Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131352e302f32342d3234203d3e203238363036.roa
File:                     3133382e35392e3131352e302f32342d3234203d3e203238363036.roa (raw, json)
Hash identifier:          yjAdZdtrfh9EQzKktmfzrlp9Uz3Hz65xB7o9/8IGEvw=
Subject key identifier:   53:5E:73:BD:E9:91:12:74:F4:C0:D6:9D:F2:2F:ED:92:5F:B5:BE:62
Certificate issuer:       /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Certificate serial:       3616D07463BC63A85FA5C2D31086BDF50D0EC8CE
Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131352e302f32342d3234203d3e203238363036.roa
Signing time:             Fri 03 May 2024 15:38:00 +0000
ROA not before:           Fri 03 May 2024 15:33:00 +0000
ROA not after:            Fri 02 May 2025 15:38:00 +0000
asID:                     28606
IP address blocks:        138.59.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 23:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:16:d0:74:63:bc:63:a8:5f:a5:c2:d3:10:86:bd:f5:0d:0e:c8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
        Validity
            Not Before: May  3 15:33:00 2024 GMT
            Not After : May  2 15:38:00 2025 GMT
        Subject: CN=535E73BDE9911274F4C0D69DF22FED925FB5BE62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:a8:40:1d:f3:a6:5d:9f:d7:be:cf:1f:cf:
                    49:c5:a5:83:cb:cc:df:ab:af:3d:55:55:c5:d0:68:
                    37:6a:6f:f0:fe:a7:e5:98:40:53:1a:82:3e:97:1d:
                    cb:32:83:b2:64:43:a0:3b:ed:4f:e5:44:d9:0d:b7:
                    9e:cb:b8:c3:ca:2e:04:a3:15:fe:ef:4c:bf:64:23:
                    f1:dc:98:b8:57:c0:a9:e6:8f:dc:04:3b:8f:0e:1c:
                    14:d6:6a:d9:12:c1:54:ab:80:90:70:15:b2:7a:b9:
                    78:a1:84:80:9f:30:8b:65:7c:8a:0a:7a:80:ba:19:
                    0a:05:47:5b:f7:65:04:85:10:c4:36:d1:0c:35:b5:
                    26:99:5c:a6:f2:dc:4e:39:b1:d3:81:1f:ed:fb:59:
                    d1:1b:a4:85:98:ce:45:cc:87:21:be:8f:60:a9:f4:
                    2c:f3:73:e1:14:c8:35:13:ae:d0:88:0a:a2:3b:21:
                    24:ff:76:8c:b2:08:b3:1f:77:07:9a:40:a7:3b:24:
                    97:27:04:fc:3a:df:67:4e:dd:b1:53:a6:59:2c:83:
                    b6:4b:08:fd:16:0b:e2:f2:e3:4a:7a:e1:95:b6:6e:
                    18:89:d0:dd:b9:9d:b7:00:6b:fa:8b:d1:31:31:80:
                    20:38:7d:d0:d1:b4:e0:bb:d6:ee:c4:b1:7b:43:68:
                    73:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5E:73:BD:E9:91:12:74:F4:C0:D6:9D:F2:2F:ED:92:5F:B5:BE:62
            X509v3 Authority Key Identifier:
                keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3133382e35392e3131352e302f32342d3234203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:38:91:0f:2d:ce:cb:b1:f5:c2:27:e6:82:18:1b:3b:c1:73:
         52:e8:e6:dc:42:07:25:db:dd:e0:16:a0:f8:f2:2a:6f:04:bb:
         21:e3:8d:71:2c:be:e7:91:d0:0b:49:86:d5:08:fa:0c:ce:79:
         4d:cd:df:e7:3c:d7:7c:99:08:63:7d:03:8e:c2:15:39:52:f4:
         73:86:ac:14:37:9b:c1:ef:d5:1a:36:58:fd:41:0c:ac:0c:af:
         90:6b:14:0c:da:e9:7a:04:4d:38:53:be:87:0b:16:ad:e0:7d:
         52:cb:20:69:c1:32:4e:3e:83:01:25:a8:17:c8:88:67:4a:76:
         53:dc:88:79:53:95:5d:4f:8a:06:aa:16:73:23:a9:e4:ec:6e:
         f2:a2:ff:30:be:52:3f:9a:76:52:d4:a3:b2:b1:7d:03:cd:6a:
         6e:5c:1c:d4:3f:40:04:c9:d5:b0:19:f5:8b:bf:7f:a0:27:09:
         99:75:13:d6:58:73:2b:22:73:ad:a4:24:57:34:18:7a:ab:f8:
         54:63:98:87:5f:f4:3d:d2:3e:38:ef:bf:e0:f6:69:ea:11:1a:
         b3:e7:3d:01:69:db:b9:12:98:86:d1:9e:7f:01:bc:0d:34:9a:
         c9:c9:8f:ed:dd:df:cd:3f:0c:dd:f2:94:b5:e7:7f:0e:83:15:
         28:61:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 00:27:45 2024 by rpki-client on console-fra.rpki-client.org