Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34362e302f32342d3234203d3e203532353430.roa
File:                     3133382e3138352e34362e302f32342d3234203d3e203532353430.roa (raw, json)
Hash identifier:          7JpTwtXNlBKPb0BCPj4G/uIucBuv6DxAoZpnHvLJYiI=
Subject key identifier:   E0:EC:17:35:96:F9:04:8A:41:31:85:32:8A:68:92:F0:EC:D3:10:4C
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       0489E43C29D14CC0E383DC0257AEDF5DE1DE2819
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34362e302f32342d3234203d3e203532353430.roa
Signing time:             Mon 29 Apr 2024 13:38:02 +0000
ROA not before:           Mon 29 Apr 2024 13:33:02 +0000
ROA not after:            Mon 28 Apr 2025 13:38:02 +0000
asID:                     52540
IP address blocks:        138.185.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 May 2024 01:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:89:e4:3c:29:d1:4c:c0:e3:83:dc:02:57:ae:df:5d:e1:de:28:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: Apr 29 13:33:02 2024 GMT
            Not After : Apr 28 13:38:02 2025 GMT
        Subject: CN=E0EC173596F9048A413185328A6892F0ECD3104C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:37:5c:c0:20:38:10:1c:ae:7d:f2:87:ce:
                    2a:c9:7a:fe:60:82:aa:65:eb:46:ea:43:af:10:c5:
                    cc:96:b4:b5:32:33:33:59:68:e9:8a:6f:78:18:42:
                    6f:22:eb:0d:77:8e:13:30:4b:d7:80:55:83:15:56:
                    4c:34:b0:cf:cf:fc:81:e1:a9:7a:57:2b:87:75:26:
                    12:f7:31:36:ac:c6:0e:2c:f5:52:d6:40:e8:f7:12:
                    83:b1:6e:6d:9d:f2:ac:b5:33:57:9f:7f:75:e2:4b:
                    01:13:d5:af:58:7a:4c:19:01:96:35:fc:a5:25:42:
                    10:8f:72:c5:b0:5a:e0:ab:44:6b:45:64:e6:82:d7:
                    5a:6d:43:fd:e0:1a:92:cf:c1:fa:1d:f2:8c:2e:cc:
                    36:6e:17:60:b8:f6:f9:d5:7d:a6:2b:b6:18:f4:5e:
                    d1:6d:c7:b8:22:26:b5:e1:c7:3d:37:91:93:0b:07:
                    7f:10:99:72:27:ab:52:9d:a1:6b:ed:cd:22:cb:0e:
                    e0:08:b2:82:c2:8f:60:f4:99:6a:49:40:d3:15:eb:
                    a9:c4:dd:80:d9:68:93:d6:b7:10:f3:89:38:b9:59:
                    e4:49:6c:fb:63:f0:9f:df:39:95:1b:76:bb:65:e5:
                    1a:3d:b4:e9:c5:8c:de:52:4f:03:40:cc:2a:5e:df:
                    7f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EC:17:35:96:F9:04:8A:41:31:85:32:8A:68:92:F0:EC:D3:10:4C
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34362e302f32342d3234203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:06:cf:b0:b3:94:25:13:63:33:b6:0b:47:9a:c0:5f:90:92:
         af:fd:f4:49:d0:41:1d:13:95:cc:bb:27:03:80:12:54:3c:8e:
         b2:a9:ca:aa:d1:91:cf:9d:d3:46:77:b2:f5:5f:e7:26:02:fa:
         d4:6b:10:e2:45:e8:2d:c8:ce:87:50:c2:c6:9e:1e:b6:65:43:
         4c:61:38:17:61:0e:90:76:b7:de:20:92:60:c0:30:18:0a:ee:
         33:1a:89:ed:64:83:8c:7c:91:63:91:94:e9:a4:d5:59:c0:ef:
         60:6d:b3:5c:71:01:2d:1a:83:98:c9:9b:34:ab:5a:a0:76:7c:
         15:aa:17:4e:ea:47:f1:f5:eb:47:65:bd:cd:ef:e4:5b:10:f9:
         74:85:83:3c:1e:13:9e:ee:d5:4e:d8:b5:48:6e:6b:b3:6a:00:
         0b:1a:b6:04:01:31:21:3c:f8:f0:71:6a:d0:6b:29:40:8e:04:
         01:af:04:63:fb:46:87:d3:ce:9a:cd:34:7d:68:89:df:c9:3e:
         26:93:3d:43:ea:c7:4b:0b:60:05:36:4f:42:57:40:6b:85:93:
         a8:55:92:fd:76:91:1e:e0:ae:a1:ff:e9:44:15:2c:bb:fd:1d:
         0d:91:d8:02:f4:37:6d:76:9a:06:46:5b:cb:eb:73:8c:a1:55:
         74:6d:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org