Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32342d3234203d3e20323634313235.roa
File:                     3133382e39342e34342e302f32342d3234203d3e20323634313235.roa (raw, json)
Hash identifier:          HogjuXQndctyiXEyZl1w/+OHCXc3OWX1v+sO0XX2KzI=
Subject key identifier:   45:91:9F:B6:6D:78:52:41:62:99:3D:13:B2:86:42:F0:C6:DB:A9:80
Certificate issuer:       /CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
Certificate serial:       1D7A0FE516BEF18E80D956CC2CEE728E1FE6003B
Authority key identifier: E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32342d3234203d3e20323634313235.roa
Signing time:             Wed 24 Apr 2024 18:00:17 +0000
ROA not before:           Wed 24 Apr 2024 17:55:17 +0000
ROA not after:            Wed 23 Apr 2025 18:00:17 +0000
asID:                     264125
IP address blocks:        138.94.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7a:0f:e5:16:be:f1:8e:80:d9:56:cc:2c:ee:72:8e:1f:e6:00:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
        Validity
            Not Before: Apr 24 17:55:17 2024 GMT
            Not After : Apr 23 18:00:17 2025 GMT
        Subject: CN=45919FB66D78524162993D13B28642F0C6DBA980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c8:1f:d0:d9:a1:c1:56:ec:55:02:a7:b6:a7:
                    14:7a:2f:b8:1f:60:8d:17:51:24:0d:73:17:d5:af:
                    a2:5d:83:c1:a5:28:66:13:dc:dc:d9:6e:fb:8b:91:
                    50:5c:11:de:d3:73:d4:2d:10:20:53:4d:81:38:e8:
                    1c:68:bd:e9:26:bf:e6:3b:2f:f1:50:26:15:2e:1e:
                    e5:ed:bc:ad:de:67:12:11:05:96:74:ac:78:d8:69:
                    4b:a7:4d:c8:8e:79:44:52:81:b2:1e:8e:44:3b:cc:
                    23:fd:3f:13:9c:c8:fb:f5:88:2a:79:2c:22:7a:51:
                    ac:05:99:af:de:36:2d:e4:76:d1:2d:3f:a3:69:e9:
                    02:aa:9e:a5:24:9c:a8:38:ca:c3:8e:aa:c3:b8:19:
                    d9:d1:ac:a5:86:c4:d0:5e:d6:28:af:99:8c:8b:6b:
                    f8:e8:64:52:3e:02:bd:b4:d7:02:e4:d1:70:1a:92:
                    96:42:83:35:cb:ca:ce:a8:04:29:e4:14:ff:38:71:
                    93:39:6f:03:2a:b4:a7:c2:d3:70:68:60:0a:94:22:
                    8c:fb:92:0e:e1:d2:14:40:99:84:92:cc:2f:8e:22:
                    e7:52:96:a8:cd:8f:61:66:0d:d3:24:b8:c3:92:b2:
                    b5:af:b1:8b:6c:c4:fe:2c:9d:f6:8b:ee:cf:4e:9b:
                    4a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:91:9F:B6:6D:78:52:41:62:99:3D:13:B2:86:42:F0:C6:DB:A9:80
            X509v3 Authority Key Identifier:
                keyid:E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32342d3234203d3e20323634313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:8a:b0:66:20:9f:ea:4e:fe:3e:40:8b:e8:c2:b9:5c:27:03:
         c4:23:4b:12:01:bf:7d:90:97:ad:60:a5:86:ac:b3:41:35:9b:
         45:41:1b:17:6c:3d:26:52:d6:60:db:86:6a:e5:03:14:ff:f8:
         3b:5e:99:ce:b8:9a:8e:31:66:ef:89:57:2a:4e:36:5b:6d:f5:
         c2:fd:f1:d3:4a:f8:37:6f:44:df:f8:db:e9:2e:ae:78:7b:04:
         84:1f:d2:3b:f8:f1:64:8e:73:b5:46:51:3d:42:57:22:33:04:
         33:6d:f2:9c:43:ca:e9:4d:3e:85:a1:5c:c4:5b:7e:55:b3:b1:
         7d:d1:ca:9a:ca:77:ca:15:16:4e:bb:59:4d:f8:66:6b:20:95:
         a1:40:86:57:c3:fe:e3:18:ef:22:9e:86:84:8c:16:fa:bf:79:
         e7:4e:91:cd:c9:6e:9a:25:aa:81:88:cd:42:43:b5:29:bc:6a:
         05:fb:3c:25:01:e0:cc:35:07:13:68:de:bf:49:39:e4:6f:94:
         f1:a1:f0:b8:e2:5d:86:ca:7d:63:8a:7c:01:9a:18:5b:56:9a:
         d7:b5:0e:ba:d4:c4:6b:10:43:1f:c8:6b:cd:f1:f0:08:d3:91:
         39:75:48:26:9f:2a:ab:a7:8a:45:3b:65:46:79:89:91:6d:b9:
         28:10:3b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org