Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32332d3233203d3e20323633393830.roa
File:                     3133382e3235352e3234342e302f32332d3233203d3e20323633393830.roa (raw, json)
Hash identifier:          r1iwODzCcrppPtZ4ClEo0C9nxaE3vQsAjrqS/c7JCNE=
Subject key identifier:   CA:A2:25:A3:87:01:70:C1:55:4D:CD:C8:2A:8F:3C:B4:9E:21:20:F9
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       75692129F8343A2466C0C0E310512A3B90D1C8EE
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32332d3233203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:58:11 +0000
ROA not before:           Tue 23 Apr 2024 12:53:11 +0000
ROA not after:            Tue 22 Apr 2025 12:58:11 +0000
asID:                     263980
IP address blocks:        138.255.244.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:69:21:29:f8:34:3a:24:66:c0:c0:e3:10:51:2a:3b:90:d1:c8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:53:11 2024 GMT
            Not After : Apr 22 12:58:11 2025 GMT
        Subject: CN=CAA225A3870170C1554DCDC82A8F3CB49E2120F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:44:d9:29:f3:3d:84:c3:98:47:78:07:18:26:
                    8a:a6:00:2b:e6:94:2c:ce:59:76:c5:a0:9a:cb:61:
                    e8:90:56:99:39:6b:2d:48:41:33:4a:71:3a:ca:64:
                    de:51:8b:96:27:27:63:1f:6b:cc:b6:b7:32:52:ab:
                    68:b1:d1:d8:20:70:1d:53:84:53:6d:47:18:d6:9d:
                    47:99:02:be:17:ff:10:07:85:c1:cf:7d:82:c3:fb:
                    90:e5:96:3a:89:a2:fb:e1:b5:9b:9a:18:f6:43:ee:
                    db:79:19:c4:39:f3:9a:fb:a3:a6:0a:f1:c4:13:a4:
                    d5:28:6f:df:81:8f:2f:6d:70:08:01:ab:2e:78:cb:
                    cf:17:3e:d6:fc:d1:b2:9f:6f:6f:bb:ec:0a:0a:2f:
                    ab:cc:36:39:a6:ae:0d:04:ee:de:9a:f6:8b:92:b1:
                    eb:31:24:9e:91:7b:89:80:00:c6:b3:85:e5:d3:1b:
                    67:14:51:49:72:b5:99:6b:5d:59:54:6f:a0:72:cc:
                    9e:7b:fe:3d:36:f7:96:e3:49:8a:2c:79:14:0f:c3:
                    d9:66:3d:47:98:54:83:a0:bc:1c:cd:ec:e2:aa:95:
                    ac:49:ab:c3:40:8f:4f:92:63:a8:16:6c:ce:d3:6d:
                    e5:e5:24:f9:5d:40:e0:9f:35:67:e0:2c:48:62:78:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A2:25:A3:87:01:70:C1:55:4D:CD:C8:2A:8F:3C:B4:9E:21:20:F9
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32332d3233203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:a1:2b:0b:e8:27:38:29:de:51:2b:9b:de:7a:81:17:b8:28:
         9c:f1:b6:7d:3b:9b:9b:e5:48:df:48:89:5d:e9:6e:c6:2c:11:
         ef:95:cd:cf:02:33:e2:b2:d4:a1:f4:0e:eb:02:61:de:32:a7:
         dc:3d:41:9a:e3:96:60:13:2c:33:ce:de:e8:b0:06:fb:e5:42:
         70:7e:e3:c6:8b:72:f2:51:36:16:ef:a4:5f:45:c7:b0:94:35:
         85:5a:ec:1d:8c:02:ec:4b:0f:ee:87:a5:43:8b:dc:30:ae:c8:
         5f:c1:c0:bb:3d:b7:38:51:ff:e7:59:ed:6f:b0:53:f4:fa:e9:
         e0:61:8e:52:7b:54:7a:8b:06:11:4b:d9:7a:43:3f:a6:0d:33:
         b8:9c:44:ab:96:3c:f5:3f:a6:3c:c1:ce:52:65:73:98:e7:a9:
         3a:86:45:14:5b:4e:e6:95:d8:51:45:1c:0e:b5:6e:f9:c0:75:
         64:9d:6a:1a:7a:27:2e:b3:ce:79:a7:66:2f:63:8e:60:54:55:
         32:43:1e:77:c8:b4:c6:6f:97:ac:8d:e3:83:97:18:2c:df:91:
         e1:3f:90:06:2f:3b:b6:d8:47:ef:51:66:85:49:5e:06:30:3c:
         b2:12:97:1d:3f:eb:b7:87:0b:0a:f7:f1:3d:23:19:04:e8:78:
         10:52:bb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org