Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231312e302f32342d3234203d3e20323633303236.roa
File:                     3138362e3234392e3231312e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          QYNs8cDUft8yL4gw1nPkNhwERSoYG60aoEPtanW9wl4=
Subject key identifier:   CF:26:F4:D5:7D:E3:43:75:B0:71:45:A5:CD:BC:7A:D3:E4:20:40:F6
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       118F45E8C2032BCD4C1DE44C30455CED59A9D5B5
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231312e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:34 +0000
ROA not before:           Thu 04 Apr 2024 15:05:34 +0000
ROA not after:            Thu 03 Apr 2025 15:10:34 +0000
asID:                     263026
IP address blocks:        186.249.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8f:45:e8:c2:03:2b:cd:4c:1d:e4:4c:30:45:5c:ed:59:a9:d5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:34 2024 GMT
            Not After : Apr  3 15:10:34 2025 GMT
        Subject: CN=CF26F4D57DE34375B07145A5CDBC7AD3E42040F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:87:ac:1c:29:d6:f8:e3:81:ea:2a:aa:0e:
                    04:23:0a:a2:97:de:76:ef:7b:bc:91:69:58:09:10:
                    41:27:07:6e:c7:38:e9:0a:7b:ed:b7:aa:8c:ef:85:
                    5e:6f:51:d0:dc:73:36:c5:3d:1f:d2:86:fe:3b:f3:
                    7d:42:cb:c4:25:d4:06:e5:d3:63:38:5c:76:94:47:
                    37:fc:82:2b:f2:51:9e:6b:37:07:36:be:b4:d1:16:
                    cf:1c:7a:8c:0d:15:7b:3d:a0:cd:ec:3a:74:57:f4:
                    15:ce:c0:30:0c:41:fd:b4:5f:99:f5:0f:04:c4:84:
                    b9:f9:aa:c8:1e:b4:77:87:c6:eb:24:53:d8:42:bd:
                    7d:0e:f0:e5:3f:b2:1c:a2:f9:e9:7a:ba:0b:b4:b7:
                    cf:b1:cc:c3:26:b2:fd:ea:4e:6e:42:2f:a9:60:88:
                    67:d5:35:e8:4e:2b:a4:6a:21:ee:d6:5f:63:a0:9e:
                    d1:42:bd:14:e7:b0:68:40:91:84:72:16:b2:9f:21:
                    18:d4:37:53:f6:40:25:cc:c8:07:78:67:67:2f:0b:
                    b1:a7:a7:0c:5d:59:0b:ce:d9:01:26:af:99:c4:55:
                    4f:07:67:e0:e3:46:39:43:ef:c1:7f:57:13:5c:78:
                    d9:32:f2:ee:d0:61:dc:2f:b2:8d:ea:a3:15:21:2f:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:26:F4:D5:7D:E3:43:75:B0:71:45:A5:CD:BC:7A:D3:E4:20:40:F6
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231312e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:50:e3:23:d7:04:63:03:36:74:6f:08:2d:0a:06:99:b3:e4:
         e2:1d:17:43:ec:4c:bb:22:7b:64:76:7a:e8:2c:46:d7:aa:cb:
         c5:49:c6:38:aa:28:da:c7:02:03:0c:d1:60:91:7e:89:d6:10:
         e7:c8:29:1c:64:0d:8f:0f:62:3a:83:60:56:38:fc:fe:05:8f:
         33:c5:6e:9e:8a:7e:c5:e7:5a:12:4d:18:16:e8:df:c9:be:4c:
         e4:d4:ba:52:b1:dc:6a:a1:ab:2f:da:ec:3b:9c:21:61:a2:bc:
         b2:66:63:02:9e:d0:7f:17:84:d0:d0:5f:bd:13:d0:c4:3f:94:
         f4:8a:93:51:d7:35:a6:19:1a:d9:a8:29:ef:f2:29:5d:34:37:
         88:d8:a1:b4:ed:76:f5:42:c5:6b:8e:8b:4d:21:e2:04:35:df:
         bf:c9:71:76:58:54:69:cf:da:34:9c:a3:dc:ae:2a:a8:b4:fb:
         0a:6c:1d:85:b4:81:5e:38:06:12:74:e7:c5:5d:3b:02:b1:9e:
         f7:62:1c:b5:11:16:22:d0:66:ce:20:e9:4c:b0:c6:6f:61:6d:
         71:cf:d7:bc:1c:42:61:a6:ba:d7:03:82:0d:8d:77:be:32:de:
         22:57:40:1d:44:15:e3:d1:ca:4f:2d:70:13:48:fd:01:13:3e:
         61:54:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org