Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231332e302f32342d3234203d3e20323633303236.roa
File:                     3138362e3234392e3231332e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          pKtpM/z/EscFsNm1Rza3EJYoUTA89hYEGGEL79SKF2k=
Subject key identifier:   3C:E8:CD:C0:18:39:80:8B:E9:C8:77:45:04:60:4F:7A:CC:5B:80:67
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       0697EB55472BDDBDEE75775BB6ED091ECD630568
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231332e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:31 +0000
ROA not before:           Thu 04 Apr 2024 15:05:31 +0000
ROA not after:            Thu 03 Apr 2025 15:10:31 +0000
asID:                     263026
IP address blocks:        186.249.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:97:eb:55:47:2b:dd:bd:ee:75:77:5b:b6:ed:09:1e:cd:63:05:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:31 2024 GMT
            Not After : Apr  3 15:10:31 2025 GMT
        Subject: CN=3CE8CDC01839808BE9C8774504604F7ACC5B8067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:59:8b:d7:7a:9c:cb:8a:74:a0:28:32:3d:
                    ed:05:76:f4:18:e7:ce:aa:4a:d3:0d:b5:1c:a8:c8:
                    3b:2f:03:38:cb:c8:4c:e4:7b:22:57:95:0f:cd:d4:
                    83:3f:79:b0:6b:29:56:d4:c7:73:04:40:d7:fb:e1:
                    4f:5b:34:b1:d7:36:cc:94:5d:78:1d:61:1e:4e:20:
                    09:81:65:a6:6c:cf:f5:de:b2:d1:01:b2:ea:aa:57:
                    19:dd:92:21:4b:28:4e:19:b2:21:de:98:d6:38:dc:
                    df:4a:b5:f2:9a:87:ba:71:89:0a:6c:9c:8e:eb:38:
                    1d:39:b7:8c:e1:b7:b0:0d:e2:c8:73:82:59:e1:6b:
                    1f:74:8d:80:bd:82:03:36:33:4c:26:f8:ff:54:73:
                    f3:6d:05:7f:8d:1d:35:56:9a:d2:b6:27:4c:c9:fa:
                    c7:36:d7:c2:de:2a:7c:40:2b:65:5b:64:7b:c3:4d:
                    68:64:0a:e0:56:18:a1:8a:a8:dd:6a:26:54:dd:1d:
                    3b:56:bf:e2:1b:0e:5e:a0:18:c5:e5:9a:e2:f0:16:
                    90:81:39:12:05:24:7a:a6:81:2b:c2:cf:25:4e:a4:
                    af:ec:b9:ce:08:be:fe:0f:b0:50:a1:10:12:4c:03:
                    91:50:10:57:28:2c:0c:15:f0:b9:b2:3d:b5:23:5f:
                    55:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E8:CD:C0:18:39:80:8B:E9:C8:77:45:04:60:4F:7A:CC:5B:80:67
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231332e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:27:ec:2a:de:f5:f5:30:df:ec:16:15:77:e2:86:06:e1:08:
         4b:e4:f3:fe:14:92:89:6f:c7:7b:0f:cb:26:f1:03:da:f6:d0:
         d9:f0:88:3a:4f:ec:be:70:e3:d9:15:86:b8:71:e5:78:20:9d:
         73:fa:bc:a7:84:1c:fe:74:70:68:07:bd:92:b3:8b:20:21:7a:
         f4:ed:99:fd:5d:c8:be:30:c5:09:49:6e:b9:08:74:b1:6d:58:
         75:c9:1a:34:b3:db:8f:fd:a8:77:b6:72:87:57:4c:79:b5:52:
         8e:40:a5:cb:a8:e6:bf:ce:c8:99:25:54:60:8d:43:e3:43:4c:
         b0:ae:37:54:a2:25:a8:fa:cb:ce:0d:3f:dd:73:54:1d:e7:b8:
         82:65:b1:db:63:b4:a6:0f:ce:1a:c8:27:87:35:a8:f4:f7:2e:
         28:8f:ae:db:9b:6e:2d:2b:be:7b:c7:db:d2:ff:54:c8:3a:45:
         e4:0a:cf:61:0a:cd:aa:04:36:94:63:dc:81:b3:84:30:97:c4:
         ec:a1:9b:de:39:eb:3d:aa:af:a4:1d:ff:c4:bc:a9:18:75:f5:
         6b:38:42:ef:f1:6a:72:3b:7c:6b:06:00:ca:a5:4c:23:e1:98:
         94:d3:98:71:64:cc:5c:32:11:0d:18:fa:6d:3e:ba:0c:62:b3:
         d2:da:90:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org