Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34342e302f32322d3234203d3e203532353430.roa
File:                     3133382e3138352e34342e302f32322d3234203d3e203532353430.roa (raw, json)
Hash identifier:          4RaJY4JIFZY2QvjKIrriXFY6yM7zbl4+7wB/IfJliwY=
Subject key identifier:   26:D5:6D:C1:FC:BE:3C:A8:0E:6B:29:FF:2E:BF:45:BB:23:C2:38:5C
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       39BD0F9575AAF388368BD125BE024B52C7630045
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34342e302f32322d3234203d3e203532353430.roa
Signing time:             Tue 29 Oct 2024 14:37:48 +0000
ROA not before:           Tue 29 Oct 2024 14:32:48 +0000
ROA not after:            Tue 28 Oct 2025 14:37:48 +0000
asID:                     52540
IP address blocks:        138.185.44.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 30 Oct 2024 04:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bd:0f:95:75:aa:f3:88:36:8b:d1:25:be:02:4b:52:c7:63:00:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: Oct 29 14:32:48 2024 GMT
            Not After : Oct 28 14:37:48 2025 GMT
        Subject: CN=26D56DC1FCBE3CA80E6B29FF2EBF45BB23C2385C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:a1:f5:da:4d:38:84:5e:9b:11:1f:41:32:
                    81:be:d4:0d:fa:ae:05:cf:e2:44:0a:a6:64:d2:00:
                    55:34:39:9e:9d:d9:e5:69:9e:ec:ca:55:3b:9f:66:
                    4b:76:cc:95:59:b5:55:a1:b0:b2:ff:06:53:1e:85:
                    a6:c3:64:3c:43:6f:b6:30:ab:10:0d:3b:84:a0:5c:
                    91:db:73:75:43:81:85:f0:6b:8f:9d:08:7d:3c:df:
                    2a:e8:0a:43:45:d5:75:c1:1b:26:a7:97:88:8c:9b:
                    ff:f9:02:c5:01:e8:cb:21:71:b6:01:dd:e4:8f:cd:
                    aa:f3:b0:8e:49:36:e0:5c:35:d4:ca:96:0c:3d:91:
                    98:76:f6:62:e8:b9:e7:75:85:84:7a:d9:8e:4b:1a:
                    d2:ab:5e:e4:e2:14:6e:97:a0:d6:24:24:a1:41:26:
                    73:0a:62:ff:0c:f6:32:f1:88:90:82:73:d7:61:51:
                    8d:34:b5:a9:69:f1:2e:86:88:a5:bc:a2:d0:61:68:
                    04:21:11:21:2f:0b:96:ce:ad:cc:09:49:3c:b9:f3:
                    64:2b:b7:ef:23:33:34:36:bc:63:bb:b3:94:be:af:
                    e1:de:96:39:91:a9:93:a7:fd:40:ad:b3:37:97:83:
                    cc:71:e4:a4:dd:4b:43:d5:26:3e:35:8d:be:65:2f:
                    d6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D5:6D:C1:FC:BE:3C:A8:0E:6B:29:FF:2E:BF:45:BB:23:C2:38:5C
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34342e302f32322d3234203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:fd:c7:87:24:57:74:65:52:85:a1:b6:72:ca:9a:16:19:01:
         2f:be:3c:a6:0c:b0:5f:c8:de:1a:48:bc:3e:bf:0e:91:3d:f1:
         5c:4e:39:f1:ac:cc:32:9e:2e:79:8e:e6:16:0f:2a:22:01:f6:
         19:da:20:d4:0e:3f:7c:a3:f2:ce:92:d5:49:32:ee:e6:2b:3c:
         4c:78:6f:57:79:65:62:e6:23:66:f7:85:cf:bb:16:4e:91:ab:
         60:cf:f0:84:c3:e8:72:16:dc:4f:a6:94:8f:83:a5:ea:0d:2a:
         ca:b6:b7:a1:0a:67:89:60:20:71:5d:51:5b:6c:5e:c4:5b:c0:
         56:4a:8f:19:d4:73:99:6c:2a:42:09:74:14:27:2e:66:3b:f3:
         a4:17:4c:57:04:3e:91:1a:7d:d5:97:4e:07:30:7d:47:fe:05:
         e4:aa:60:17:b9:2f:ef:f8:06:4b:44:eb:88:4a:f0:61:a0:ab:
         40:cf:ab:3b:00:90:dc:a6:04:b9:b7:42:44:25:b5:d4:22:2d:
         60:b2:52:74:78:ef:11:18:e2:aa:da:8d:77:f6:ef:3e:e5:c1:
         23:ed:06:88:95:63:55:38:60:99:f0:dc:35:37:f7:86:26:0b:
         71:08:34:9c:8a:d6:2e:e0:e9:d4:d6:77:77:8b:8a:29:af:36:
         af:09:8c:c3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOb0PlXWq84g2i9ElvgJLUsdjAEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBMjI4N0NFQUExMzE3NzgyMTg2NDVCMzc5ODU3NTQz
OTU1Q0EwNjAeFw0yNDEwMjkxNDMyNDhaFw0yNTEwMjgxNDM3NDhaMDMxMTAvBgNV
BAMTKDI2RDU2REMxRkNCRTNDQTgwRTZCMjlGRjJFQkY0NUJCMjNDMjM4NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvqH12k04hF6bER9BMoG+1A36
rgXP4kQKpmTSAFU0OZ6d2eVpnuzKVTufZkt2zJVZtVWhsLL/BlMehabDZDxDb7Yw
qxANO4SgXJHbc3VDgYXwa4+dCH083yroCkNF1XXBGyanl4iMm//5AsUB6MshcbYB
3eSPzarzsI5JNuBcNdTKlgw9kZh29mLoued1hYR62Y5LGtKrXuTiFG6XoNYkJKFB
JnMKYv8M9jLxiJCCc9dhUY00talp8S6GiKW8otBhaAQhESEvC5bOrcwJSTy582Qr
t+8jMzQ2vGO7s5S+r+HeljmRqZOn/UCtszeXg8xx5KTdS0PVJj41jb5lL9abAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJtVtwfy+PKgOayn/Lr9FuyPCOFwwHwYDVR0j
BBgwFoAUsaIofOqhMXeCGGRbN5hXVDlVygYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEsxak0yNmlOZnJGTVkycHdHVzJ1MUpMSkRtVGVzd0YxVThHeWk3YkRB
VjUvMi9CMUEyMjg3Q0VBQTEzMTc3ODIxODY0NUIzNzk4NTc1NDM5NTVDQTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxQTIyODdDRUFBMTMxNzc4
MjE4NjQ1QjM3OTg1NzU0Mzk1NUNBMDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRLMWpNMjZpTmZyRk1ZMnB3R1cydTFKTEpEbVRlc3dGMVU4R3lpN2JEQVY1LzIv
MzEzMzM4MmUzMTM4MzUyZTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCirksMA0GCSqGSIb3DQEBCwUAA4IBAQCS/ceHJFd0
ZVKFobZyypoWGQEvvjymDLBfyN4aSLw+vw6RPfFcTjnxrMwyni55juYWDyoiAfYZ
2iDUDj98o/LOktVJMu7mKzxMeG9XeWVi5iNm94XPuxZOkatgz/CEw+hyFtxPppSP
g6XqDSrKtrehCmeJYCBxXVFbbF7EW8BWSo8Z1HOZbCpCCXQUJy5mO/OkF0xXBD6R
Gn3Vl04HMH1H/gXkqmAXuS/v+AZLROuISvBhoKtAz6s7AJDcpgS5t0JEJbXUIi1g
slJ0eO8RGOKq2o139u8+5cEj7QaIlWNVOGCZ8Nw1N/eGJgtxCDScitYu4OnU1nd3
i4oprzavCYzD
-----END CERTIFICATE-----
Generated at Wed Oct 30 05:33:21 2024 by rpki-client on console-fra.rpki-client.org