Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3133382e3131372e32342e302f32322d3234203d3e20323633363231.roa
File:                     3133382e3131372e32342e302f32322d3234203d3e20323633363231.roa (raw, json)
Hash identifier:          0CmvrWtIT2ldIPBARk4BC3/1LLHPnnnVHEogoAvQw7g=
Subject key identifier:   95:A0:FC:0C:57:AD:47:90:D0:17:05:C5:3E:79:F8:85:D3:F5:EF:C9
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       642533F27C335E4314C1636FCA2CDD482FE9CA18
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3133382e3131372e32342e302f32322d3234203d3e20323633363231.roa
Signing time:             Thu 04 Apr 2024 05:23:24 +0000
ROA not before:           Thu 04 Apr 2024 05:18:24 +0000
ROA not after:            Thu 03 Apr 2025 05:23:24 +0000
asID:                     263621
IP address blocks:        138.117.24.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 11:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:25:33:f2:7c:33:5e:43:14:c1:63:6f:ca:2c:dd:48:2f:e9:ca:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Apr  4 05:18:24 2024 GMT
            Not After : Apr  3 05:23:24 2025 GMT
        Subject: CN=95A0FC0C57AD4790D01705C53E79F885D3F5EFC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:ba:82:33:b9:74:77:42:f5:f5:61:fa:e8:
                    d5:84:2a:02:e9:d6:09:19:29:67:43:cc:29:27:61:
                    31:60:89:8f:b0:7a:15:02:fa:ab:c9:23:30:c6:31:
                    67:61:33:61:a0:ec:1d:0d:45:dd:ca:2b:bd:e8:b1:
                    03:75:50:a5:aa:24:b0:ba:55:66:66:de:02:6b:b5:
                    db:66:19:ef:65:14:3b:38:9c:9a:51:3c:1c:89:ac:
                    02:70:cf:f1:62:42:87:6a:cc:97:a9:db:ac:a3:a2:
                    b6:c5:09:95:28:8a:8f:41:04:f4:80:dc:3f:05:5c:
                    f3:01:73:24:33:aa:3d:8e:29:2c:05:09:31:b2:bf:
                    31:a0:c9:af:f7:93:f6:c1:95:f7:09:5e:03:37:21:
                    05:7a:1d:24:3d:6d:06:aa:bc:ff:9e:8b:0f:75:71:
                    4d:78:98:db:e3:61:63:e1:7e:7d:98:36:22:fa:58:
                    18:5a:95:0d:6a:00:03:2a:a9:98:9e:07:08:7f:8a:
                    a1:50:93:88:d3:98:f9:5f:ca:78:d2:40:af:75:6c:
                    a0:8b:2b:fe:59:f1:ce:ce:ef:29:3e:b6:57:ef:b2:
                    89:f2:98:a5:6c:d2:0f:27:9c:e2:57:1c:79:ac:1f:
                    67:1a:fd:56:97:8c:7c:90:12:98:62:5d:a0:78:7f:
                    4b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A0:FC:0C:57:AD:47:90:D0:17:05:C5:3E:79:F8:85:D3:F5:EF:C9
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3133382e3131372e32342e302f32322d3234203d3e20323633363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:92:c7:1c:56:c6:b2:c5:75:e8:53:ee:51:d0:4d:15:5e:f2:
         6a:68:af:50:15:90:d8:f4:29:39:f8:53:ed:23:82:57:9c:83:
         aa:f5:cc:77:36:bd:1d:d1:3d:a3:e1:76:63:f4:3b:96:5c:b8:
         1e:65:5e:9e:ca:9f:3f:35:c5:bf:4a:39:50:b5:5d:b8:68:6e:
         3a:c0:26:14:55:2f:f5:55:0a:8d:10:ee:06:75:74:e3:09:8c:
         a4:bd:f2:66:a3:a4:3d:dc:cb:a5:e2:92:d8:de:64:99:25:7d:
         1e:17:6a:9b:c4:d2:dd:8f:db:11:f8:ff:74:4f:25:78:7b:9b:
         35:eb:58:2f:a7:e9:10:42:bb:be:f6:24:e9:85:97:94:fe:0f:
         59:f6:40:66:64:8b:7e:20:c9:a3:99:28:f6:15:26:39:07:6b:
         bc:fa:0f:f0:11:ee:45:29:67:3c:87:5a:3e:86:da:15:fa:6e:
         17:da:0a:71:07:fc:0d:9f:aa:c3:e9:15:ed:85:7b:21:14:19:
         66:f8:03:64:9b:7f:51:61:88:ef:a1:78:44:a0:4c:26:70:11:
         b2:8d:d4:94:aa:15:99:a2:63:bd:c8:b3:ea:e4:79:68:3f:98:
         b2:cb:b6:a1:b9:8b:df:82:44:1d:78:d2:80:cd:d7:b1:33:14:
         d8:3c:50:4c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZCUz8nwzXkMUwWNvyizdSC/pyhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhCRjAzNjdCNTU5MTIxNzc3QTIxQTg0RDk1M0E3MTdE
NkU4MkFFQTAeFw0yNDA0MDQwNTE4MjRaFw0yNTA0MDMwNTIzMjRaMDMxMTAvBgNV
BAMTKDk1QTBGQzBDNTdBRDQ3OTBEMDE3MDVDNTNFNzlGODg1RDNGNUVGQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsErqCM7l0d0L19WH66NWEKgLp
1gkZKWdDzCknYTFgiY+wehUC+qvJIzDGMWdhM2Gg7B0NRd3KK73osQN1UKWqJLC6
VWZm3gJrtdtmGe9lFDs4nJpRPByJrAJwz/FiQodqzJep26yjorbFCZUoio9BBPSA
3D8FXPMBcyQzqj2OKSwFCTGyvzGgya/3k/bBlfcJXgM3IQV6HSQ9bQaqvP+eiw91
cU14mNvjYWPhfn2YNiL6WBhalQ1qAAMqqZieBwh/iqFQk4jTmPlfynjSQK91bKCL
K/5Z8c7O7yk+tlfvsonymKVs0g8nnOJXHHmsH2ca/VaXjHyQEphiXaB4f0vFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlaD8DFetR5DQFwXFPnn4hdP178kwHwYDVR0j
BBgwFoAUuL8DZ7VZEhd3ohqE2VOnF9boKuowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI4S205dEZvOGo5TG42MTVZa2trZzZUOHJCbmJnUGd3c2hiM2doc1Bq
SHEvMS9COEJGMDM2N0I1NTkxMjE3NzdBMjFBODREOTUzQTcxN0Q2RTgyQUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QkYwMzY3QjU1OTEyMTc3
N0EyMUE4NEQ5NTNBNzE3RDZFODJBRUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyOEttOXRGbzhqOUxuNjE1WWtra2c2VDhyQm5iZ1Bnd3NoYjNnaHNQakhxLzEv
MzEzMzM4MmUzMTMxMzcyZTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKdRgwDQYJKoZIhvcNAQELBQADggEBAJmSxxxW
xrLFdehT7lHQTRVe8mpor1AVkNj0KTn4U+0jglecg6r1zHc2vR3RPaPhdmP0O5Zc
uB5lXp7Knz81xb9KOVC1XbhobjrAJhRVL/VVCo0Q7gZ1dOMJjKS98majpD3cy6Xi
ktjeZJklfR4XapvE0t2P2xH4/3RPJXh7mzXrWC+n6RBCu772JOmFl5T+D1n2QGZk
i34gyaOZKPYVJjkHa7z6D/AR7kUpZzyHWj6G2hX6bhfaCnEH/A2fqsPpFe2FeyEU
GWb4A2Sbf1FhiO+heESgTCZwEbKN1JSqFZmiY73Is+rkeWg/mLLLtqG5i9+CRB14
0oDN17EzFNg8UEw=
-----END CERTIFICATE-----
Generated at Tue Aug 13 13:15:27 2024 by rpki-client on console-fra.rpki-client.org