Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3230382e302f32322d3232203d3e20323633303236.roa
File:                     3138362e3234392e3230382e302f32322d3232203d3e20323633303236.roa (raw, json)
Hash identifier:          tE/2uG637DSMI/iOgqGPp2iQTXjaBNISqK3B/XSS/0Q=
Subject key identifier:   BE:8E:24:03:5F:F7:A9:71:DE:E4:46:BC:99:1D:B8:38:0C:3D:E8:98
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       68588EF388E40E771A756E9DE4DEC7B97C20273F
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3230382e302f32322d3232203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:35 +0000
ROA not before:           Thu 04 Apr 2024 15:05:35 +0000
ROA not after:            Thu 03 Apr 2025 15:10:35 +0000
asID:                     263026
IP address blocks:        186.249.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:58:8e:f3:88:e4:0e:77:1a:75:6e:9d:e4:de:c7:b9:7c:20:27:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:35 2024 GMT
            Not After : Apr  3 15:10:35 2025 GMT
        Subject: CN=BE8E24035FF7A971DEE446BC991DB8380C3DE898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:4c:63:ef:9b:5c:ff:e9:dd:36:c5:53:de:
                    ac:65:0c:f2:45:04:54:df:28:c6:e4:bb:6a:e8:b6:
                    6c:f5:9d:ed:7b:0e:ff:e9:71:d3:ed:bf:57:98:e2:
                    4b:f4:2a:4b:84:ab:1b:d5:ad:cf:2a:01:01:50:1b:
                    81:98:ae:d4:57:61:82:80:82:51:85:a8:2c:1f:d5:
                    88:f5:10:d8:72:4d:f7:54:33:b2:8f:d2:7e:9c:83:
                    ac:ec:ca:9b:9b:95:f5:56:35:bf:2d:35:01:4e:e5:
                    67:2e:c7:22:c7:43:37:18:2e:df:76:d8:74:ad:9c:
                    46:99:32:e2:0f:1c:a6:56:9c:d2:6b:31:8b:db:20:
                    57:7a:00:db:ca:97:f8:9b:06:b7:7f:e2:9b:0a:0b:
                    f7:19:bc:cd:47:6f:68:dc:9c:a5:4e:f8:bc:e0:fa:
                    53:b1:a1:ec:5e:7b:5e:82:7e:0d:f9:6e:a4:a2:e6:
                    b6:99:63:04:3e:71:e9:2c:8b:0a:fe:b7:52:fb:a8:
                    d8:b5:21:e9:cd:bf:59:07:2f:b8:18:c1:2f:f4:00:
                    33:cb:11:f5:95:fa:50:ee:41:e3:ba:1c:a7:a4:bd:
                    2d:a4:c1:5b:ca:91:bc:62:89:5f:ab:f8:78:79:15:
                    5b:0d:8d:38:11:27:b7:95:d4:08:bb:85:d8:4c:c6:
                    b7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8E:24:03:5F:F7:A9:71:DE:E4:46:BC:99:1D:B8:38:0C:3D:E8:98
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3230382e302f32322d3232203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:d7:c9:e1:ab:05:69:bc:f6:4e:3f:73:84:10:54:b0:1c:41:
         51:aa:3f:42:71:d2:e1:52:97:fa:93:bc:2a:e0:94:e0:9b:96:
         d7:7b:2f:58:db:12:74:a2:dd:6c:fd:dd:54:cd:4e:5b:d5:db:
         4e:de:ea:3d:7c:8b:93:92:a6:99:6d:21:11:51:ba:99:f9:43:
         7a:fa:29:71:62:48:ff:64:99:b5:00:61:37:75:ef:b2:f3:94:
         2c:61:89:11:16:10:91:8d:c5:d3:72:26:c3:4d:e5:7e:09:4c:
         98:20:bf:2b:3b:27:f4:6c:ba:8f:14:83:21:c3:eb:ff:05:23:
         48:fc:94:33:f6:d5:cf:79:3e:ba:29:72:c8:6a:63:92:c9:5a:
         14:24:2f:95:80:83:40:1f:44:d0:ba:de:86:fc:55:92:f9:24:
         e2:01:51:24:90:6d:bf:40:97:d4:4e:fb:0a:5e:d3:1b:95:ba:
         fc:e7:85:3a:e2:8f:f1:68:4d:8b:db:97:59:a3:eb:da:bf:44:
         92:fa:72:7c:d0:8c:33:6f:46:4c:f4:4c:b2:9f:36:d1:05:09:
         a6:04:65:13:2a:7d:ec:0d:bf:57:de:5a:11:1b:8d:a9:6c:94:
         bc:5f:73:d9:43:b4:9b:23:b3:d0:0a:7e:16:e8:2e:fb:b2:cc:
         db:3d:fe:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org