Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131322e302f32322d3232203d3e203238363036.roa
File:                     3133382e35392e3131322e302f32322d3232203d3e203238363036.roa (raw, json)
Hash identifier:          enouv1k6/11cZfElHfgg5V7WK8b2M1o1arkhzt1PRfI=
Subject key identifier:   12:3D:55:58:22:24:54:D6:27:A1:70:59:13:76:C6:27:BE:00:AB:8B
Certificate issuer:       /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Certificate serial:       53D5192423C3A79A2B1746D0C4CB6E7F60E1514E
Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131322e302f32322d3232203d3e203238363036.roa
Signing time:             Thu 04 Apr 2024 17:13:11 +0000
ROA not before:           Thu 04 Apr 2024 17:08:11 +0000
ROA not after:            Thu 03 Apr 2025 17:13:11 +0000
asID:                     28606
IP address blocks:        138.59.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 23:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d5:19:24:23:c3:a7:9a:2b:17:46:d0:c4:cb:6e:7f:60:e1:51:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
        Validity
            Not Before: Apr  4 17:08:11 2024 GMT
            Not After : Apr  3 17:13:11 2025 GMT
        Subject: CN=123D5558222454D627A170591376C627BE00AB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:7d:75:95:39:c4:2d:8e:41:de:47:a4:22:
                    34:ae:e0:60:a9:36:f6:1c:1b:d5:e0:ae:3a:68:9e:
                    6c:f4:68:f2:b3:2b:64:dd:d8:45:0d:21:97:b8:67:
                    28:6b:39:92:64:88:f4:42:2c:14:6f:64:4c:e2:1a:
                    6f:12:76:39:7b:78:83:50:14:bd:d2:7d:e9:e8:06:
                    0f:a1:2b:bf:fa:fe:f8:0d:c2:19:ed:09:ae:49:9d:
                    f6:63:67:87:ee:b5:00:c6:b3:d9:f0:8f:79:b2:e1:
                    d4:0d:d5:2d:13:89:56:15:b7:6a:4a:bd:b2:0d:5d:
                    ba:1e:6f:ee:59:84:3e:8f:e6:65:98:7a:02:01:6c:
                    0f:a3:4c:23:40:87:9d:ef:cb:11:7c:b4:e8:4b:92:
                    ab:a2:ac:bb:29:43:88:02:5e:5b:39:e6:0a:ec:14:
                    41:c1:e0:6b:dc:4b:23:6f:7e:64:db:9c:97:bb:95:
                    4d:10:a7:2f:67:24:25:a3:55:04:4b:c3:2e:18:6d:
                    d6:2c:69:2b:19:d5:a5:f9:f4:3b:34:32:e1:1a:b7:
                    44:7c:98:5e:3d:3c:6d:e0:55:03:73:2a:de:9d:97:
                    54:1c:e3:5d:8b:8b:3b:3f:92:3a:cd:7c:da:09:de:
                    a7:a1:00:97:e3:c1:fb:db:67:cc:3b:50:c0:74:11:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3D:55:58:22:24:54:D6:27:A1:70:59:13:76:C6:27:BE:00:AB:8B
            X509v3 Authority Key Identifier:
                keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131322e302f32322d3232203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:e7:5a:e5:4d:72:98:a9:92:b6:92:6e:e8:e8:a1:12:58:2d:
         bc:f3:a9:ce:32:26:00:d4:96:79:5d:00:df:4d:0e:9d:9d:17:
         7f:26:76:6e:b3:e0:e2:86:d5:9f:04:f3:00:ba:30:4e:2a:ec:
         b0:09:cf:c0:ef:68:b6:3e:f6:7b:2b:70:1a:bf:21:53:bd:d1:
         6f:a3:8b:70:e1:d1:1d:33:6b:cb:63:d9:ce:14:a0:74:5c:3a:
         9d:a0:7a:ae:c7:87:2e:37:38:30:fa:24:61:40:f6:a7:0d:50:
         7a:aa:27:33:31:99:3c:ad:c9:9b:7d:e1:21:8f:1c:74:0b:75:
         f1:23:73:57:82:0b:96:a9:c2:b5:56:10:3e:5e:ab:5d:b1:35:
         63:0c:d8:47:01:fd:bf:0d:25:0b:31:f1:63:3f:35:df:b1:12:
         07:d9:cb:64:b7:1f:e5:ea:63:a9:7f:5a:c1:a3:3d:b4:70:dc:
         90:3b:be:7e:15:0d:bb:e1:63:78:44:47:5f:3a:77:6f:cb:4a:
         84:23:a4:33:d4:8d:eb:fe:7d:8f:30:df:11:08:37:af:92:fd:
         0d:7b:df:13:a7:f3:b9:46:ac:66:30:90:97:60:17:d3:a1:40:
         fe:b6:4b:78:fc:55:24:2c:66:29:9b:39:65:90:22:1d:37:15:
         9e:11:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 01:57:52 2024 by rpki-client on console-ams.rpki-client.org