Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa
File:                     3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          8/T63cm/syL3Ith7kJyMLDEm/lViMRbJxTJN3lbp4sc=
Subject key identifier:   8B:CF:B7:61:ED:81:74:E0:56:CC:13:3E:EF:16:01:FF:5B:28:F1:97
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       44AA77CB40454C2A47CB77B2DE8C34186A0E309E
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa
Signing time:             Thu 04 Apr 2024 18:32:49 +0000
ROA not before:           Thu 04 Apr 2024 18:27:49 +0000
ROA not after:            Thu 03 Apr 2025 18:32:49 +0000
asID:                     262393
IP address blocks:        138.121.248.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 02 May 2024 20:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:aa:77:cb:40:45:4c:2a:47:cb:77:b2:de:8c:34:18:6a:0e:30:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Apr  4 18:27:49 2024 GMT
            Not After : Apr  3 18:32:49 2025 GMT
        Subject: CN=8BCFB761ED8174E056CC133EEF1601FF5B28F197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:be:b0:46:6f:6a:a3:58:52:8b:14:c6:dd:17:
                    4e:53:0f:6e:d3:f3:33:94:79:53:80:62:12:95:d2:
                    d3:71:db:31:02:21:4e:b6:a4:01:02:6b:13:53:38:
                    0f:0c:20:e2:09:bf:e5:71:ea:49:17:41:f2:0c:82:
                    c7:63:f1:e8:2a:e0:ef:82:dc:06:bd:05:0b:3c:7d:
                    db:90:ce:a4:09:ca:53:68:a4:6d:cf:b9:6b:3b:aa:
                    19:17:7a:21:ed:82:f3:01:24:56:67:2e:dd:dc:3e:
                    55:56:37:b4:10:08:f6:05:d6:09:f2:5f:03:f2:30:
                    d3:24:ad:55:14:01:c0:33:42:63:a4:63:de:be:3b:
                    dd:8b:74:20:66:20:81:98:17:0e:bf:fa:7e:75:93:
                    a8:29:e5:6e:a5:30:56:bf:54:13:d6:57:33:ab:ba:
                    bf:cc:f3:76:73:0c:55:2f:17:de:db:18:c0:fb:15:
                    c2:3d:60:06:45:80:9b:fa:13:34:ca:f8:a8:f9:19:
                    59:ec:83:c3:27:98:c1:58:d8:76:87:a4:16:ae:0b:
                    7d:c8:42:75:2b:d0:ee:27:18:6b:51:f4:d2:d6:f8:
                    f2:7f:e5:38:be:e5:d4:e5:b1:28:e1:ff:be:b7:6a:
                    3c:7d:52:74:b0:2c:13:18:13:7a:6a:bd:5f:f5:bc:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CF:B7:61:ED:81:74:E0:56:CC:13:3E:EF:16:01:FF:5B:28:F1:97
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:a1:f8:99:c3:00:d9:42:11:eb:25:2b:e9:c7:54:81:4b:b0:
         d7:88:f4:04:92:de:56:ee:02:f5:d7:8b:8d:69:55:f3:f5:a0:
         30:19:5d:a8:16:55:43:e3:c6:1d:5f:14:a0:30:05:45:a9:5f:
         d5:1f:f1:b0:6c:91:35:a9:52:1b:d3:c4:8e:8c:83:57:c8:67:
         e6:37:a9:d3:13:d3:44:91:56:fc:4b:d8:c9:96:23:68:47:b8:
         2d:72:31:86:a6:33:f3:e3:dd:77:9c:e6:88:d5:0c:eb:f2:e1:
         15:fa:b7:2a:c8:96:d9:88:62:e3:31:be:9d:dd:3e:e9:57:90:
         07:04:0d:4c:96:cc:02:50:d4:f3:74:1a:e6:40:15:05:7d:d9:
         ca:ad:ae:27:7b:a8:ab:23:18:4b:b6:9b:b6:04:73:2f:78:be:
         c3:f7:2f:02:f6:14:b7:0b:5a:12:b0:7d:5f:f7:35:75:b1:5b:
         7d:cc:34:d3:ee:ee:a7:18:a8:dc:d0:a4:b5:ba:e7:df:1b:e5:
         7a:b1:7a:d0:fc:c6:86:b2:3a:48:f2:72:af:f8:04:3e:45:a5:
         75:71:82:31:8b:90:cb:b8:66:7a:4d:c3:46:aa:39:a6:4d:32:
         53:2b:36:ae:4d:d8:5c:45:e3:b9:7e:6d:d7:b6:f7:78:44:61:
         6b:29:a4:88
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURKp3y0BFTCpHy3ey3ow0GGoOMJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNDA0MDQxODI3NDlaFw0yNTA0MDMxODMyNDlaMDMxMTAvBgNV
BAMTKDhCQ0ZCNzYxRUQ4MTc0RTA1NkNDMTMzRUVGMTYwMUZGNUIyOEYxOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlvrBGb2qjWFKLFMbdF05TD27T
8zOUeVOAYhKV0tNx2zECIU62pAECaxNTOA8MIOIJv+Vx6kkXQfIMgsdj8egq4O+C
3Aa9BQs8fduQzqQJylNopG3PuWs7qhkXeiHtgvMBJFZnLt3cPlVWN7QQCPYF1gny
XwPyMNMkrVUUAcAzQmOkY96+O92LdCBmIIGYFw6/+n51k6gp5W6lMFa/VBPWVzOr
ur/M83ZzDFUvF97bGMD7FcI9YAZFgJv6EzTK+Kj5GVnsg8MnmMFY2HaHpBauC33I
QnUr0O4nGGtR9NLW+PJ/5Ti+5dTlsSjh/763ajx9UnSwLBMYE3pqvV/1vMHBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUi8+3Ye2BdOBWzBM+7xYB/1so8ZcwHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzEzMzM4MmUzMTMyMzEyZTMyMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop5+DANBgkqhkiG9w0BAQsFAAOCAQEAe6H4
mcMA2UIR6yUr6cdUgUuw14j0BJLeVu4C9deLjWlV8/WgMBldqBZVQ+PGHV8UoDAF
Ralf1R/xsGyRNalSG9PEjoyDV8hn5jep0xPTRJFW/EvYyZYjaEe4LXIxhqYz8+Pd
d5zmiNUM6/LhFfq3KsiW2Yhi4zG+nd0+6VeQBwQNTJbMAlDU83Qa5kAVBX3Zyq2u
J3uoqyMYS7abtgRzL3i+w/cvAvYUtwtaErB9X/c1dbFbfcw00+7upxio3NCktbrn
3xvlerF60PzGhrI6SPJyr/gEPkWldXGCMYuQy7hmek3DRqo5pk0yUys2rk3YXEXj
uX5t17b3eERhaymkiA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org