Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e39352e3232342e302f31392d3139203d3e20323632373733.roa
File:                     3138372e39352e3232342e302f31392d3139203d3e20323632373733.roa (raw, json)
Hash identifier:          gpr/LMiicgoo5Ags/JNokHDfLEuK4m072ZP5d3xyb2s=
Subject key identifier:   FB:96:9F:1A:D2:23:63:AE:FC:33:37:7D:90:8C:6D:32:70:D7:44:59
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       7E669288A95E3CA6145728E829AD10673355CBDC
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e39352e3232342e302f31392d3139203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:28 +0000
ROA not before:           Wed 14 Aug 2024 12:03:28 +0000
ROA not after:            Wed 13 Aug 2025 12:08:28 +0000
asID:                     262773
IP address blocks:        187.95.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:66:92:88:a9:5e:3c:a6:14:57:28:e8:29:ad:10:67:33:55:cb:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:28 2024 GMT
            Not After : Aug 13 12:08:28 2025 GMT
        Subject: CN=FB969F1AD22363AEFC33377D908C6D3270D74459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:54:04:b2:77:20:bc:75:e9:cc:22:f1:65:
                    3f:4c:38:42:f5:aa:cb:ab:53:d4:ce:a2:75:f0:83:
                    b2:b1:f1:9e:95:d7:63:48:78:9a:4a:0c:38:17:6f:
                    78:92:57:9e:8a:98:1b:69:0b:eb:e8:86:a7:26:65:
                    12:5d:87:ec:c1:9d:15:2d:85:50:a8:ce:a3:27:8c:
                    9a:38:bf:3c:8a:e5:5d:58:b0:9c:e9:5a:0b:df:6b:
                    f6:db:50:d9:39:4a:b1:b8:9b:e5:65:31:ff:e3:ac:
                    05:31:a5:89:aa:90:d0:0a:3d:65:34:54:74:42:d5:
                    7e:fe:0f:95:1d:44:f9:d6:f0:71:bb:c4:05:fc:b8:
                    61:eb:d6:8f:f1:34:b4:ff:0d:00:e6:3f:03:5e:6e:
                    97:d9:04:1a:dd:ee:2a:db:54:b3:27:39:16:f5:00:
                    1b:47:d9:01:2c:fa:e6:cd:b1:a3:f3:3a:18:a9:40:
                    6b:f2:50:ab:24:fe:dd:86:3c:f0:b1:af:85:48:e4:
                    df:4b:9c:f6:47:89:35:51:e9:c9:74:31:ed:f2:d0:
                    a7:25:79:39:ba:ad:24:20:39:d9:7d:8e:23:56:b5:
                    4f:c0:bc:53:7f:cd:79:93:11:43:43:33:0b:e5:32:
                    ca:d1:bd:3a:a3:07:0d:16:1d:9c:31:d6:06:6e:44:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:96:9F:1A:D2:23:63:AE:FC:33:37:7D:90:8C:6D:32:70:D7:44:59
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e39352e3232342e302f31392d3139203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:72:f6:f2:4e:f0:30:c9:cb:6d:0d:20:12:fe:89:25:1e:ea:
         88:43:94:17:72:b4:75:bd:58:60:4f:30:46:e9:49:d4:19:02:
         18:26:32:4c:9e:28:cf:3e:23:90:db:ff:e2:ab:1f:42:69:71:
         42:19:e9:10:d7:1e:bb:b6:2d:8d:58:41:85:e8:67:f2:7e:03:
         30:0c:52:9e:67:76:7a:6d:60:08:d9:07:0a:36:97:08:af:51:
         0f:63:20:d4:0a:a1:32:22:57:20:df:ac:13:38:28:12:13:bf:
         2a:e5:64:4c:31:cd:7e:96:ee:af:13:f5:76:82:c1:04:30:47:
         33:0d:25:55:fa:1e:a2:85:6e:2a:8f:99:de:50:b9:dc:54:5c:
         0d:d6:6e:68:0c:7e:b8:32:87:ac:c9:70:93:13:42:4f:60:8a:
         df:45:24:4e:8c:ce:85:c7:21:62:f8:69:1b:02:ba:34:51:01:
         71:85:a8:11:d3:28:36:cd:f5:a5:d5:e3:99:b5:c1:53:ce:7a:
         b3:17:31:fe:5a:c6:c4:e9:57:b1:0d:62:26:be:7d:ac:cd:0a:
         e5:4e:b8:6a:2d:4a:f9:35:31:e9:aa:7c:40:6d:02:5d:93:5d:
         91:af:d0:b3:f5:ca:e5:38:47:04:3a:a8:c4:35:8b:78:e6:b8:
         33:31:54:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----