Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/3133382e3138352e3233302e302f32332d3234203d3e203631353734.roa
File:                     3133382e3138352e3233302e302f32332d3234203d3e203631353734.roa (raw, json)
Hash identifier:          y/HAqW2W38UlMwABEy+y7OYSsKaG40Bn48NsEqkVDIA=
Subject key identifier:   A4:78:F7:7D:65:92:C6:59:6F:2F:0B:AC:31:F0:E5:BE:6B:D1:DD:55
Certificate issuer:       /CN=9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A
Certificate serial:       062449D700C650AFBC7A354908B26129D466F71C
Authority key identifier: 9D:1F:16:BD:1B:CE:84:FE:4E:25:12:B2:FB:64:2A:22:AA:23:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/3133382e3138352e3233302e302f32332d3234203d3e203631353734.roa
Signing time:             Tue 30 Apr 2024 02:23:31 +0000
ROA not before:           Tue 30 Apr 2024 02:18:31 +0000
ROA not after:            Tue 29 Apr 2025 02:23:31 +0000
asID:                     61574
IP address blocks:        138.185.230.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 19:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:24:49:d7:00:c6:50:af:bc:7a:35:49:08:b2:61:29:d4:66:f7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A
        Validity
            Not Before: Apr 30 02:18:31 2024 GMT
            Not After : Apr 29 02:23:31 2025 GMT
        Subject: CN=A478F77D6592C6596F2F0BAC31F0E5BE6BD1DD55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:24:44:fe:22:26:8e:e4:25:14:36:1e:f4:
                    7d:38:af:f9:db:31:16:b5:cb:cf:24:c5:bf:f1:bb:
                    2f:72:39:55:b9:0a:b7:2a:12:22:08:9b:de:a5:21:
                    c6:30:af:87:2e:ec:b9:ad:8a:b1:aa:c6:bd:be:bb:
                    85:c7:9f:2b:e1:a5:5e:5c:d8:2e:d6:68:2e:29:e3:
                    a4:ba:56:c0:98:e5:9f:f9:88:a8:c5:8a:b3:ba:66:
                    3a:33:61:2e:22:5e:aa:64:0d:67:96:6c:81:b7:4d:
                    e2:1e:ae:47:c9:06:c1:8b:ff:40:d4:89:77:86:63:
                    3b:e0:5c:da:b2:a9:f9:c7:7d:74:b5:3d:db:36:b0:
                    77:6d:6d:4e:9d:58:ae:f1:9f:48:76:70:ef:72:86:
                    02:e2:b6:16:63:c6:97:77:9e:13:af:7b:6b:db:57:
                    13:bf:a6:d7:d4:1a:30:9e:25:11:2c:6a:c3:8a:43:
                    2e:ee:82:a9:72:c7:76:e9:73:c0:94:c8:32:95:db:
                    b6:e2:26:0c:25:c0:68:1d:a8:d8:dc:75:64:5f:ca:
                    a0:34:5b:b7:c5:87:5e:22:f1:79:86:50:e4:7c:47:
                    8d:02:0b:f3:21:db:a4:0f:08:19:0c:7c:f0:a3:51:
                    5d:71:5c:d4:eb:79:4b:b9:8a:17:f6:4b:f6:0f:18:
                    d4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:78:F7:7D:65:92:C6:59:6F:2F:0B:AC:31:F0:E5:BE:6B:D1:DD:55
            X509v3 Authority Key Identifier:
                keyid:9D:1F:16:BD:1B:CE:84:FE:4E:25:12:B2:FB:64:2A:22:AA:23:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/3133382e3138352e3233302e302f32332d3234203d3e203631353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:22:4f:d1:98:3e:36:e1:74:6f:67:b8:4e:70:e4:41:53:8b:
         8c:2c:56:d5:43:55:2e:bd:e1:2f:c0:9c:79:96:f9:0a:78:d6:
         c5:a5:d3:1a:b5:7d:2a:53:78:2b:fd:ee:55:6e:eb:b1:b7:77:
         f1:3a:b1:6f:8a:6e:e9:70:75:d0:2f:2a:72:25:30:9b:40:25:
         a2:94:53:2c:55:a2:33:fa:1c:af:56:16:4c:8e:f0:79:27:96:
         35:4f:f5:62:88:2b:3e:c6:e7:35:e7:33:da:01:be:b1:eb:6a:
         03:ee:a1:aa:f9:b5:f7:b5:c3:db:3d:67:57:e0:76:9e:98:14:
         be:42:ce:db:db:1c:f5:55:d6:44:70:d3:25:04:ec:18:c5:e5:
         84:e0:67:6e:e6:ba:85:04:d4:e5:4d:b0:68:ef:6d:8b:19:a0:
         a0:51:55:42:52:c9:b5:73:36:19:3e:6e:a8:07:85:78:e0:7f:
         10:64:e1:c2:fa:68:12:71:6e:d6:cc:95:73:27:84:8b:37:3a:
         49:25:4e:47:34:8b:78:79:f4:52:05:23:9c:24:9a:1a:a0:27:
         6b:42:f2:f8:34:4e:24:fc:95:a6:7f:8d:88:07:67:60:76:76:
         67:13:c7:a2:d3:28:7c:a7:dc:8e:c3:25:de:96:ea:86:4f:b3:
         f5:80:97:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:49 2024 by rpki-client on console-fra.rpki-client.org