Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133382e3138362e3130382e302f32322d3232203d3e20323632333534.roa
File:                     3133382e3138362e3130382e302f32322d3232203d3e20323632333534.roa (raw, json)
Hash identifier:          bVe0OGe3IcuQEic/jkM8UNDOue5Dhwu1PeOAV9iMj8Y=
Subject key identifier:   50:2E:BB:D0:68:93:BA:FD:EA:E7:15:4E:C4:29:C5:58:B8:25:1B:6C
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       320DEC6A48CD30D06A0EB1F9F221A5883615F64C
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133382e3138362e3130382e302f32322d3232203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:31 +0000
ROA not before:           Wed 06 Mar 2024 14:09:31 +0000
ROA not after:            Wed 05 Mar 2025 14:14:31 +0000
asID:                     262354
IP address blocks:        138.186.108.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 02 Apr 2024 23:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0d:ec:6a:48:cd:30:d0:6a:0e:b1:f9:f2:21:a5:88:36:15:f6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:31 2024 GMT
            Not After : Mar  5 14:14:31 2025 GMT
        Subject: CN=502EBBD06893BAFDEAE7154EC429C558B8251B6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:07:87:07:3c:ce:ba:26:89:3d:f3:46:06:
                    1c:20:e6:34:df:f5:bc:3f:9f:81:a9:b4:55:16:87:
                    1e:2f:89:bd:95:b6:64:b0:6f:38:65:1a:6a:9b:d8:
                    51:d0:96:dc:9e:56:e6:bf:d4:05:24:55:ca:4c:c2:
                    db:5c:25:58:43:6a:98:09:4e:c2:53:1f:e9:eb:05:
                    70:69:0e:11:fb:73:02:99:f1:2f:9d:49:bc:3b:a6:
                    af:c0:a2:93:08:69:a0:f7:23:47:9c:c1:0e:7e:c9:
                    35:a3:b9:61:41:a2:d6:48:29:0a:f9:75:68:c3:ec:
                    8c:41:1a:a7:12:7f:9e:fc:4f:30:78:bc:36:38:88:
                    21:22:a0:40:44:3d:ba:2e:31:27:84:d8:84:b6:01:
                    d3:d1:50:b7:fe:3d:2f:9a:b6:2a:4d:06:73:a8:b4:
                    a1:8c:41:1a:f7:09:10:9b:a1:da:28:bb:b4:61:2b:
                    ff:31:0f:cd:b6:95:6f:bc:ee:3b:3f:e6:c2:39:85:
                    6e:93:6e:09:c3:e4:70:eb:cf:c9:a9:5b:0b:d1:0c:
                    a6:c6:39:cf:d8:c9:9b:d9:2e:0e:c9:6b:d1:ad:ce:
                    b0:1f:79:4e:11:34:d4:77:87:a3:c9:dc:46:f5:06:
                    84:33:73:cb:53:6b:a8:30:8d:25:d5:5d:f6:da:b8:
                    8e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2E:BB:D0:68:93:BA:FD:EA:E7:15:4E:C4:29:C5:58:B8:25:1B:6C
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133382e3138362e3130382e302f32322d3232203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:1e:3b:e4:91:18:9f:30:6e:ec:28:0f:36:6b:98:3e:13:d1:
         df:a1:06:e0:2a:93:52:f7:34:5a:f1:c3:84:4e:2f:65:1a:b8:
         f1:1d:a7:0e:62:5e:8d:e4:90:82:50:50:e2:2a:92:57:91:ac:
         06:f5:9f:a2:3c:24:d1:09:5f:79:fa:55:02:b3:aa:c0:60:40:
         1a:32:5f:80:18:07:68:fe:28:c1:e6:71:db:68:ef:dd:79:aa:
         90:7e:50:44:13:df:98:ca:35:11:4f:63:be:7c:ac:7a:cd:f5:
         18:1d:16:de:c8:75:c6:a5:ed:e8:e3:a7:7b:9f:e1:4b:01:a5:
         a3:4c:58:89:88:71:74:42:7c:a2:87:12:7b:05:26:47:f1:33:
         8c:75:17:74:6d:b5:00:bb:aa:de:03:62:58:eb:7e:6e:3a:b1:
         06:ba:6d:6e:40:78:d8:d6:d3:47:00:dd:6f:ea:ce:fb:2b:98:
         5d:28:fd:96:04:fe:41:47:a7:d6:37:84:3a:be:3b:be:4a:83:
         0f:0f:05:49:8f:ce:88:fd:15:44:ef:1b:74:80:4f:80:3a:34:
         49:cd:3a:d1:a1:c3:77:29:38:ca:21:0b:08:c0:13:9b:d6:3b:
         e7:e5:16:26:41:13:d6:42:d5:22:92:0a:0a:80:8d:5e:c7:9c:
         82:c4:2a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 02:19:29 2024 by rpki-client on console-fra.rpki-client.org