Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e38382e302f32332d3233203d3e20323730383737.roa
File:                     3133382e3138352e38382e302f32332d3233203d3e20323730383737.roa (raw, json)
Hash identifier:          Tgpc8q67LzL5lA/rG2jxH5uWVQoOgQ0n0fJweAR7HJ4=
Subject key identifier:   B3:85:F8:E5:A7:72:31:FA:01:C8:E3:63:FA:ED:DA:E3:14:EF:CD:75
Certificate issuer:       /CN=3E268A146165B7580B59E044B59D275B5F824225
Certificate serial:       6630379D755ABB0B8778AFF49F1E8749B6FE0086
Authority key identifier: 3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e38382e302f32332d3233203d3e20323730383737.roa
Signing time:             Thu 04 Apr 2024 01:16:13 +0000
ROA not before:           Thu 04 Apr 2024 01:11:13 +0000
ROA not after:            Thu 03 Apr 2025 01:16:13 +0000
asID:                     270877
IP address blocks:        138.185.88.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 29 May 2024 23:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:30:37:9d:75:5a:bb:0b:87:78:af:f4:9f:1e:87:49:b6:fe:00:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E268A146165B7580B59E044B59D275B5F824225
        Validity
            Not Before: Apr  4 01:11:13 2024 GMT
            Not After : Apr  3 01:16:13 2025 GMT
        Subject: CN=B385F8E5A77231FA01C8E363FAEDDAE314EFCD75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:fe:cb:d0:a8:09:9f:e6:74:11:66:94:f4:
                    2f:d9:d5:37:90:28:8d:49:82:73:2c:a7:b2:e2:b9:
                    e7:6a:13:b7:43:85:bb:2f:89:09:94:91:66:bc:94:
                    31:b4:b4:8a:bd:ce:78:a4:49:f1:02:23:7c:0a:c4:
                    ac:ae:9c:05:4d:db:7a:e6:c9:3a:0c:74:1c:ee:86:
                    d4:b7:29:f4:c5:9a:90:79:db:e4:72:37:83:a6:db:
                    62:c7:97:a0:35:c0:c6:02:90:6c:b7:b2:8d:8f:a6:
                    10:e5:43:fe:99:b4:d7:f5:cb:30:35:1f:35:07:83:
                    d1:14:95:93:af:53:e6:f4:b1:d5:c8:34:c1:91:fb:
                    2e:ca:b4:4b:9c:0d:67:6b:d0:ec:d9:0e:5e:3a:99:
                    90:4e:73:4c:3a:d8:e4:05:ee:29:b1:45:b6:c8:93:
                    4e:02:20:4e:02:b5:a5:54:5f:d7:c8:69:da:e3:da:
                    8a:86:ac:b5:6c:fb:05:c9:4d:ff:1b:ea:75:55:b9:
                    97:e6:09:a4:65:47:e2:6e:ff:b1:30:d2:9b:91:41:
                    7e:cd:9b:cf:be:00:a4:e1:79:e9:64:cc:37:96:0e:
                    3e:c3:99:02:d9:de:57:fc:23:30:c2:63:ae:d7:47:
                    8d:fe:63:64:62:4c:37:25:c7:f2:d9:ed:3c:bc:69:
                    22:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:85:F8:E5:A7:72:31:FA:01:C8:E3:63:FA:ED:DA:E3:14:EF:CD:75
            X509v3 Authority Key Identifier:
                keyid:3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e38382e302f32332d3233203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:91:73:2f:69:dc:24:19:cf:59:54:5f:70:e0:6d:31:7e:40:
         e0:05:b5:a9:f3:bf:89:2a:f7:a2:51:d5:4b:d8:c5:9f:fa:03:
         ca:19:89:15:3a:ae:24:c4:62:2d:a1:0d:d7:e4:da:42:7a:ce:
         83:34:bf:a3:e7:c6:23:68:76:89:5a:b4:ec:df:11:4f:4a:8b:
         b0:29:5d:fb:8d:7b:50:d4:83:50:b1:b0:8a:24:fa:05:75:2e:
         7f:56:bb:03:38:37:e1:21:e2:0a:01:8e:3b:15:b8:d6:03:9b:
         a0:7d:2e:9b:c5:ee:57:6c:22:ab:b6:44:da:56:39:ca:a0:03:
         22:ec:60:00:1a:4e:9d:b6:a6:73:e8:f6:e7:db:c6:8e:17:0b:
         ae:a5:7f:a0:82:25:ee:a5:f2:5c:61:a4:06:5d:59:32:c2:e0:
         3d:02:3f:bf:d0:4d:28:25:6f:44:be:ae:70:e3:60:a5:a1:26:
         ef:bb:3f:fd:c5:8d:eb:a9:a8:46:19:88:74:2b:8d:10:ba:80:
         b6:ef:13:44:59:73:4a:82:f5:4a:0f:34:ff:f6:e6:e8:79:cb:
         80:5e:15:f7:85:0f:8a:16:81:93:d9:72:8a:0b:53:92:e0:77:
         3a:b6:91:53:24:4d:80:51:39:d4:5b:da:6e:5b:d2:a2:a1:3f:
         fb:75:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org