Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133362e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3133362e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          r9qGFBa+JHX3C1/FfYverERZqIQ0Plo3+mkjXoksRes=
Subject key identifier:   89:DA:7E:57:41:9D:A9:00:94:C2:CC:E8:7E:E5:0D:88:00:B8:B1:04
Certificate issuer:       /CN=0E203687834946F995C6BC335F9DA7BCF0DE9407
Certificate serial:       533B0EFCE020FD7D2780F8039E6DE0A3A307B5B7
Authority key identifier: 0E:20:36:87:83:49:46:F9:95:C6:BC:33:5F:9D:A7:BC:F0:DE:94:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E203687834946F995C6BC335F9DA7BCF0DE9407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133362e302f32342d3234203d3e203532393330.roa
Signing time:             Tue 20 Aug 2024 19:58:11 +0000
ROA not before:           Tue 20 Aug 2024 19:53:11 +0000
ROA not after:            Tue 19 Aug 2025 19:58:11 +0000
asID:                     52930
IP address blocks:        190.180.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 20 Aug 2024 20:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3b:0e:fc:e0:20:fd:7d:27:80:f8:03:9e:6d:e0:a3:a3:07:b5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E203687834946F995C6BC335F9DA7BCF0DE9407
        Validity
            Not Before: Aug 20 19:53:11 2024 GMT
            Not After : Aug 19 19:58:11 2025 GMT
        Subject: CN=89DA7E57419DA90094C2CCE87EE50D8800B8B104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:4c:53:29:88:05:bb:4b:f3:59:e2:a6:11:
                    00:16:ae:c4:bb:a7:7e:1a:12:89:48:d8:09:f4:29:
                    43:fa:3b:23:d2:ca:13:79:6f:8d:98:43:29:8c:f5:
                    43:ca:fd:78:81:a9:1d:28:c0:ea:74:2c:9d:a3:7a:
                    a9:b8:00:e2:df:74:06:ee:8f:64:dd:3c:d1:07:d3:
                    ff:0f:c4:1f:71:1b:75:f7:08:8a:ca:e8:5b:dc:a2:
                    99:ce:8e:92:b1:e5:3a:ac:4c:18:91:1e:48:d8:f8:
                    60:8d:fc:24:81:92:98:37:1c:9a:0f:45:7e:dc:d3:
                    31:01:71:31:58:80:6a:50:31:bb:d0:cf:82:7e:22:
                    07:4d:09:49:65:42:f1:75:59:42:1f:59:88:f2:06:
                    28:fe:5b:83:60:5b:98:2f:72:68:3e:79:fd:0a:f6:
                    69:52:b2:f8:2f:dd:14:27:7d:d3:09:f8:4e:ed:3e:
                    ad:b8:f2:17:a7:d9:b1:f0:c3:79:f0:1b:9a:7a:02:
                    4d:4d:bb:df:c1:1c:fc:b0:b0:27:97:1d:1f:e8:f7:
                    3a:a8:c0:80:ab:f9:ea:77:12:8b:72:09:36:0b:8f:
                    f5:41:64:80:d9:7c:33:61:4f:33:88:36:4a:c0:61:
                    a7:19:11:f6:b3:cc:09:73:89:3f:da:f4:bc:dd:65:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DA:7E:57:41:9D:A9:00:94:C2:CC:E8:7E:E5:0D:88:00:B8:B1:04
            X509v3 Authority Key Identifier:
                keyid:0E:20:36:87:83:49:46:F9:95:C6:BC:33:5F:9D:A7:BC:F0:DE:94:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/0E203687834946F995C6BC335F9DA7BCF0DE9407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E203687834946F995C6BC335F9DA7BCF0DE9407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133362e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:30:e6:31:28:bd:3d:0c:5e:7e:eb:90:df:70:91:3d:e8:8e:
         6f:0b:84:a6:1b:e0:67:27:2c:c8:36:f9:e9:61:f5:0a:5b:9c:
         e6:f1:a8:89:12:9b:6f:c6:79:41:14:07:6d:d7:d1:c3:df:9f:
         87:76:74:c9:ad:5b:71:a6:c6:4b:17:b4:61:dc:2c:f7:02:59:
         1a:10:cc:c4:d8:25:30:da:82:12:27:84:b8:26:1a:b6:fd:62:
         db:56:ad:d5:db:29:68:d5:40:c7:1d:16:75:b3:a3:1d:1c:05:
         c5:a9:97:68:c9:6d:46:3c:4e:81:a6:97:08:c5:b5:86:a6:44:
         7b:04:36:8a:7c:5e:19:0c:f5:41:e2:87:b2:2a:3c:4e:81:3a:
         d5:43:c2:c0:3f:37:fd:c8:09:1e:89:85:87:92:24:c3:0d:4a:
         70:09:be:e6:b4:a8:38:79:71:f9:98:0b:f3:5c:ec:f2:b7:ae:
         c6:5b:c8:53:a8:e1:f8:36:98:07:ed:aa:89:2d:fb:01:95:2e:
         74:08:84:03:00:41:0e:00:bf:bb:98:25:b2:70:9d:76:50:e1:
         f4:e5:0d:9b:54:a3:92:c0:35:98:db:2d:ea:63:ff:a9:2f:c5:
         f0:19:f6:84:0e:cc:39:20:4e:98:0b:21:45:e8:af:24:01:cf:
         bd:bb:cb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 22:44:56 2024 by rpki-client on console-ams.rpki-client.org