Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34372e302f32342d3234203d3e20323634313235.roa
File:                     3133382e39342e34372e302f32342d3234203d3e20323634313235.roa (raw, json)
Hash identifier:          Vd/scH4XsQ6sWd9DXes35GHH+yD6U5TC2SYsX0S3M74=
Subject key identifier:   A8:10:E5:3E:6C:76:BC:32:59:5F:C9:2E:BE:8C:B3:73:E3:E8:E3:5D
Certificate issuer:       /CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
Certificate serial:       03414B10082CB52D4BE80BBDADEA6063BC7DEB2F
Authority key identifier: E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34372e302f32342d3234203d3e20323634313235.roa
Signing time:             Wed 24 Apr 2024 18:00:28 +0000
ROA not before:           Wed 24 Apr 2024 17:55:28 +0000
ROA not after:            Wed 23 Apr 2025 18:00:28 +0000
asID:                     264125
IP address blocks:        138.94.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:41:4b:10:08:2c:b5:2d:4b:e8:0b:bd:ad:ea:60:63:bc:7d:eb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
        Validity
            Not Before: Apr 24 17:55:28 2024 GMT
            Not After : Apr 23 18:00:28 2025 GMT
        Subject: CN=A810E53E6C76BC32595FC92EBE8CB373E3E8E35D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:54:14:6e:74:84:9e:e5:16:7f:20:c6:5f:
                    3e:d3:b1:b5:69:a0:68:32:a8:0c:09:f9:7b:ee:f1:
                    c3:c4:db:54:dc:76:15:84:03:2c:0c:da:08:94:60:
                    98:da:67:9f:8f:ee:36:a6:49:da:70:b0:66:e8:55:
                    7f:da:44:50:a5:a6:65:6e:47:59:8f:99:21:6e:46:
                    5f:39:02:97:53:fe:9e:df:88:49:ae:44:e9:1e:b2:
                    e1:9e:15:6b:fb:58:f1:d2:e2:bb:ae:b2:ea:e2:ef:
                    05:f6:f5:bc:e5:5c:96:31:ee:07:0e:ca:ab:3a:93:
                    fe:60:06:8f:e4:d9:28:15:d9:9c:82:24:94:cc:cf:
                    ce:09:bc:c9:00:5a:36:ec:93:b1:d7:ba:47:37:cd:
                    04:33:4c:f7:4f:a6:83:a8:3a:cb:e3:7a:22:5d:b2:
                    5a:55:98:66:0e:6e:8e:87:3d:9b:5a:a9:8f:b9:1b:
                    50:42:1e:89:7b:77:1d:de:59:7f:16:bd:c6:b8:b4:
                    a0:eb:93:fc:81:82:34:81:f9:51:01:43:ac:c7:d3:
                    fa:c0:6f:1d:e7:d6:a2:40:c2:cc:61:12:bc:a0:58:
                    35:2c:bf:66:96:cc:5d:82:66:ca:cd:72:d6:ea:f5:
                    cf:c3:7f:06:fb:66:99:d7:9f:90:39:2a:0c:a7:0c:
                    e1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:10:E5:3E:6C:76:BC:32:59:5F:C9:2E:BE:8C:B3:73:E3:E8:E3:5D
            X509v3 Authority Key Identifier:
                keyid:E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34372e302f32342d3234203d3e20323634313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:18:92:77:a3:7d:51:8a:78:eb:3e:c1:0a:7e:57:7d:d7:30:
         c1:2d:fc:54:60:34:93:de:1f:6a:cd:a0:43:e0:47:bf:f7:31:
         2d:c0:36:c7:59:49:01:ff:55:5a:26:0f:0e:9d:4f:d6:2c:28:
         7a:0d:1a:af:37:93:29:d1:b0:34:ec:28:e9:fb:0a:83:2b:2b:
         69:de:40:6f:1d:a1:0c:52:d0:30:e8:d8:21:95:3c:48:28:1b:
         c7:47:65:b4:44:1c:17:ee:e8:14:0c:1e:d4:0e:03:7a:60:b2:
         17:0e:53:4e:50:2a:32:d1:40:74:82:22:47:21:71:88:ab:37:
         75:09:e5:d2:55:d0:5d:7b:a7:73:c3:73:6c:fb:4a:9e:62:43:
         88:64:66:60:db:a8:8b:18:af:05:9a:1e:19:32:6c:2a:ce:4a:
         bd:94:57:92:df:a7:6a:28:c1:01:9b:9e:fe:ee:0a:a2:ee:ca:
         d0:80:02:41:6b:bb:25:44:78:c0:82:d4:fb:9d:f6:81:fe:38:
         af:51:c6:49:dc:91:1a:52:0c:e3:35:50:23:b2:8e:1d:4c:64:
         27:e3:07:aa:36:a7:ab:3c:f2:d9:80:ee:28:dd:ac:35:d5:33:
         07:bc:90:21:9b:4a:5c:ee:a6:45:fc:df:a1:f1:6f:ce:9c:67:
         d1:de:99:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org