Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131342e302f32332d3233203d3e203238363036.roa
File:                     3133382e35392e3131342e302f32332d3233203d3e203238363036.roa (raw, json)
Hash identifier:          zpnqdtLPv95Wtv8L7kZAy9s4YyOnCWIdBmUhxpWY8ZU=
Subject key identifier:   2E:7D:03:13:3D:C6:B0:AE:C0:18:62:4E:D1:07:B8:88:96:2F:2C:EC
Certificate issuer:       /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Certificate serial:       1D80AFB5CC7B01DE91B8C2CD169B3E7D5BD3ABEC
Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131342e302f32332d3233203d3e203238363036.roa
Signing time:             Thu 04 Apr 2024 17:13:10 +0000
ROA not before:           Thu 04 Apr 2024 17:08:10 +0000
ROA not after:            Thu 03 Apr 2025 17:13:10 +0000
asID:                     28606
IP address blocks:        138.59.114.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 23:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:80:af:b5:cc:7b:01:de:91:b8:c2:cd:16:9b:3e:7d:5b:d3:ab:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
        Validity
            Not Before: Apr  4 17:08:10 2024 GMT
            Not After : Apr  3 17:13:10 2025 GMT
        Subject: CN=2E7D03133DC6B0AEC018624ED107B888962F2CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6f:3a:d4:6c:92:aa:3b:4b:68:11:56:77:a3:
                    b2:e7:50:da:b9:38:71:28:65:71:72:c5:52:e1:10:
                    b7:56:88:44:e1:13:12:e4:59:5a:8b:6b:6c:4b:c9:
                    4e:77:3e:76:a2:87:a6:23:a6:bf:3b:0b:13:ae:d5:
                    c9:3b:8f:0f:37:31:2a:46:b8:a2:96:08:e7:f8:22:
                    21:f6:e9:9a:db:80:fb:ab:a1:8d:3a:e3:d7:25:10:
                    2b:14:45:30:e1:99:d6:5e:e3:42:34:cb:c5:f9:be:
                    f2:a4:53:24:cd:9a:de:ee:2d:71:59:37:f5:0f:ca:
                    a2:31:05:f0:53:05:a7:fc:55:12:ed:9e:53:4d:67:
                    a2:59:84:c8:54:f9:26:24:05:16:5b:14:ee:8d:eb:
                    d2:08:df:f9:07:6f:ee:d9:cb:9a:1e:a2:f6:6c:ad:
                    3c:38:ac:28:57:db:9e:03:e2:3a:9f:78:37:f8:82:
                    d2:59:d3:25:4a:69:de:f0:7d:c1:c5:f8:3f:df:3a:
                    72:c9:d1:01:a3:76:51:04:73:46:e0:c0:40:30:3f:
                    35:7b:7e:55:02:80:ee:85:d6:63:19:4e:0d:ee:ec:
                    fd:a5:0e:98:48:76:c7:c3:ce:c4:93:76:cc:0f:61:
                    5e:54:4f:4a:88:23:d3:42:01:99:7f:98:c8:cf:ea:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7D:03:13:3D:C6:B0:AE:C0:18:62:4E:D1:07:B8:88:96:2F:2C:EC
            X509v3 Authority Key Identifier:
                keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131342e302f32332d3233203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:9e:73:3e:01:c0:83:d4:a6:3e:72:48:d8:70:be:17:5a:9b:
         71:35:c8:08:9c:3c:de:b5:5c:ef:03:27:0a:15:55:14:13:cb:
         ea:89:f8:b6:6f:c3:1b:b4:1c:f4:43:79:b7:b5:ce:a3:66:04:
         14:59:68:12:3b:bb:2c:b1:35:83:a2:0a:3d:6d:70:04:8d:10:
         19:a7:eb:16:f9:2e:a8:6e:62:65:87:ff:29:e1:81:d6:3c:bc:
         77:20:82:c2:10:4a:6c:87:28:99:59:ff:cc:c8:df:d5:55:d9:
         47:11:34:b6:b4:3a:bc:3f:6e:72:e4:c9:aa:20:c4:da:56:e9:
         0c:39:f7:9c:1f:d0:e2:dc:0d:0a:35:2e:e1:41:e8:05:8c:6b:
         98:7f:18:f6:12:d9:06:d1:58:fb:fc:c1:d0:58:0b:94:ec:3f:
         a7:4d:45:89:97:69:55:92:51:0c:68:88:7d:97:04:4f:50:2e:
         f3:c3:54:24:5b:40:a8:07:0b:00:54:a1:f3:18:f2:ab:1f:bf:
         b8:6e:21:9e:49:79:5c:9a:67:a6:4d:78:ac:14:66:5e:9f:f4:
         6b:de:2c:c3:a0:34:3c:6f:33:32:f8:e7:5b:c7:4a:a2:bc:56:
         93:e5:21:dd:aa:33:fe:54:de:48:6d:a2:cd:1b:bb:4e:d3:81:
         01:59:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 01:57:52 2024 by rpki-client on console-ams.rpki-client.org