Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3133382e3235352e32302e302f32322d3234203d3e20323633393531.roa
File:                     3133382e3235352e32302e302f32322d3234203d3e20323633393531.roa (raw, json)
Hash identifier:          yFluZD6ztlKJK93mPxiViU0PV0pkquvxwvfIPslrm34=
Subject key identifier:   D0:56:85:5D:4C:B5:9D:E4:9F:99:4D:B0:96:FC:52:A4:A1:05:07:A5
Certificate issuer:       /CN=3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD
Certificate serial:       7855CDCD029D7CC313C5BE6C7E9CD7DCEFA38ECE
Authority key identifier: 3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3133382e3235352e32302e302f32322d3234203d3e20323633393531.roa
Signing time:             Thu 18 Apr 2024 21:02:24 +0000
ROA not before:           Thu 18 Apr 2024 20:57:24 +0000
ROA not after:            Thu 17 Apr 2025 21:02:24 +0000
asID:                     263951
IP address blocks:        138.255.20.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 17 Apr 2025 21:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:55:cd:cd:02:9d:7c:c3:13:c5:be:6c:7e:9c:d7:dc:ef:a3:8e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD
        Validity
            Not Before: Apr 18 20:57:24 2024 GMT
            Not After : Apr 17 21:02:24 2025 GMT
        Subject: CN=3082010A0282010100E9E84771A13E50AADD9C798974DB082D844660C231743EBB2E051AFEB58A9A67DFA2482B5014A5193EB905FA0ADC94DB7F7B5BAA1A31AA92C2B9E5484D05BE831722C5233B6CBE4E9C18259A0234757CCC109B53C7C337DC3F3A9E3A378E875AB4D17CBB361EE6FB3AB74F0687A71B39A52EB7BC7C6C13AD67886C223E8EA91E23E25E0266BD1598CF7A9A00607C0D08FCD82EE12574D7FBDEA62592912E77CBD895A41E6D9C5B26EF2BEEA44881D943E895A35971421B6250FAA1326FE1B06914565621A0A772DAA97965876710010269DDE38077F99773D1AB12BC4392298B6ACCF50AC8E79C89F3B4D24AD9FF3A35B594D0B029035D2241D31E61E1C74AFD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e8:47:71:a1:3e:50:aa:dd:9c:79:89:74:db:
                    08:2d:84:46:60:c2:31:74:3e:bb:2e:05:1a:fe:b5:
                    8a:9a:67:df:a2:48:2b:50:14:a5:19:3e:b9:05:fa:
                    0a:dc:94:db:7f:7b:5b:aa:1a:31:aa:92:c2:b9:e5:
                    48:4d:05:be:83:17:22:c5:23:3b:6c:be:4e:9c:18:
                    25:9a:02:34:75:7c:cc:10:9b:53:c7:c3:37:dc:3f:
                    3a:9e:3a:37:8e:87:5a:b4:d1:7c:bb:36:1e:e6:fb:
                    3a:b7:4f:06:87:a7:1b:39:a5:2e:b7:bc:7c:6c:13:
                    ad:67:88:6c:22:3e:8e:a9:1e:23:e2:5e:02:66:bd:
                    15:98:cf:7a:9a:00:60:7c:0d:08:fc:d8:2e:e1:25:
                    74:d7:fb:de:a6:25:92:91:2e:77:cb:d8:95:a4:1e:
                    6d:9c:5b:26:ef:2b:ee:a4:48:81:d9:43:e8:95:a3:
                    59:71:42:1b:62:50:fa:a1:32:6f:e1:b0:69:14:56:
                    56:21:a0:a7:72:da:a9:79:65:87:67:10:01:02:69:
                    dd:e3:80:77:f9:97:73:d1:ab:12:bc:43:92:29:8b:
                    6a:cc:f5:0a:c8:e7:9c:89:f3:b4:d2:4a:d9:ff:3a:
                    35:b5:94:d0:b0:29:03:5d:22:41:d3:1e:61:e1:c7:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:56:85:5D:4C:B5:9D:E4:9F:99:4D:B0:96:FC:52:A4:A1:05:07:A5
            X509v3 Authority Key Identifier:
                keyid:3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3133382e3235352e32302e302f32322d3234203d3e20323633393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:49:fe:bf:98:71:2f:6c:d2:f9:b8:25:5d:cf:4c:0b:9b:43:
         f3:bd:f7:f7:bc:aa:a7:aa:a3:5b:c4:3d:3d:92:f6:30:97:5d:
         4c:b2:85:1b:f3:37:cf:f0:5f:0a:12:13:dd:53:52:70:91:43:
         a6:e6:d6:37:4c:ca:d0:da:8d:4f:f7:32:cb:54:b1:5c:39:2d:
         98:ef:88:10:69:43:52:c7:cf:c2:a1:34:70:58:f1:12:fa:16:
         cf:93:c9:8b:26:fe:f0:0e:cd:b2:dc:aa:0b:d2:fe:64:e5:92:
         03:aa:09:dd:16:33:a5:fd:cd:f9:38:7f:e0:63:19:00:a9:54:
         1e:43:de:7b:cf:ee:f2:22:b7:2a:82:f6:55:c1:8d:b1:32:46:
         41:d1:3f:80:70:b1:ee:c9:64:31:16:5e:74:98:86:c3:a9:28:
         e9:68:9c:37:e2:ca:d3:a9:dc:61:b9:c2:df:c3:eb:8e:f5:eb:
         66:be:37:3a:d1:f9:0c:2f:60:91:85:56:0d:9c:75:37:c7:07:
         c0:bb:ad:ab:34:91:35:97:c3:35:d4:85:8a:87:af:3b:95:31:
         97:6d:66:1f:3f:5d:c3:bb:5b:4a:33:ad:3c:27:60:bd:ce:22:
         ab:ac:df:34:ac:6c:3a:6c:f2:31:89:f0:97:b7:fc:3f:67:01:
         ca:07:e5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org