Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231342e302f32342d3234203d3e20323633303236.roa
File:                     3138362e3234392e3231342e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          0/unGolVXeQXkjv4mL1dULJnpjf1kjx9qfzQfdHYrhQ=
Subject key identifier:   1C:09:04:13:3B:8C:3A:CA:73:24:9C:F6:EA:0A:F4:09:4E:90:15:E8
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       43E41DC0264D5D339236D2AC53A05EDFEBBF5AEB
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231342e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:37 +0000
ROA not before:           Thu 04 Apr 2024 15:05:37 +0000
ROA not after:            Thu 03 Apr 2025 15:10:37 +0000
asID:                     263026
IP address blocks:        186.249.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e4:1d:c0:26:4d:5d:33:92:36:d2:ac:53:a0:5e:df:eb:bf:5a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:37 2024 GMT
            Not After : Apr  3 15:10:37 2025 GMT
        Subject: CN=1C0904133B8C3ACA73249CF6EA0AF4094E9015E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:ed:43:c3:24:47:92:25:18:84:7f:b2:0f:
                    07:37:00:83:67:a6:d3:38:1b:6f:1e:04:48:8f:83:
                    94:aa:d3:50:1a:97:36:ff:a0:f7:2e:42:70:25:97:
                    d1:71:05:ae:01:87:64:6b:8f:1a:e1:03:f7:db:44:
                    b9:05:8c:f4:01:aa:10:12:b9:fa:3c:56:ec:7e:c7:
                    7a:e7:06:7a:c4:db:c2:dc:04:25:a5:b0:60:2e:39:
                    cc:2b:a6:1d:04:c5:8a:97:dd:53:6f:56:b9:a0:13:
                    a0:be:f7:c1:03:60:ee:c2:51:f9:ea:dd:8c:bb:f2:
                    2d:fb:55:6f:38:22:97:4b:5e:ca:5c:bc:a1:72:8d:
                    49:41:42:bd:7c:df:f4:c8:6e:02:09:75:a5:d5:5c:
                    52:e3:72:3b:ab:41:9a:89:a4:26:76:9b:b8:9b:fe:
                    ae:bd:74:e8:81:b9:ca:43:4b:21:0c:b1:dd:a3:f2:
                    b3:78:1e:92:67:a4:3b:33:ab:e9:49:e5:ad:b5:12:
                    e1:5f:f9:68:4e:68:ec:e2:9f:f9:82:67:db:aa:0f:
                    ed:cb:67:74:7b:53:ac:d3:ad:f6:d3:80:07:3b:fe:
                    05:5e:ed:79:98:ed:03:d0:79:d8:05:41:93:83:72:
                    1e:ee:11:af:4e:f0:6c:2a:98:e8:23:d7:26:c6:97:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:09:04:13:3B:8C:3A:CA:73:24:9C:F6:EA:0A:F4:09:4E:90:15:E8
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231342e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:df:2a:22:29:22:4a:90:0c:e4:9d:10:8c:6f:8a:b2:0d:aa:
         b3:00:53:d3:4f:19:78:65:68:c1:4a:d7:ea:2b:37:bb:26:ca:
         df:bf:79:e1:d6:ce:4b:6e:80:a3:92:8d:0e:b2:47:3f:67:4d:
         80:0d:46:66:2e:0e:eb:d3:e5:68:5c:2a:55:88:49:93:1d:25:
         85:b2:4d:1f:f0:57:85:80:4d:c6:f0:03:fe:91:19:1c:bd:9b:
         c2:ae:80:28:c6:4b:a2:2d:7e:71:ef:97:bd:9e:2c:38:21:2e:
         3e:27:34:0d:70:10:fb:ca:22:2b:cb:cc:a6:af:fe:5e:f4:7b:
         12:cd:04:30:c7:71:e7:9c:c8:2f:f2:60:0d:07:ac:39:db:91:
         9d:7d:57:24:03:27:aa:22:8d:08:94:4c:af:58:84:bd:79:42:
         ea:f0:0f:f2:8c:68:cb:69:9c:d4:31:8c:7f:48:47:67:7c:02:
         cd:f2:b5:61:7b:74:4b:31:3c:34:66:23:a6:ba:cb:67:39:f5:
         a9:6f:7c:b2:21:48:8c:8a:2a:af:4c:f8:41:44:e0:b9:8c:ac:
         39:85:91:93:81:2e:5d:04:b4:64:32:fd:c4:dc:1c:44:02:78:
         62:15:f2:4a:3f:1f:da:52:0c:e4:8b:13:b4:47:92:92:ad:88:
         7f:c4:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org