Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e39302e3230382e302f32302d3332203d3e203238313939.roa
File:                     3138392e39302e3230382e302f32302d3332203d3e203238313939.roa (raw, json)
Hash identifier:          eCB737WU2mZAW8zrimRDHFmjY1bkQ+MQlAPxL+s0Sr4=
Subject key identifier:   9F:C0:C6:E6:BB:4F:21:A4:B3:D5:1A:7B:4F:1C:70:0B:89:15:90:48
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       5A2C08C57D209695E26B2052E0DDC95F1FA68859
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e39302e3230382e302f32302d3332203d3e203238313939.roa
Signing time:             Wed 16 Oct 2024 00:10:13 +0000
ROA not before:           Wed 16 Oct 2024 00:05:13 +0000
ROA not after:            Wed 15 Oct 2025 00:10:13 +0000
asID:                     28199
IP address blocks:        189.90.208.0/20 maxlen: 32

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 04:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2c:08:c5:7d:20:96:95:e2:6b:20:52:e0:dd:c9:5f:1f:a6:88:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Oct 16 00:05:13 2024 GMT
            Not After : Oct 15 00:10:13 2025 GMT
        Subject: CN=9FC0C6E6BB4F21A4B3D51A7B4F1C700B89159048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:d0:84:cc:e5:be:ab:d6:3a:be:d5:84:3b:
                    91:3c:dd:fe:53:e0:c1:27:ca:b7:7f:48:a2:c8:1f:
                    55:3b:bb:76:4b:54:29:54:13:2d:d3:5c:20:fc:1d:
                    97:25:6f:09:ac:ab:8d:cc:6a:05:60:ca:ff:c5:82:
                    06:6d:fc:0d:ac:32:89:fb:93:cd:af:37:a0:91:cc:
                    b6:e4:9e:e3:32:33:39:3a:c0:ed:06:4a:39:5e:93:
                    14:16:62:d5:7b:8e:04:a2:59:e9:66:18:02:64:28:
                    ed:2e:1d:eb:b6:eb:8c:dd:a4:a8:4c:f5:a6:cb:11:
                    a0:d8:34:a0:13:47:74:98:6f:57:7c:d6:97:4f:76:
                    0c:68:4b:09:f1:cd:39:16:27:21:8c:61:68:ca:88:
                    88:a7:3b:c7:1f:1f:f1:57:f5:6a:6f:b5:56:23:c9:
                    97:eb:4b:3a:3a:8b:5b:38:7b:80:76:c5:1f:08:0e:
                    64:1f:ec:10:09:df:ac:52:da:37:50:53:cb:cb:83:
                    d8:6e:d9:a8:d0:8a:88:31:93:8d:c3:4e:2a:e4:ee:
                    90:81:d3:a2:4f:8e:42:c6:74:90:4e:c9:ae:5d:c2:
                    60:ce:2e:14:c2:23:2c:85:6a:49:2f:a2:8d:88:92:
                    5e:a1:44:43:55:08:11:fc:8a:de:c4:08:34:6e:d0:
                    30:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C0:C6:E6:BB:4F:21:A4:B3:D5:1A:7B:4F:1C:70:0B:89:15:90:48
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e39302e3230382e302f32302d3332203d3e203238313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c5:51:57:c3:cc:81:0c:18:9f:31:17:59:a3:06:4a:9e:81:82:
         f7:42:b2:21:a9:49:b1:3d:f5:52:85:ed:f9:af:d8:cb:75:ae:
         47:ed:52:cd:5b:c6:ca:3e:35:d9:37:24:03:2d:b5:85:02:41:
         4d:50:16:49:79:68:f8:a4:81:f3:42:c6:86:b2:e9:83:49:4d:
         de:a5:98:7e:53:80:43:2b:af:a0:f2:23:31:38:d9:36:34:78:
         7a:30:bf:bd:3c:0d:68:35:05:93:7a:4d:f1:5e:98:8b:d6:ee:
         3c:98:6f:b3:c1:48:38:f3:47:32:83:6b:db:16:e9:32:99:f5:
         ea:29:ce:67:99:28:aa:17:33:18:2d:89:df:e7:c0:5d:aa:59:
         96:7d:1d:4f:ce:b6:61:4d:5b:28:02:57:88:31:ce:2b:d2:de:
         2f:1c:12:2e:a2:71:cd:bd:57:bd:d4:fe:56:d5:cb:cd:df:42:
         b6:9f:e2:8d:51:4e:e3:63:43:46:14:68:3a:80:28:44:4f:bb:
         9f:5e:83:56:a0:9b:ba:83:d1:55:03:03:14:d5:42:ff:78:ec:
         bf:4f:cd:54:e8:73:23:6a:d3:0a:28:7d:6b:e7:86:96:69:3d:
         26:64:84:d2:81:d2:f5:bb:44:dc:eb:3f:3a:70:df:bb:e7:c2:
         2d:e2:40:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 05:17:28 2024 by rpki-client on console-fra.rpki-client.org