Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131322e302f32342d3234203d3e203238363036.roa
File:                     3133382e35392e3131322e302f32342d3234203d3e203238363036.roa (raw, json)
Hash identifier:          qpefmNQ8SrSAVut1vRhOm82rp+MTwvVVS/uHklFbonQ=
Subject key identifier:   9D:AC:BA:4F:7E:A9:90:D7:0B:50:BD:7D:CB:8C:B2:A3:4A:AC:9A:D2
Certificate issuer:       /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Certificate serial:       2D63A67768F505FB8E4400DEBEC607664A5CB020
Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131322e302f32342d3234203d3e203238363036.roa
Signing time:             Tue 02 Jul 2024 13:35:39 +0000
ROA not before:           Tue 02 Jul 2024 13:30:39 +0000
ROA not after:            Tue 01 Jul 2025 13:35:39 +0000
asID:                     28606
IP address blocks:        138.59.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 23:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:63:a6:77:68:f5:05:fb:8e:44:00:de:be:c6:07:66:4a:5c:b0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
        Validity
            Not Before: Jul  2 13:30:39 2024 GMT
            Not After : Jul  1 13:35:39 2025 GMT
        Subject: CN=9DACBA4F7EA990D70B50BD7DCB8CB2A34AAC9AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:ff:f4:9c:24:78:bc:69:ef:6c:91:47:53:
                    cb:32:6b:56:e7:da:bb:8f:cd:f5:d1:47:da:93:17:
                    0a:6b:de:e6:e2:43:73:0e:0b:6d:74:92:0e:07:86:
                    78:b8:2d:14:c3:5e:9d:68:42:63:bb:1e:8f:82:2d:
                    d4:2f:72:c2:69:50:1e:17:ea:b2:76:8e:da:16:2b:
                    05:0c:0f:a2:22:a8:63:11:e9:6c:aa:3c:1c:c5:cd:
                    37:ab:3e:d0:cd:15:80:0c:ef:51:23:23:18:64:27:
                    1b:90:2b:7f:53:f2:17:df:a2:db:63:5c:8e:e5:5b:
                    84:74:d4:fc:d1:26:3e:7e:75:2c:a1:88:e2:c2:b0:
                    b1:e3:5f:e9:34:74:48:24:c3:eb:05:40:46:d6:9a:
                    fe:4f:c4:3e:9f:e2:90:b2:59:e5:74:76:7b:b7:31:
                    91:f7:39:5e:a2:55:f1:f0:ca:ac:86:6d:47:d6:f1:
                    b5:72:64:63:96:3e:e8:db:84:51:ef:94:4e:ac:c5:
                    38:f6:31:0b:a3:f7:39:86:b3:f3:0f:ca:fe:21:93:
                    53:69:79:bf:db:0f:5c:2b:b4:b3:b1:f4:68:c8:a2:
                    ab:25:e4:ce:67:37:4a:19:68:ef:7e:31:e7:97:94:
                    04:f5:0a:42:71:97:f8:24:64:00:f9:52:ca:20:f6:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AC:BA:4F:7E:A9:90:D7:0B:50:BD:7D:CB:8C:B2:A3:4A:AC:9A:D2
            X509v3 Authority Key Identifier:
                keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131322e302f32342d3234203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:63:0b:09:be:59:51:0f:06:cf:85:a2:12:2a:72:68:29:63:
         e0:ca:69:e1:09:78:a0:81:70:b7:34:11:fe:a5:13:37:96:5b:
         70:78:b3:ee:d4:92:e9:2c:7a:d9:c5:f0:25:ec:1d:57:97:b6:
         7f:db:f2:4b:cb:e5:e7:12:14:0f:04:dc:ef:14:eb:1b:d5:74:
         f9:40:56:f6:b2:bd:47:44:29:38:c8:9c:3f:a4:56:6c:05:1e:
         9a:14:47:31:c0:ac:69:0d:74:7a:7f:d1:62:e7:a1:1d:96:b8:
         64:54:08:d7:a8:2c:e5:f5:1b:e0:c3:88:81:6d:40:a0:51:a3:
         10:ee:23:06:86:4e:54:5a:a7:db:60:a9:4a:0a:cc:6d:48:cb:
         97:0d:c2:f7:ec:c6:b2:a1:47:0d:78:43:f8:88:18:bf:8d:a7:
         48:e3:7c:81:5b:b8:76:ea:c7:95:a8:d0:e3:15:58:95:4c:ea:
         8a:49:57:28:e8:89:08:25:5d:bd:30:b3:51:36:7e:af:ae:e3:
         ce:40:20:fa:d7:dd:f7:dd:89:ca:a3:b5:6c:ab:fd:b4:91:e4:
         d4:6b:52:25:04:56:a3:af:b1:d5:88:47:e3:e4:d7:29:02:f0:
         2b:a8:1e:e7:0c:60:68:e1:8c:fa:8f:3d:56:4a:d5:15:fb:bb:
         e0:a3:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 01:57:52 2024 by rpki-client on console-ams.rpki-client.org