Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231322e302f32332d3233203d3e20323633303236.roa
File:                     3138362e3234392e3231322e302f32332d3233203d3e20323633303236.roa (raw, json)
Hash identifier:          NH26z78lWgVY6Su0mdAGM7v3+KMXoEUkBxwt8FlLK5g=
Subject key identifier:   2A:9D:3D:35:68:9F:8F:87:26:AC:97:0D:83:D6:BF:40:B8:DD:C7:F4
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       4A1673E23B3B12A4946061EC9B1B09EDC19131CD
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231322e302f32332d3233203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:37 +0000
ROA not before:           Thu 04 Apr 2024 15:05:37 +0000
ROA not after:            Thu 03 Apr 2025 15:10:37 +0000
asID:                     263026
IP address blocks:        186.249.212.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:16:73:e2:3b:3b:12:a4:94:60:61:ec:9b:1b:09:ed:c1:91:31:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:37 2024 GMT
            Not After : Apr  3 15:10:37 2025 GMT
        Subject: CN=2A9D3D35689F8F8726AC970D83D6BF40B8DDC7F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:66:86:5c:7c:8a:67:b8:9d:7d:2b:35:87:
                    18:11:99:87:2f:c6:10:04:e0:44:99:b0:c1:64:e1:
                    ed:60:ec:d5:5a:22:12:09:ff:3e:66:c1:57:ef:37:
                    ed:ac:66:ae:e0:50:2c:a8:ea:1f:85:48:e6:ad:b6:
                    15:8d:1b:a4:98:f4:7f:10:ae:65:f5:a1:db:f6:e0:
                    50:01:ee:c5:95:88:ad:0f:b7:8c:7f:09:38:ce:e8:
                    84:e4:b1:d4:fb:4e:f0:8c:25:56:44:e4:c9:2b:c5:
                    b2:5b:33:ea:5e:cd:e7:de:66:25:d2:6f:65:93:51:
                    58:0e:3a:34:04:de:f8:9f:2c:9b:7d:2b:45:92:13:
                    78:63:fc:90:4a:af:ad:30:e6:82:70:b1:7e:05:1b:
                    82:74:f9:cb:3b:74:95:12:4a:de:98:9b:bd:da:8c:
                    bf:e6:50:78:6c:75:bd:f0:ea:8c:26:41:c1:0c:bc:
                    af:0c:27:19:49:d4:fe:05:a2:2d:bb:ab:9f:c9:ca:
                    b7:c3:23:f3:4b:61:c4:85:a8:a4:65:78:43:22:78:
                    9e:f3:69:dd:13:ae:97:97:fb:0e:31:fb:11:a1:88:
                    11:e3:8c:aa:f1:be:40:95:b2:4f:0b:b9:96:e0:ad:
                    c4:de:d8:b4:36:22:d3:ae:05:41:f3:2f:b6:b3:bd:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9D:3D:35:68:9F:8F:87:26:AC:97:0D:83:D6:BF:40:B8:DD:C7:F4
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231322e302f32332d3233203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:e9:01:5a:45:cd:3e:40:86:64:69:66:0b:99:01:35:d3:2e:
         bb:fc:57:f1:a5:3c:0a:e5:a0:49:49:37:59:ae:2f:a5:b4:52:
         ac:85:89:86:0d:58:1d:3f:54:d9:c0:06:21:c6:c7:02:83:62:
         0f:0f:c7:b4:b2:a9:fb:53:88:de:ca:95:59:ec:24:d2:97:eb:
         41:e0:e1:f3:79:53:ba:7a:83:7a:c9:4f:8d:22:5f:18:4f:22:
         1e:0c:aa:84:db:73:fb:3b:3f:98:ce:0b:ed:9f:25:85:7a:9e:
         2c:c7:12:29:57:5b:2f:4d:ca:9b:a3:cb:53:3c:99:57:17:a1:
         0d:93:0a:f5:af:b5:4c:0e:19:d6:2c:ef:0f:95:2c:fc:55:7e:
         3d:7d:02:0b:7a:c5:55:62:9a:fb:4c:aa:5f:34:7a:17:49:29:
         ef:25:99:ba:62:3f:08:0d:ac:cd:a6:ef:51:ce:3c:21:1f:03:
         e2:61:31:f7:a5:3d:aa:49:b7:ed:ee:90:b4:f6:7b:aa:aa:de:
         9f:47:41:81:98:6b:49:3e:82:a4:ef:17:be:3b:66:ed:34:5c:
         a1:c7:d3:0f:20:cd:99:9a:43:b5:65:d2:35:8a:e3:66:38:95:
         5b:37:46:9a:8c:97:c1:67:71:45:5e:e3:80:70:d3:93:a4:44:
         93:9a:58:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org