Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3139312e3235332e31382e302f32342d3234203d3e20323632373733.roa
File:                     3139312e3235332e31382e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          gOlnGa3s4mTZ9ec4Ux3GdC1rECtFp3exoh1qFNJEw+8=
Subject key identifier:   C6:AD:51:21:7D:52:0B:D1:BF:A1:85:D4:C2:EA:5B:AF:03:88:03:49
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       0F810789E2A52952EB6C4CBAEADF08BCD3D150A4
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3139312e3235332e31382e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:25 +0000
ROA not before:           Wed 14 Aug 2024 12:03:25 +0000
ROA not after:            Wed 13 Aug 2025 12:08:25 +0000
asID:                     262773
IP address blocks:        191.253.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:81:07:89:e2:a5:29:52:eb:6c:4c:ba:ea:df:08:bc:d3:d1:50:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:25 2024 GMT
            Not After : Aug 13 12:08:25 2025 GMT
        Subject: CN=C6AD51217D520BD1BFA185D4C2EA5BAF03880349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:07:86:3e:c4:2f:49:95:84:87:f3:88:3a:
                    0c:b6:14:f8:29:b3:13:d7:68:be:46:0e:3a:b3:ac:
                    6d:10:07:f4:00:b4:cb:bd:b5:39:76:07:85:84:24:
                    da:b6:e3:59:a2:33:0a:a8:38:e5:98:8f:c6:f0:eb:
                    ad:5c:56:4c:f2:76:89:4d:f1:d8:43:81:67:61:71:
                    64:eb:e2:8f:86:09:b9:9c:c9:de:0d:09:46:67:8d:
                    55:0a:e1:6e:2f:98:74:a7:4b:bf:21:ac:95:d4:c8:
                    29:0f:61:c4:d0:c6:3a:63:e1:54:83:e0:ac:89:be:
                    46:1a:37:e4:bd:bf:44:4c:af:9f:0f:8b:8f:79:3a:
                    bf:0b:88:fa:7d:a9:b1:40:8a:e2:8b:04:d4:b1:3d:
                    7f:b7:b9:45:92:3c:2c:7d:5f:f1:87:5b:94:c1:0f:
                    7e:1f:80:cc:3e:50:24:05:b8:ba:71:9e:67:e9:9c:
                    39:ca:53:a0:49:cd:0a:3d:12:97:e8:fe:e0:52:df:
                    b1:1c:19:fb:8d:ea:4d:fe:7c:e1:7d:dc:36:7f:a1:
                    0e:de:bb:90:de:22:a1:09:d0:71:c2:2f:e5:65:6f:
                    2e:fb:b6:61:2b:b4:21:20:85:0d:99:d3:85:15:8d:
                    90:a2:a9:a7:0a:b3:74:87:08:ef:ca:e8:81:6b:05:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AD:51:21:7D:52:0B:D1:BF:A1:85:D4:C2:EA:5B:AF:03:88:03:49
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3139312e3235332e31382e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:02:bc:09:b4:de:24:9b:8d:f7:da:9d:38:fa:20:e3:2c:5d:
         f8:5a:25:45:5f:fb:4c:99:20:26:42:f7:92:d6:19:d1:35:ec:
         03:35:87:c1:08:ec:b9:c8:24:65:31:13:b9:51:e2:14:9f:7d:
         ad:d9:73:60:81:d4:6f:2d:eb:48:4a:05:e0:e7:b9:6d:c1:8a:
         1f:99:d0:20:ee:f0:da:bb:b5:a4:76:8f:5d:b8:d0:c8:d4:93:
         8e:9b:98:05:45:00:0e:71:ca:70:c3:fe:40:e8:f6:db:6e:8b:
         a1:cd:04:6c:5b:68:2a:d1:d4:c8:a9:ec:25:f2:81:8b:aa:a3:
         3f:98:22:89:3d:09:87:85:57:de:4b:e0:1e:f1:eb:e4:f9:30:
         a9:31:70:84:34:ca:11:6a:75:5b:21:d6:85:61:23:4c:25:1f:
         58:72:91:a2:1b:77:20:e0:ae:1c:63:de:8f:5d:d4:d5:62:c1:
         9c:f7:bd:3f:53:e7:ea:7f:1f:0b:7a:6d:16:62:43:0b:4b:da:
         a4:f2:df:9a:4b:83:46:58:27:0f:03:3b:3b:d1:8d:ba:20:2e:
         6e:ae:c4:8a:12:a4:8f:95:a9:ca:5b:8f:0f:41:7e:90:e0:24:
         bd:e5:66:f9:ee:dd:60:d2:b8:6f:30:ed:ba:d4:dd:23:2d:75:
         b3:fb:93:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:52 2024 by rpki-client on console-ams.rpki-client.org