Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32322d3232203d3e20323634313235.roa
File:                     3133382e39342e34342e302f32322d3232203d3e20323634313235.roa (raw, json)
Hash identifier:          f1shoAS0usI9SCTpIibjF4P9L7C7ZD3yZkDYm5FX4PA=
Subject key identifier:   BA:20:DE:5B:D8:3F:F2:DB:EE:9E:89:5C:C1:E2:6F:97:9C:1B:9A:43
Certificate issuer:       /CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
Certificate serial:       23CAB39A98F2A4FD629EBE1F3DA7E1E116B0809C
Authority key identifier: E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32322d3232203d3e20323634313235.roa
Signing time:             Wed 24 Apr 2024 18:00:13 +0000
ROA not before:           Wed 24 Apr 2024 17:55:13 +0000
ROA not after:            Wed 23 Apr 2025 18:00:13 +0000
asID:                     264125
IP address blocks:        138.94.44.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ca:b3:9a:98:f2:a4:fd:62:9e:be:1f:3d:a7:e1:e1:16:b0:80:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
        Validity
            Not Before: Apr 24 17:55:13 2024 GMT
            Not After : Apr 23 18:00:13 2025 GMT
        Subject: CN=BA20DE5BD83FF2DBEE9E895CC1E26F979C1B9A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:62:fb:16:6f:14:27:29:5b:8e:38:29:5b:
                    d3:8b:86:d1:74:ba:cb:61:1b:36:04:54:2f:7b:3d:
                    27:bd:3c:86:16:39:42:81:31:a5:11:a3:b4:65:21:
                    4c:89:1f:3a:e8:ce:7c:cc:60:63:7d:00:6e:1b:58:
                    c0:5f:a8:b4:5d:10:54:57:d8:d1:e4:60:67:c1:c9:
                    b5:80:b3:db:28:29:5c:f0:02:f6:3f:86:25:d6:4b:
                    1b:91:f9:bd:b1:a0:ef:0b:09:9d:95:4c:33:ee:fa:
                    a4:c2:5e:24:af:72:e7:66:93:be:bb:ac:bc:c4:e2:
                    fc:3e:cd:00:8f:56:6a:8e:7b:74:17:98:da:45:94:
                    47:47:e7:29:30:d8:56:33:66:51:28:d1:93:f2:ba:
                    e0:c6:3d:c2:55:7d:31:a2:c6:d5:25:af:97:39:6d:
                    d0:75:d9:7f:af:9f:16:da:0c:16:7f:fa:74:78:d2:
                    35:7d:b7:e6:b6:2a:58:e5:46:61:ca:0c:a4:3f:31:
                    17:9d:b4:a7:00:68:8b:b8:f7:c4:34:f7:09:91:f1:
                    1e:d2:c7:fb:6f:45:77:4d:23:ed:6f:db:6c:eb:93:
                    9d:28:7e:a2:22:a5:9e:fa:0b:fe:03:95:65:4c:24:
                    01:01:87:16:50:f3:e3:9d:5a:91:48:c0:aa:51:e2:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:20:DE:5B:D8:3F:F2:DB:EE:9E:89:5C:C1:E2:6F:97:9C:1B:9A:43
            X509v3 Authority Key Identifier:
                keyid:E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32322d3232203d3e20323634313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:15:5c:7e:d2:b9:ae:3f:c4:83:0c:bf:45:25:95:7e:f9:37:
         23:09:96:44:3f:1d:92:f3:fc:f4:03:1f:cf:f8:b1:c5:19:71:
         8a:c3:1e:00:71:d2:dd:ca:98:f3:84:a5:de:5b:29:b0:50:86:
         3c:e7:58:f6:40:30:34:e1:1d:a3:34:63:a4:58:49:93:fa:37:
         40:3f:81:ff:7f:c9:52:a2:6c:e3:24:3a:69:c5:c5:38:a0:17:
         33:5c:20:fb:0f:31:9c:9a:71:89:ab:76:14:0a:ab:d3:2d:d3:
         45:28:09:00:a8:f0:03:17:f5:9d:1f:5b:1a:51:7b:4e:12:de:
         63:eb:d3:f2:c3:10:9f:a7:d2:8f:1f:5a:ca:66:c3:0e:58:04:
         dd:29:b6:ac:d1:1a:24:7b:cf:7e:a5:fa:f0:d6:24:ec:17:8c:
         97:28:4c:99:d4:c5:d1:e6:dc:cf:88:30:af:b4:d4:cc:69:bc:
         0d:23:ca:32:94:57:75:99:e6:29:7c:d9:aa:f8:8e:db:e8:79:
         d8:28:32:87:d5:cf:7f:e2:bb:6d:ef:23:65:38:ad:9c:6a:3b:
         12:79:b0:b2:48:fa:10:39:42:a1:07:d0:3c:68:01:ea:8d:e8:
         7c:22:63:88:26:bb:5a:e3:3b:1d:7c:c7:fb:d9:df:62:0f:5e:
         fa:8f:de:c8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUI8qzmpjypP1inr4fPafh4RawgJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFCQkZERTVBN0VCQTk2OTk1Nzc5M0E1RDJBMjkzNDI4
RDREN0JCOTAeFw0yNDA0MjQxNzU1MTNaFw0yNTA0MjMxODAwMTNaMDMxMTAvBgNV
BAMTKEJBMjBERTVCRDgzRkYyREJFRTlFODk1Q0MxRTI2Rjk3OUMxQjlBNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsWL7Fm8UJylbjjgpW9OLhtF0
usthGzYEVC97PSe9PIYWOUKBMaURo7RlIUyJHzroznzMYGN9AG4bWMBfqLRdEFRX
2NHkYGfBybWAs9soKVzwAvY/hiXWSxuR+b2xoO8LCZ2VTDPu+qTCXiSvcudmk767
rLzE4vw+zQCPVmqOe3QXmNpFlEdH5ykw2FYzZlEo0ZPyuuDGPcJVfTGixtUlr5c5
bdB12X+vnxbaDBZ/+nR40jV9t+a2KljlRmHKDKQ/MRedtKcAaIu498Q09wmR8R7S
x/tvRXdNI+1v22zrk50ofqIipZ76C/4DlWVMJAEBhxZQ8+OdWpFIwKpR4jXlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuiDeW9g/8tvunolcweJvl5wbmkMwHwYDVR0j
BBgwFoAU4bv95afrqWmVd5Ol0qKTQo1Ne7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnNURzIxb0hvZExRcXVyVjFoNldoaE51Sm9ZQ3VSa0xBS3ZxTlFtbWZH
Z0UvMC9FMUJCRkRFNUE3RUJBOTY5OTU3NzkzQTVEMkEyOTM0MjhENEQ3QkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxQkJGREU1QTdFQkE5Njk5
NTc3OTNBNUQyQTI5MzQyOEQ0RDdCQjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZzVEcyMW9Ib2RMUXF1clYxaDZXaGhOdUpvWUN1UmtMQUt2cU5RbW1mR2dFLzAv
MzEzMzM4MmUzOTM0MmUzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0
MzEzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCil4sMA0GCSqGSIb3DQEBCwUAA4IBAQCcFVx+0rmu
P8SDDL9FJZV++TcjCZZEPx2S8/z0Ax/P+LHFGXGKwx4AcdLdypjzhKXeWymwUIY8
51j2QDA04R2jNGOkWEmT+jdAP4H/f8lSomzjJDppxcU4oBczXCD7DzGcmnGJq3YU
CqvTLdNFKAkAqPADF/WdH1saUXtOEt5j69PywxCfp9KPH1rKZsMOWATdKbas0Rok
e89+pfrw1iTsF4yXKEyZ1MXR5tzPiDCvtNTMabwNI8oylFd1meYpfNmq+I7b6HnY
KDKH1c9/4rtt7yNlOK2cajsSebCySPoQOUKhB9A8aAHqjeh8ImOIJrta4zsdfMf7
2d9iD176j97I
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:18 2025 by rpki-client