0:4b:a0:74:06:b1:03:62:18:27:6c:43:f4:54:56:1a:f6:
         a5:ee:c0:34:57:85:72:dc:cf:de:b5:26:a0:18:03:d8:05:65:
         cf:73:83:60:02:62:78:f7:08:a5:85:3b:35:0c:38:ae:f1:53:
         06:9f:fc:4a:85:b5:ae:67:d2:b8:b1:3c:69:e6:3e:d8:6d:28:
         06:03:c3:38:77:a1:18:68:d0:07:4e:20:06:98:30:5e:54:a6:
         81:91:f8:64:fd:54:2d:e9:78:56:cb:73:a7:aa:6d:70:a3:e7:
         5c:98:1d:7d:19:bb:2f:27:b2:ac:82:80:cc:b5:26:68:37:b6:
         67:a2:45:04:85:d7:ca:43:2e:83:eb:c8:31:63:82:e8:07:d0:
         d5:d2:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:52 2024 by rpki-client on console-ams.rpki-client.org