Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131322e302f32332d3233203d3e203238363036.roa
File:                     3133382e35392e3131322e302f32332d3233203d3e203238363036.roa (raw, json)
Hash identifier:          f9UEJVeO1DQSFXNxRKH8NeaIhihmjZCJ1Lwok+Fl3EU=
Subject key identifier:   45:CE:66:89:E9:5C:75:32:16:29:72:DE:29:7E:74:E6:88:48:F7:06
Certificate issuer:       /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Certificate serial:       550E59849FD54CDB612453DC2B4840DF6AF4F84C
Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131322e302f32332d3233203d3e203238363036.roa
Signing time:             Thu 04 Apr 2024 17:13:10 +0000
ROA not before:           Thu 04 Apr 2024 17:08:10 +0000
ROA not after:            Thu 03 Apr 2025 17:13:10 +0000
asID:                     28606
IP address blocks:        138.59.112.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 23:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0e:59:84:9f:d5:4c:db:61:24:53:dc:2b:48:40:df:6a:f4:f8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
        Validity
            Not Before: Apr  4 17:08:10 2024 GMT
            Not After : Apr  3 17:13:10 2025 GMT
        Subject: CN=45CE6689E95C7532162972DE297E74E68848F706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:9f:0d:92:0a:d7:1b:d1:dc:11:b7:36:5f:
                    20:af:46:2f:90:40:e4:9b:d3:e5:a9:9a:06:b0:ab:
                    5a:3b:71:c7:38:8a:aa:5b:37:03:22:a7:e1:5f:b8:
                    89:ab:dc:94:7d:db:5f:44:6b:52:ab:76:ea:e1:4c:
                    db:c5:1d:af:3d:b5:c3:ea:61:53:a4:4d:4d:3e:3f:
                    bd:36:1f:2b:1f:82:15:87:9b:36:ea:3a:97:6e:0f:
                    b3:6f:dd:cd:e1:34:b4:c0:86:84:83:00:a0:e6:de:
                    69:e5:93:34:19:84:f8:36:0e:48:ea:72:40:0e:e5:
                    5e:1f:d0:58:07:ae:62:81:7f:77:b2:d9:d3:3e:b6:
                    db:c7:d5:01:7e:b8:7a:5f:b2:d1:cf:a2:66:9b:50:
                    0a:91:c5:68:c0:7c:09:6f:8f:98:00:86:e4:6a:13:
                    cb:c4:2a:73:f7:12:f3:08:e3:2e:10:77:d3:42:bf:
                    a2:48:96:f9:9a:5f:9e:72:eb:36:2f:96:18:25:b3:
                    0d:b2:17:62:3c:98:51:6d:f5:f5:0c:a6:26:ca:f9:
                    4a:2d:33:e5:2e:4b:9c:af:d5:65:b6:85:f5:5f:c2:
                    b2:5f:38:fa:b5:04:64:c8:a1:c1:8a:0f:9e:c8:b3:
                    0e:ad:7a:58:82:1a:9a:e4:a8:10:dd:02:77:c2:b9:
                    12:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CE:66:89:E9:5C:75:32:16:29:72:DE:29:7E:74:E6:88:48:F7:06
            X509v3 Authority Key Identifier:
                keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131322e302f32332d3233203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:ac:9a:79:74:c2:70:f3:f5:ff:11:0a:3a:81:34:36:53:
         75:65:5a:27:26:d3:c4:ad:e2:0d:b1:3c:d8:1f:6d:13:39:7d:
         22:98:08:75:6e:55:00:07:dd:0d:f4:6c:53:97:1a:c5:89:04:
         30:bb:5f:e7:fd:63:13:98:8b:a0:41:c7:37:e5:a8:0d:ac:cf:
         99:c9:6d:a6:01:f1:a5:96:55:25:a3:f4:ed:e7:bb:8d:8c:5c:
         67:48:39:74:b4:df:66:b6:e7:f3:a4:9f:34:77:01:3c:9c:37:
         0b:a4:a9:fc:f8:25:27:b3:96:be:45:89:73:aa:a6:e6:e7:f6:
         9a:57:5b:57:8b:e0:24:ff:7d:2e:d7:fd:ed:2a:da:bc:d6:37:
         9a:c4:a1:91:1e:93:a6:a0:51:c4:d1:6f:53:8d:01:f8:e2:01:
         20:0e:93:08:3a:3a:2e:3b:8e:92:3b:63:bb:16:f8:26:46:eb:
         49:6d:d9:d4:b6:76:3d:b4:3a:f0:92:a8:84:15:b2:bb:fd:51:
         2a:c3:8a:8b:3d:59:a5:a8:38:c9:5c:ee:f0:e4:26:dc:c4:27:
         b5:91:41:01:a9:9e:e6:fa:17:17:8c:3b:d6:ec:7c:21:e6:f5:
         78:b4:50:2d:ff:be:5a:30:c3:71:fb:de:6d:2f:59:38:70:1e:
         9d:ca:10:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 01:57:52 2024 by rpki-client on console-ams.rpki-client.org