Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231352e302f32342d3234203d3e20323633303236.roa
File:                     3138362e3234392e3231352e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          VFV8rRncbHwE04U9vONIOxf+zIeivfGQhdrTR0TM0L0=
Subject key identifier:   2F:45:DA:58:77:CB:CF:9F:95:4A:33:F4:5C:21:20:1A:E8:AD:A6:0C
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       3C988D7BB30B282C0D5806AC896095263C979EF9
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231352e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:33 +0000
ROA not before:           Thu 04 Apr 2024 15:05:33 +0000
ROA not after:            Thu 03 Apr 2025 15:10:33 +0000
asID:                     263026
IP address blocks:        186.249.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:98:8d:7b:b3:0b:28:2c:0d:58:06:ac:89:60:95:26:3c:97:9e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:33 2024 GMT
            Not After : Apr  3 15:10:33 2025 GMT
        Subject: CN=2F45DA5877CBCF9F954A33F45C21201AE8ADA60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:18:89:81:93:26:83:f1:d6:a1:f9:a9:07:20:
                    29:b0:5b:57:8c:a6:6c:e0:b1:54:6e:e1:87:66:9c:
                    f8:51:a9:3a:fc:d4:67:e7:d1:82:77:c6:3c:bc:51:
                    49:a7:65:55:4e:ba:5a:7b:8e:47:48:88:27:16:33:
                    e3:59:8e:a8:fa:be:d1:fa:24:2c:64:c7:1b:72:ea:
                    1d:d3:d8:f2:9b:4c:ce:76:31:18:ad:02:26:af:48:
                    af:b5:5d:1e:ce:12:74:3e:9b:eb:52:9d:d5:4a:d0:
                    93:29:be:e0:e4:4f:0d:7e:c0:7f:43:21:19:66:79:
                    78:e0:06:17:6d:ec:6e:89:28:bc:a5:58:f0:ff:43:
                    bd:22:8b:97:d3:fa:79:1f:b6:1e:4a:dd:f3:c9:57:
                    c0:9f:cf:3b:a0:51:bb:e5:8d:49:aa:e7:50:b9:a7:
                    b0:59:ed:74:ea:35:f2:7a:c7:0d:01:a3:90:6e:85:
                    71:a3:1d:2c:cf:5d:d8:bd:90:3e:b2:70:ff:2e:bb:
                    1b:58:bd:42:92:f5:b4:a9:d3:6d:f0:96:ac:de:70:
                    1d:22:27:fe:04:ff:01:5a:ab:6d:ff:0d:22:48:e7:
                    f4:97:d9:55:f9:c5:85:73:da:1e:77:27:bb:f7:af:
                    15:50:90:18:df:f7:96:7e:0d:fe:4e:46:47:74:4b:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:45:DA:58:77:CB:CF:9F:95:4A:33:F4:5C:21:20:1A:E8:AD:A6:0C
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3138362e3234392e3231352e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f7:65:a4:87:83:03:37:25:46:6c:45:74:31:5e:c7:c5:34:
         1e:e6:7f:d6:9b:be:1b:6d:55:9a:b8:3f:08:44:fe:81:62:64:
         ff:0f:5f:ac:50:03:24:e4:a0:27:5c:90:9f:30:46:a4:87:13:
         20:88:66:88:6c:05:84:1a:a9:be:2c:bd:73:35:3d:f7:88:c5:
         53:17:a1:c7:99:ce:e2:81:7d:50:68:0b:1b:77:62:b6:6e:cd:
         28:e8:ea:47:d6:06:93:9f:3e:5c:43:f0:ed:a2:51:07:13:65:
         42:bd:e5:62:a7:aa:01:92:6b:9b:09:de:cf:04:5a:97:21:6e:
         dc:de:35:12:ed:a4:3a:12:45:5c:cc:f2:f4:32:c9:8b:ba:2e:
         ba:dd:90:a5:28:7c:ec:51:ae:6c:f2:39:2d:02:a5:09:1c:3e:
         95:83:dc:35:8b:e1:7e:73:9c:d8:f2:ca:31:50:20:17:0e:23:
         ed:c9:07:bc:0b:05:3d:af:c8:40:c1:e6:45:1b:70:f3:4b:94:
         6a:e0:88:1c:69:6a:26:1e:61:bc:49:69:90:58:65:34:54:6b:
         f8:c7:e5:6b:2a:e6:8c:1a:2f:ed:00:76:35:ed:7b:30:90:bf:
         d3:d2:e9:b9:a4:91:d5:99:cb:3c:39:54:ef:23:19:b2:be:e5:
         7d:17:bf:4f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPJiNe7MLKCwNWAasiWCVJjyXnvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxQUMwQkRBQUJDQ0UyMUIyN0I2Q0UwNTFFODRCM0I0
MERCQTM0ODAeFw0yNDA0MDQxNTA1MzNaFw0yNTA0MDMxNTEwMzNaMDMxMTAvBgNV
BAMTKDJGNDVEQTU4NzdDQkNGOUY5NTRBMzNGNDVDMjEyMDFBRThBREE2MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqGImBkyaD8dah+akHICmwW1eM
pmzgsVRu4YdmnPhRqTr81Gfn0YJ3xjy8UUmnZVVOulp7jkdIiCcWM+NZjqj6vtH6
JCxkxxty6h3T2PKbTM52MRitAiavSK+1XR7OEnQ+m+tSndVK0JMpvuDkTw1+wH9D
IRlmeXjgBhdt7G6JKLylWPD/Q70ii5fT+nkfth5K3fPJV8CfzzugUbvljUmq51C5
p7BZ7XTqNfJ6xw0Bo5BuhXGjHSzPXdi9kD6ycP8uuxtYvUKS9bSp023wlqzecB0i
J/4E/wFaq23/DSJI5/SX2VX5xYVz2h53J7v3rxVQkBjf95Z+Df5ORkd0S+UdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUL0XaWHfLz5+VSjP0XCEgGuitpgwwHwYDVR0j
BBgwFoAUghrAvaq8ziGye2zgUehLO0Dbo0gwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj
LzEvODIxQUMwQkRBQUJDQ0UyMUIyN0I2Q0UwNTFFODRCM0I0MERCQTM0OC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MjFBQzBCREFBQkNDRTIxQjI3
QjZDRTA1MUU4NEIzQjQwREJBMzQ4LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzEvMzEz
ODM2MmUzMjM0MzkyZTMyMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzMwMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALr51zANBgkqhkiG9w0BAQsFAAOCAQEAVfdlpIeD
AzclRmxFdDFex8U0HuZ/1pu+G21Vmrg/CET+gWJk/w9frFADJOSgJ1yQnzBGpIcT
IIhmiGwFhBqpviy9czU994jFUxehx5nO4oF9UGgLG3ditm7NKOjqR9YGk58+XEPw
7aJRBxNlQr3lYqeqAZJrmwnezwRalyFu3N41Eu2kOhJFXMzy9DLJi7ouut2QpSh8
7FGubPI5LQKlCRw+lYPcNYvhfnOc2PLKMVAgFw4j7ckHvAsFPa/IQMHmRRtw80uU
auCIHGlqJh5hvElpkFhlNFRr+MflayrmjBov7QB2Ne17MJC/09LpuaSR1ZnLPDlU
7yMZsr7lfRe/Tw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org