Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3234382e302f32332d3233203d3e20323632333933.roa
File:                     3133382e3132312e3234382e302f32332d3233203d3e20323632333933.roa (raw, json)
Hash identifier:          7G0f6hH6OlhZx0YgM4Pu0yEgwTk90ylVS3Z2GpMKwyM=
Subject key identifier:   BE:34:8C:23:45:3A:BC:44:5F:5A:8B:E1:09:EF:FE:81:71:AA:A5:57
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       216B4D7E0312152FC65918B2CBC4A5B748F4F4E0
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3234382e302f32332d3233203d3e20323632333933.roa
Signing time:             Sun 05 May 2024 21:40:36 +0000
ROA not before:           Sun 05 May 2024 21:35:36 +0000
ROA not after:            Sun 04 May 2025 21:40:36 +0000
asID:                     262393
IP address blocks:        138.121.248.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 24 Aug 2024 18:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6b:4d:7e:03:12:15:2f:c6:59:18:b2:cb:c4:a5:b7:48:f4:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  5 21:35:36 2024 GMT
            Not After : May  4 21:40:36 2025 GMT
        Subject: CN=BE348C23453ABC445F5A8BE109EFFE8171AAA557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:57:82:0e:a2:ca:3a:4f:a6:38:5d:3a:3d:93:
                    2f:3b:b8:6d:06:4e:23:d7:32:cb:1f:4c:68:ac:6d:
                    79:96:b0:74:7d:65:a4:13:d4:98:bb:32:69:2c:6b:
                    86:d2:d7:b8:d6:c3:32:c6:dc:29:92:dd:51:5e:10:
                    f9:00:9e:c9:3e:56:66:b5:8c:52:2e:39:32:80:b8:
                    58:0a:2f:3b:81:57:d5:a5:ad:53:f0:19:81:bf:07:
                    19:8f:93:b8:88:61:4a:6a:3d:87:e8:3e:48:85:06:
                    49:c0:32:a9:a4:f0:2a:e0:9c:be:c2:ab:0d:3c:27:
                    0c:15:9e:a9:17:d0:23:d0:a8:12:db:70:66:7a:1d:
                    5e:a1:24:ae:f4:9e:b8:a1:e2:07:84:17:f1:7a:5a:
                    da:08:22:13:15:35:7a:6c:cb:97:9d:95:93:04:13:
                    8d:4a:10:88:1f:83:01:67:44:aa:ac:54:da:73:34:
                    a2:13:13:da:b6:29:81:5a:68:cc:56:97:69:3a:80:
                    ae:fd:b0:1f:37:10:32:72:0d:72:ca:75:6d:68:38:
                    16:e2:16:1a:c1:07:9e:5c:6a:8e:a4:b6:24:d4:1f:
                    18:4c:89:1b:1a:51:e9:f9:b7:0b:14:b8:62:ea:99:
                    77:ea:2f:ea:c7:b2:48:81:32:56:e6:e0:7f:d8:b2:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:34:8C:23:45:3A:BC:44:5F:5A:8B:E1:09:EF:FE:81:71:AA:A5:57
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3234382e302f32332d3233203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:c9:79:4e:d5:1f:43:64:74:d8:1e:2a:66:60:fe:b0:8d:42:
         d2:ea:7c:12:54:cc:20:ac:61:18:72:d1:0e:0c:d5:e6:8d:a6:
         5c:e3:9e:ef:0d:e7:bd:97:c7:bc:5d:b0:85:dd:69:c8:8f:be:
         53:c9:c1:3a:cf:0b:eb:51:da:0f:7c:bb:02:f5:18:f1:4d:d8:
         e9:a9:3f:a3:7e:0d:09:8d:53:aa:00:37:aa:2e:c0:32:f6:36:
         3f:29:ea:90:6d:e8:65:28:9d:d2:55:20:e8:4f:1b:9f:66:b4:
         63:a4:14:58:94:71:d7:ab:77:2c:b5:69:3f:a0:ef:7f:31:43:
         ee:d2:2c:c2:68:dc:db:43:f7:37:59:cf:ee:84:5f:d8:35:cb:
         af:4c:88:e4:ee:b0:5f:58:a1:17:b4:07:b0:3e:f4:69:88:2c:
         74:db:58:7a:5a:85:2d:96:25:87:7b:3b:f9:3c:4d:a8:1f:26:
         e2:da:65:4c:82:33:e4:88:f7:0b:d3:6e:ae:b1:6c:f4:bf:33:
         ce:10:97:e1:a4:74:b6:ac:c6:d2:b8:e6:f3:f6:6a:c4:c3:cb:
         8d:9a:30:4f:ab:8e:67:1d:a1:52:f1:ff:a1:44:07:cd:56:a2:
         c6:89:e8:d6:c8:d9:7b:2d:8d:e6:85:ba:2a:62:a6:31:34:3b:
         69:83:53:8d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIWtNfgMSFS/GWRiyy8Slt0j09OAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNDA1MDUyMTM1MzZaFw0yNTA1MDQyMTQwMzZaMDMxMTAvBgNV
BAMTKEJFMzQ4QzIzNDUzQUJDNDQ1RjVBOEJFMTA5RUZGRTgxNzFBQUE1NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkV4IOoso6T6Y4XTo9ky87uG0G
TiPXMssfTGisbXmWsHR9ZaQT1Ji7Mmksa4bS17jWwzLG3CmS3VFeEPkAnsk+Vma1
jFIuOTKAuFgKLzuBV9WlrVPwGYG/BxmPk7iIYUpqPYfoPkiFBknAMqmk8CrgnL7C
qw08JwwVnqkX0CPQqBLbcGZ6HV6hJK70nrih4geEF/F6WtoIIhMVNXpsy5edlZME
E41KEIgfgwFnRKqsVNpzNKITE9q2KYFaaMxWl2k6gK79sB83EDJyDXLKdW1oOBbi
FhrBB55cao6ktiTUHxhMiRsaUen5twsUuGLqmXfqL+rHskiBMlbm4H/YstGBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUvjSMI0U6vERfWovhCe/+gXGqpVcwHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzEzMzM4MmUzMTMyMzEyZTMyMzQzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp5+DANBgkqhkiG9w0BAQsFAAOCAQEAAcl5
TtUfQ2R02B4qZmD+sI1C0up8ElTMIKxhGHLRDgzV5o2mXOOe7w3nvZfHvF2whd1p
yI++U8nBOs8L61HaD3y7AvUY8U3Y6ak/o34NCY1TqgA3qi7AMvY2PynqkG3oZSid
0lUg6E8bn2a0Y6QUWJRx16t3LLVpP6DvfzFD7tIswmjc20P3N1nP7oRf2DXLr0yI
5O6wX1ihF7QHsD70aYgsdNtYelqFLZYlh3s7+TxNqB8m4tplTIIz5Ij3C9NurrFs
9L8zzhCX4aR0tqzG0rjm8/ZqxMPLjZowT6uOZx2hUvH/oUQHzVaixono1sjZey2N
5oW6KmKmMTQ7aYNTjQ==
-----END CERTIFICATE-----
Generated at Sat Aug 24 19:33:34 2024 by rpki-client on console-ams.rpki-client.org