Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3133382e3131372e32342e302f32322d3233203d3e20323633333231.roa
File:                     3133382e3131372e32342e302f32322d3233203d3e20323633333231.roa (raw, json)
Hash identifier:          mzEzuConLT/GrWSLs9Jen+ZU4DL4QIIA9Ra2EzkJA2E=
Subject key identifier:   34:9C:59:CF:C6:01:E5:C2:D7:3E:3C:A6:DB:05:50:3F:AF:CB:EA:E2
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       3BE2152E7E455152A6B09D60D695BF0C8E874996
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3133382e3131372e32342e302f32322d3233203d3e20323633333231.roa
Signing time:             Thu 04 Apr 2024 05:23:24 +0000
ROA not before:           Thu 04 Apr 2024 05:18:24 +0000
ROA not after:            Thu 03 Apr 2025 05:23:24 +0000
asID:                     263321
IP address blocks:        138.117.24.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 11:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e2:15:2e:7e:45:51:52:a6:b0:9d:60:d6:95:bf:0c:8e:87:49:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Apr  4 05:18:24 2024 GMT
            Not After : Apr  3 05:23:24 2025 GMT
        Subject: CN=349C59CFC601E5C2D73E3CA6DB05503FAFCBEAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:2f:35:0e:e5:37:91:f7:ab:d6:f4:6f:cc:
                    28:f5:0a:26:3a:03:89:35:47:a4:01:ba:16:fe:d6:
                    08:cf:ba:f2:80:68:fe:26:2c:a4:ad:e4:a5:0e:c2:
                    e1:c2:ef:8a:a1:cc:2c:6d:9d:e5:b4:3f:8d:30:3e:
                    c1:9e:09:db:75:74:9e:9e:38:7b:06:ee:63:0b:63:
                    19:b8:0b:76:3f:11:20:98:46:b3:3e:0f:1a:63:47:
                    20:37:38:3a:21:8f:41:34:d5:d0:a0:2d:d8:d4:c6:
                    3b:e2:95:ee:36:d2:6c:75:87:5b:cb:99:51:13:3b:
                    58:2d:a7:9e:9b:ee:11:54:ba:ba:17:39:d3:39:86:
                    64:d3:db:14:8c:2c:0d:4f:70:67:b4:63:9c:e1:40:
                    4f:70:ad:18:d0:f7:fe:87:15:db:66:9d:38:42:57:
                    48:48:3f:44:d4:4c:3a:29:3f:3b:b3:7a:95:92:24:
                    31:3e:86:6a:60:f6:09:3a:d7:9e:1b:68:7a:de:60:
                    23:36:70:63:bf:f5:2d:a7:4b:aa:3a:7f:d4:9f:d4:
                    69:25:95:0b:22:65:b4:9b:00:25:a4:8f:3f:1d:9e:
                    e8:d6:04:cb:b9:f3:be:24:7e:9a:86:26:fb:db:c3:
                    aa:25:a1:c4:a8:1f:cc:29:c2:ee:38:0d:25:ff:ea:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9C:59:CF:C6:01:E5:C2:D7:3E:3C:A6:DB:05:50:3F:AF:CB:EA:E2
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3133382e3131372e32342e302f32322d3233203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:6c:f9:67:31:cf:e0:ab:a8:e3:bd:88:68:a5:74:f8:35:f5:
         71:d8:45:b9:7a:af:c2:6c:15:e5:34:cb:49:0d:b3:bc:7f:63:
         fa:1e:41:17:69:b4:04:1e:1d:9a:04:b1:2b:d4:b4:af:b9:fd:
         27:de:bc:b0:f1:28:47:5a:5d:b3:57:7e:a4:e5:ab:87:0f:40:
         ec:5d:0b:1c:1e:72:b8:ea:9b:ac:fd:75:f4:12:c0:f7:c9:b8:
         27:d8:07:95:a8:d6:9a:51:86:0a:75:63:51:13:b3:62:5f:6c:
         ec:37:e2:67:cd:07:44:01:e9:91:1f:66:63:28:c2:d5:ba:c0:
         7a:78:09:39:ed:32:66:32:d1:ed:cf:ad:ea:e5:ab:7b:81:cd:
         87:79:a1:20:5b:b6:7a:2c:3b:1b:0f:75:d5:f5:4f:2c:6a:83:
         c6:c5:b5:89:5a:70:6a:6c:e9:e5:4d:39:4a:68:a3:6a:42:45:
         95:b7:e1:0e:56:04:20:5b:04:81:0c:a4:28:15:01:a9:41:69:
         7c:ea:7a:ce:8d:84:ec:ab:5a:e3:46:25:9a:f4:9a:5b:1b:c7:
         e0:26:bf:e5:7a:1c:c6:5d:99:fe:62:22:f9:f4:36:8e:44:84:
         ca:da:50:90:56:9d:7a:bd:a3:b2:ba:a4:1d:94:6b:54:08:2c:
         b4:95:8f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 14:24:58 2024 by rpki-client on console-ams.rpki-client.org