Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3139312e3235332e31382e302f32332d3233203d3e20323632373733.roa
File:                     3139312e3235332e31382e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          Wz2/m0wINEnF2kpwnTRtbeDVSO33qpTwKV5PGt8HX/I=
Subject key identifier:   A2:DA:AD:3E:8E:71:4C:E7:29:80:9A:99:E3:5F:E9:23:9F:E8:EF:B3
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       53CF3E438D472EA0B05067FFFE4103FA8A6C9D7B
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3139312e3235332e31382e302f32332d3233203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:23 +0000
ROA not before:           Wed 14 Aug 2024 12:03:23 +0000
ROA not after:            Wed 13 Aug 2025 12:08:23 +0000
asID:                     262773
IP address blocks:        191.253.18.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cf:3e:43:8d:47:2e:a0:b0:50:67:ff:fe:41:03:fa:8a:6c:9d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:23 2024 GMT
            Not After : Aug 13 12:08:23 2025 GMT
        Subject: CN=A2DAAD3E8E714CE729809A99E35FE9239FE8EFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7d:01:bf:68:ce:84:19:7c:4d:6f:57:38:c5:
                    fb:c2:82:7b:12:42:e9:a5:a0:52:50:29:3f:e0:47:
                    0e:4d:96:ac:de:b6:8d:75:60:1d:f2:f4:f8:ad:66:
                    55:c2:d3:be:be:22:44:70:2a:34:15:ec:fb:a8:fc:
                    78:46:d5:13:84:1d:29:23:f6:ad:11:fb:58:a8:05:
                    3d:06:47:e6:60:99:21:e7:c8:7d:b4:85:b1:33:ab:
                    72:58:61:8a:3e:65:0e:b3:a0:5e:60:92:e5:42:bf:
                    16:84:45:a5:a8:00:2b:a6:96:74:cf:bf:b9:47:09:
                    b0:06:86:b1:c2:f8:7f:15:53:91:7c:2c:7c:fb:e7:
                    88:c8:b8:aa:07:9d:9a:55:90:3f:19:ab:88:30:b7:
                    a0:9d:66:3e:ea:ee:97:1a:00:af:72:f5:9a:e0:2a:
                    df:1d:19:73:9a:a8:86:b8:8f:7a:ca:d4:9c:14:58:
                    b6:fa:0d:7a:51:de:38:4d:d0:2d:2b:96:30:f7:f3:
                    fb:f2:31:5a:0e:33:48:c0:6f:4c:1b:e9:9c:5f:42:
                    e9:ae:2e:ed:a9:8e:6f:12:ec:9b:da:5b:71:21:49:
                    ae:07:e0:e4:a0:71:a9:4c:ac:6b:30:ac:ee:f3:b0:
                    60:20:3c:0d:d2:e7:14:67:a0:62:50:ca:54:f3:a6:
                    97:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DA:AD:3E:8E:71:4C:E7:29:80:9A:99:E3:5F:E9:23:9F:E8:EF:B3
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3139312e3235332e31382e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:3c:d9:d1:4a:f6:10:ba:31:45:47:9e:c0:3f:77:37:04:ff:
         fc:40:60:1b:ec:87:8f:a8:41:fe:a5:5b:b1:e6:7b:ce:46:d1:
         02:83:cd:e0:1f:4a:e7:eb:ee:72:38:39:48:a9:04:2f:34:1f:
         15:20:d4:92:4c:82:69:f6:07:c8:1f:31:50:2d:7a:b6:2a:53:
         0c:b4:e4:5b:b2:69:a5:d4:7c:3d:e2:6b:ba:d8:4f:bc:93:ff:
         fb:77:58:81:2b:b2:70:80:cc:72:c8:b6:14:c9:c7:04:fb:13:
         a0:c9:5b:f9:2b:ff:f7:91:6b:87:a8:7c:ae:63:3a:7a:b9:b3:
         69:85:27:9d:63:05:3a:e7:65:26:03:90:95:d0:81:7e:7c:c1:
         c5:5c:19:57:f3:a2:ee:04:3c:11:d8:b2:36:e5:95:fe:63:03:
         c3:86:7b:90:40:5f:7e:48:4a:77:d6:af:96:47:7f:f9:90:34:
         28:6a:08:26:c0:7a:21:09:dd:f9:2d:17:14:5a:19:3b:ef:c8:
         7f:d1:95:59:af:90:38:bd:bf:12:f6:b2:a0:d7:b1:fb:61:4a:
         45:ee:c2:cd:a4:c3:ba:38:71:a4:57:3b:8d:66:b2:23:47:4e:
         c5:96:e9:57:db:d0:ec:43:a0:e6:20:75:63:8d:bc:47:b5:15:
         cb:1a:f8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:52 2024 by rpki-client on console-ams.rpki-client.org