Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34302e302f32322d3232203d3e20323634323539.roa
File:                     3133382e3131382e34302e302f32322d3232203d3e20323634323539.roa (raw, json)
Hash identifier:          tKPSjGpB1We2qHIRsg5IIhpImyWegLDOmMWr7S88rbI=
Subject key identifier:   CC:F6:22:68:14:04:19:4B:C3:C3:79:08:AC:85:71:FD:A1:F1:14:78
Certificate issuer:       /CN=51B4F2A807A430D3B77B394167F7EED21F753DFB
Certificate serial:       6CAC0FCCB6CC4B860FE59F7EDD07504626DDF285
Authority key identifier: 51:B4:F2:A8:07:A4:30:D3:B7:7B:39:41:67:F7:EE:D2:1F:75:3D:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51B4F2A807A430D3B77B394167F7EED21F753DFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34302e302f32322d3232203d3e20323634323539.roa
Signing time:             Mon 29 Apr 2024 13:33:11 +0000
ROA not before:           Mon 29 Apr 2024 13:28:11 +0000
ROA not after:            Mon 28 Apr 2025 13:33:11 +0000
asID:                     264259
IP address blocks:        138.118.40.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ac:0f:cc:b6:cc:4b:86:0f:e5:9f:7e:dd:07:50:46:26:dd:f2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51B4F2A807A430D3B77B394167F7EED21F753DFB
        Validity
            Not Before: Apr 29 13:28:11 2024 GMT
            Not After : Apr 28 13:33:11 2025 GMT
        Subject: CN=CCF622681404194BC3C37908AC8571FDA1F11478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:00:06:ae:e8:ac:f4:20:f9:df:cf:7e:24:
                    25:88:bc:86:74:ca:47:fb:e9:be:15:28:96:b2:0c:
                    b0:35:79:e7:37:bb:b3:2c:c1:9e:b2:d0:35:f7:cf:
                    a3:dd:c2:c6:af:4f:bd:ce:c8:c9:36:60:27:0b:10:
                    d7:e3:4b:45:62:7d:5f:f4:15:b8:b3:f3:76:1d:a1:
                    73:67:31:7f:59:10:06:c3:9a:57:b2:24:f8:a3:4a:
                    c6:66:d2:54:98:da:a1:54:45:53:c6:b6:1f:43:14:
                    3c:6f:23:55:d1:63:52:80:ab:cc:91:7b:de:03:db:
                    d2:39:21:8c:c0:13:49:be:4b:7a:55:11:ac:13:d7:
                    8f:ac:10:55:fb:0b:34:4b:fc:84:07:dc:2a:e3:18:
                    17:90:5d:58:d6:72:7c:02:b2:cb:0d:f2:e9:f1:01:
                    0e:dc:f7:38:99:2b:88:61:cf:d7:1b:9f:c5:5d:0c:
                    c8:19:04:ef:ee:39:3b:0a:6d:97:ac:6c:36:d6:c8:
                    91:62:7f:11:d4:4d:f0:7b:59:2a:0a:59:ff:a3:cd:
                    c8:3e:f5:d6:c0:ea:61:1b:8f:e7:05:61:8a:9e:db:
                    a2:9f:19:37:0b:37:9f:95:2e:57:78:64:0b:dc:ab:
                    f9:45:48:d1:9b:d6:e8:53:ff:2b:4c:46:7b:9e:c6:
                    13:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F6:22:68:14:04:19:4B:C3:C3:79:08:AC:85:71:FD:A1:F1:14:78
            X509v3 Authority Key Identifier:
                keyid:51:B4:F2:A8:07:A4:30:D3:B7:7B:39:41:67:F7:EE:D2:1F:75:3D:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/51B4F2A807A430D3B77B394167F7EED21F753DFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51B4F2A807A430D3B77B394167F7EED21F753DFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34302e302f32322d3232203d3e20323634323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:42:5e:b6:96:c0:4f:60:18:10:ab:5c:21:c8:ba:58:9f:5a:
         25:b6:73:8a:6a:07:6a:84:32:90:5f:de:47:97:b5:f3:bc:e8:
         33:07:ad:e9:35:78:75:7d:88:6d:f7:12:62:a2:1d:43:a2:ca:
         49:ee:05:1b:f7:c8:a2:e5:36:4a:d0:7b:a5:26:9a:11:3d:16:
         c0:23:b9:31:d1:c0:33:ad:49:6e:10:1e:f8:0a:cd:49:0a:cf:
         c1:6e:7d:2e:74:38:5d:83:64:4a:5e:89:a0:58:ad:e8:bd:be:
         80:13:0f:ba:59:ad:43:87:4b:ca:9e:86:ad:bc:f5:ea:3e:17:
         2f:03:6c:12:57:6c:d6:79:5d:2c:87:d1:2d:76:87:9f:90:8f:
         ab:42:08:c5:1e:9b:79:cb:71:dd:7f:20:32:86:bf:12:19:e8:
         72:fd:11:82:58:08:87:81:f2:67:cf:81:88:f6:b3:05:67:5f:
         ad:c1:2b:0d:26:c2:01:2d:36:f1:83:c9:d4:c9:93:2d:2d:5f:
         0e:23:82:04:c4:61:be:82:e9:36:23:21:a2:53:df:97:6c:ee:
         37:04:0b:3d:80:bd:87:22:9b:4b:2b:40:19:2b:27:34:29:6d:
         89:67:0c:cb:c4:07:81:46:65:ad:00:dc:8c:71:fc:06:43:f3:
         e2:62:c8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org