Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3230382e302f32312d3231203d3e20323633303236.roa
File:                     3138362e3234392e3230382e302f32312d3231203d3e20323633303236.roa (raw, json)
Hash identifier:          j1dyJ+LCaw0H5CcyEA/ehfpp1OEi8Bev5iV9/DNkDqA=
Subject key identifier:   9E:67:44:B8:47:51:9B:4A:08:26:28:DE:02:E9:3E:97:B0:5A:38:D0
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       055B687CDD64A0B9E77311893E4DD4BCC1D72B93
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3230382e302f32312d3231203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:36 +0000
ROA not before:           Thu 04 Apr 2024 15:05:36 +0000
ROA not after:            Thu 03 Apr 2025 15:10:36 +0000
asID:                     263026
IP address blocks:        186.249.208.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5b:68:7c:dd:64:a0:b9:e7:73:11:89:3e:4d:d4:bc:c1:d7:2b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:36 2024 GMT
            Not After : Apr  3 15:10:36 2025 GMT
        Subject: CN=9E6744B847519B4A082628DE02E93E97B05A38D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e9:38:68:88:dd:71:90:5c:8d:80:57:94:b0:
                    e4:5b:01:e0:a7:d6:53:46:e6:17:11:83:9e:46:e7:
                    95:5c:41:59:15:63:7a:d5:8b:fc:9a:78:3c:54:63:
                    8f:8c:13:7c:9c:4c:46:8e:c0:da:96:e1:ee:1a:83:
                    00:f8:24:e2:72:2e:cf:04:a9:e9:be:9f:03:25:0a:
                    cc:3f:d7:ee:03:c9:87:6e:47:4d:0c:cf:76:6c:e0:
                    8f:91:0c:69:81:41:ca:f6:08:10:f1:fb:8d:83:be:
                    8a:f4:bb:85:07:45:21:27:55:a7:8d:8e:83:c3:1e:
                    ef:d1:a5:37:0f:4b:4f:e4:58:24:31:22:b8:e9:28:
                    a0:c5:0a:fe:07:79:c3:57:e3:fd:ec:a9:77:ef:bb:
                    a0:a0:15:df:4c:e6:37:28:ca:f7:a1:fa:9e:b2:21:
                    dc:87:69:ba:c4:6f:84:b2:17:76:88:a0:25:f9:f9:
                    a4:b5:55:90:50:71:6b:8a:f0:55:7b:a6:87:7c:11:
                    d2:ee:bd:2e:8e:42:ec:21:1b:d3:f5:a3:5d:bb:dd:
                    c0:86:47:59:17:6a:9b:6a:4d:45:d3:3f:17:82:ef:
                    9e:25:ab:dd:ea:14:a8:42:75:4c:1c:97:06:6d:9a:
                    ea:61:4d:b5:b6:bb:95:dd:f3:24:15:07:fb:a9:0e:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:67:44:B8:47:51:9B:4A:08:26:28:DE:02:E9:3E:97:B0:5A:38:D0
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3230382e302f32312d3231203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:1c:6f:ab:42:b1:d7:ff:25:37:c0:f8:44:7e:b2:73:5f:a7:
         40:7e:09:1f:e8:9c:b8:ee:9a:3a:54:2b:b8:a9:6d:08:90:66:
         61:24:a5:93:95:99:a3:57:64:3f:9b:f1:59:ab:a8:66:73:b1:
         c5:5e:fc:e0:09:56:a2:68:a5:80:a2:f9:79:7a:35:ba:7f:b9:
         c3:00:15:d9:5e:c1:7d:de:2d:92:39:c9:a0:6c:ac:0c:1b:14:
         30:e9:a7:dd:4a:60:d7:5b:60:27:b5:4e:0b:7c:1b:9b:0c:8b:
         d0:9d:5a:42:88:73:1d:4a:f3:2d:34:7f:9b:50:1d:9a:af:7b:
         c0:75:3e:a7:8a:7b:83:c9:ec:86:82:c8:16:89:21:01:85:e4:
         db:88:a0:c7:2d:83:88:78:b0:d0:fd:6b:e2:b2:2d:48:54:8f:
         5b:5b:44:a6:96:0e:60:8a:7f:e1:d5:f2:b4:53:cc:9a:ce:12:
         6b:08:ec:8a:5b:a9:e5:cb:f5:82:c8:cb:b9:86:c4:63:8e:73:
         79:2c:ff:b3:5a:3e:e1:59:b6:f3:87:1b:34:57:1c:a3:0a:07:
         f6:cb:02:fc:82:d9:f0:ca:b8:66:7f:6f:03:d9:be:0e:05:4b:
         61:92:1f:dc:c0:4a:99:92:d6:4a:1e:53:16:e5:b2:60:ab:09:
         98:25:89:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org