Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131332e302f32342d3234203d3e203238363036.roa
File:                     3133382e35392e3131332e302f32342d3234203d3e203238363036.roa (raw, json)
Hash identifier:          qu74pZacrURshz8EX7Rt4bHo/Et5TgUx185dllAtKR0=
Subject key identifier:   70:32:ED:33:F8:87:98:DC:12:B2:5A:CD:62:01:26:25:70:FE:2A:16
Certificate issuer:       /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Certificate serial:       5015E6A96D273E5D6EF03B0A8D7C12094AA62FB0
Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131332e302f32342d3234203d3e203238363036.roa
Signing time:             Tue 02 Jul 2024 13:09:40 +0000
ROA not before:           Tue 02 Jul 2024 13:04:40 +0000
ROA not after:            Tue 01 Jul 2025 13:09:40 +0000
asID:                     28606
IP address blocks:        138.59.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 23:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:15:e6:a9:6d:27:3e:5d:6e:f0:3b:0a:8d:7c:12:09:4a:a6:2f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
        Validity
            Not Before: Jul  2 13:04:40 2024 GMT
            Not After : Jul  1 13:09:40 2025 GMT
        Subject: CN=7032ED33F88798DC12B25ACD6201262570FE2A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:99:7d:f1:55:bc:a7:ec:18:ed:34:f8:af:
                    47:a9:26:47:01:bd:ff:bb:7d:39:37:7b:22:59:cb:
                    d6:f4:dd:fa:97:74:ef:d3:4b:5f:dc:21:c1:16:88:
                    91:48:64:41:86:2d:1b:0e:99:f1:50:bc:26:a3:18:
                    a3:56:71:d5:19:18:07:e3:d7:ba:f3:52:60:10:ab:
                    d9:ac:a4:10:2d:5d:5a:3c:59:9d:f6:75:0c:51:ae:
                    ba:5d:65:c6:e7:c2:f5:dd:fe:fe:31:da:0b:00:42:
                    1d:af:4d:79:77:02:11:49:33:ac:88:01:d8:83:63:
                    2d:99:99:99:bc:d4:94:ef:b8:3a:91:94:3b:d0:a4:
                    27:f9:6f:12:1a:6b:86:ab:93:c1:45:bd:84:c8:1d:
                    c4:f7:64:a9:5e:21:b9:0d:6f:41:81:cb:7e:7f:35:
                    85:3c:b2:e9:3f:e1:f6:cb:2f:fc:89:ec:10:2e:e3:
                    99:e4:67:3f:cc:ce:f2:4f:48:bb:56:be:d4:a8:b4:
                    74:5e:23:65:92:4b:78:8d:94:b9:af:60:1e:f2:00:
                    ac:5e:a6:98:d5:57:1b:59:b6:2f:51:b6:c3:ed:bf:
                    f9:36:00:e1:02:ab:82:82:45:d4:0d:de:87:0e:a0:
                    91:5c:d7:88:a6:2a:cc:67:40:54:3b:7f:c7:99:04:
                    46:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:32:ED:33:F8:87:98:DC:12:B2:5A:CD:62:01:26:25:70:FE:2A:16
            X509v3 Authority Key Identifier:
                keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131332e302f32342d3234203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:23:01:1b:0d:8e:4f:b7:da:97:43:87:79:94:df:3e:d0:39:
         13:49:96:3c:e5:15:88:f6:10:b6:fe:e8:a5:27:86:0e:d7:80:
         c1:a2:fa:47:22:55:fe:1f:e5:5e:0f:ef:fe:6d:f7:f6:6a:47:
         3c:c1:64:c5:13:12:b4:f9:97:a3:3b:c2:5c:a3:3e:1f:c1:73:
         b9:38:ec:ad:42:23:de:fc:14:ad:ab:2c:55:0a:d1:22:21:10:
         f2:ef:b9:16:28:7d:71:86:21:d0:fd:08:40:e1:9c:d5:e0:8a:
         9f:5c:ff:c3:05:ee:19:25:18:ae:21:76:ec:23:13:71:26:83:
         7d:df:b0:7f:99:f9:6e:74:84:ad:e7:53:b2:bf:fb:54:69:6d:
         a3:92:a8:30:53:4b:f1:23:8f:da:c5:24:0b:1e:41:9c:0e:c0:
         5a:2e:1c:ae:6f:13:54:fd:53:b7:60:13:b5:06:eb:31:63:53:
         0e:3b:c1:f9:99:4b:ba:e2:2e:11:1a:65:10:bd:84:0b:f8:f0:
         5e:2f:d0:ff:74:ae:54:6f:5e:87:f6:1e:01:c4:54:19:84:0b:
         83:8e:62:28:7e:3f:af:fa:2e:a7:a3:c7:26:54:af:f2:f9:fb:
         6f:cd:05:33:36:74:02:d9:4f:b0:2d:7d:84:65:19:f8:e5:a6:
         65:c4:19:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 01:57:52 2024 by rpki-client on console-ams.rpki-client.org