Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/3133382e3138352e3232392e302f32342d3234203d3e203437303635.roa
File:                     3133382e3138352e3232392e302f32342d3234203d3e203437303635.roa (raw, json)
Hash identifier:          TkZTVDGAz/u+9jMLU46HqYtZbeAcdu5GRlVZUSvw5s8=
Subject key identifier:   DC:48:B4:99:85:73:A1:44:83:11:09:8F:0C:38:45:37:56:A2:62:B9
Certificate issuer:       /CN=9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A
Certificate serial:       5BB43C64113FF0E64D41522BFC43EB950E7E6A10
Authority key identifier: 9D:1F:16:BD:1B:CE:84:FE:4E:25:12:B2:FB:64:2A:22:AA:23:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/3133382e3138352e3232392e302f32342d3234203d3e203437303635.roa
Signing time:             Mon 29 Apr 2024 14:59:31 +0000
ROA not before:           Mon 29 Apr 2024 14:54:31 +0000
ROA not after:            Mon 28 Apr 2025 14:59:31 +0000
asID:                     47065
IP address blocks:        138.185.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 18:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b4:3c:64:11:3f:f0:e6:4d:41:52:2b:fc:43:eb:95:0e:7e:6a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A
        Validity
            Not Before: Apr 29 14:54:31 2024 GMT
            Not After : Apr 28 14:59:31 2025 GMT
        Subject: CN=DC48B4998573A1448311098F0C38453756A262B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ac:b9:81:44:3a:a0:f0:1d:eb:9c:f2:ea:64:
                    18:e9:7a:a0:7f:a9:64:e6:d3:5c:d0:2a:56:88:86:
                    8a:d1:f4:1c:01:8f:35:be:0e:eb:f3:d6:7f:65:55:
                    b4:96:39:f1:23:d2:bb:3c:ca:9f:85:53:54:14:0a:
                    bb:ee:bd:c9:ad:df:87:b7:52:7c:f3:29:f7:a2:9c:
                    92:31:ec:87:d3:b4:49:dc:8a:f5:8e:9f:40:7e:e8:
                    03:ed:76:1e:86:5d:e6:1e:66:12:15:2f:5e:af:e9:
                    8e:8f:74:30:e7:20:7a:bb:95:91:78:58:bc:ac:70:
                    2d:34:ac:ae:9b:56:5f:90:95:0f:c7:ba:bc:ae:bf:
                    cf:2b:91:a8:fe:86:a6:f0:b8:56:e9:af:f6:8c:2d:
                    96:c9:d6:4f:f2:98:c0:eb:68:ef:4b:6c:e9:9b:6b:
                    8c:a0:9b:ee:7d:3b:fb:79:a5:3b:c8:c1:78:5a:1b:
                    af:0a:be:1a:5a:38:6f:eb:c9:6b:a0:4c:c2:5c:b7:
                    dd:03:49:a1:97:f0:a1:4a:af:85:29:9a:f5:0b:1b:
                    dd:4d:f8:a1:5e:bf:24:a0:f0:28:1b:36:71:41:10:
                    68:11:66:c0:dd:31:8c:a4:73:99:27:8f:ef:df:99:
                    39:c2:31:f8:0d:5e:03:ed:78:e3:14:be:4a:db:d4:
                    af:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:48:B4:99:85:73:A1:44:83:11:09:8F:0C:38:45:37:56:A2:62:B9
            X509v3 Authority Key Identifier:
                keyid:9D:1F:16:BD:1B:CE:84:FE:4E:25:12:B2:FB:64:2A:22:AA:23:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/3133382e3138352e3232392e302f32342d3234203d3e203437303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:c7:4d:75:4e:04:e2:11:c1:29:ab:bd:e4:b4:27:28:3e:c0:
         ae:68:f9:83:1c:24:09:8f:2a:e6:aa:92:09:97:5d:af:fc:75:
         ab:d5:86:8f:85:06:0a:29:ea:ed:ef:0a:e7:f3:ec:07:65:0c:
         ef:63:7e:75:cc:3d:4d:09:aa:9a:fb:8d:c8:97:6c:77:b3:f0:
         fc:e9:98:c8:fc:67:59:bb:4f:d1:cf:0d:9e:bc:b5:95:19:22:
         8b:85:1f:d4:1b:9c:2e:18:47:77:cb:77:73:87:93:82:ea:8f:
         ea:45:d5:cd:bf:79:18:42:47:51:f6:d6:e7:c6:ab:fb:9b:77:
         47:aa:db:44:d4:e6:6b:1a:4c:8f:8c:c9:73:bd:16:6c:be:12:
         90:20:af:bd:4e:94:1a:80:2f:42:8f:ef:40:39:67:a4:0e:36:
         fa:0d:5a:a5:f3:73:49:49:0d:3c:20:4e:4a:28:2f:41:ff:43:
         be:40:9c:a2:50:85:98:48:4e:4a:9e:54:ab:ba:94:4b:56:c6:
         3c:47:ef:8a:4c:e9:7d:1c:1f:20:47:04:d6:bc:17:df:9f:86:
         04:67:d5:40:fd:19:9c:94:1a:82:5f:6a:97:38:8e:85:bc:79:
         a2:b1:bb:7b:fd:c6:d1:a2:9d:3f:14:45:45:36:68:29:09:0b:
         c3:b3:55:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org