Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38302e302f32322d3232203d3e20323634353731.roa
File:                     3133382e33362e38302e302f32322d3232203d3e20323634353731.roa (raw, json)
Hash identifier:          xCA7Athgip1WjhaCIVk/+EfIpSoT7mHAQTd6Sl/tkbc=
Subject key identifier:   EC:94:E9:BD:19:B4:F1:5E:DB:6E:99:57:5F:07:BF:01:2D:B7:1A:E0
Certificate issuer:       /CN=84210C699884A23E38D45F40B27833D84A440F91
Certificate serial:       230B111B5538AEB26158E13E75631A9A893096B4
Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38302e302f32322d3232203d3e20323634353731.roa
Signing time:             Wed 03 Apr 2024 18:32:11 +0000
ROA not before:           Wed 03 Apr 2024 18:27:11 +0000
ROA not after:            Wed 02 Apr 2025 18:32:11 +0000
asID:                     264571
IP address blocks:        138.36.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0b:11:1b:55:38:ae:b2:61:58:e1:3e:75:63:1a:9a:89:30:96:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91
        Validity
            Not Before: Apr  3 18:27:11 2024 GMT
            Not After : Apr  2 18:32:11 2025 GMT
        Subject: CN=EC94E9BD19B4F15EDB6E99575F07BF012DB71AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e3:39:79:9b:9d:b2:56:55:40:3b:15:08:fd:
                    de:32:ca:37:ea:26:e6:37:f3:64:2e:ab:e9:5e:d6:
                    5b:1c:d3:6e:9a:57:4d:25:73:b3:33:10:a0:3f:bf:
                    90:e6:5c:96:07:dd:82:54:0d:87:3a:1a:eb:32:f3:
                    a1:89:39:55:bc:41:4e:45:86:21:1a:44:10:95:53:
                    44:1d:f7:4f:38:d7:94:35:04:ca:16:0c:9e:77:fa:
                    c1:9c:6e:45:6c:72:ef:a1:4b:98:14:e1:12:73:6b:
                    ec:ed:e8:e5:f2:df:3c:8f:a1:7f:db:79:35:8b:c0:
                    35:a0:75:d3:6c:9c:ab:80:d8:0e:a5:e7:1a:77:0a:
                    72:d9:f7:c8:3d:7a:4b:8e:cf:5c:9b:65:9b:5a:3a:
                    09:6b:92:19:db:f1:31:66:41:b0:67:ec:e7:cc:37:
                    15:23:ba:e9:ca:74:e9:f5:d2:cb:24:ce:98:62:96:
                    ab:ed:64:22:a7:08:83:2c:37:55:4e:20:66:a8:1e:
                    3f:ef:8c:80:51:d0:a6:c4:9e:97:66:56:89:55:f6:
                    78:99:55:4a:44:df:81:68:3a:bd:40:c6:09:1a:db:
                    8e:06:da:39:6d:a7:4a:47:0a:ed:32:7c:37:86:89:
                    90:1f:5e:88:ea:41:7c:2b:ab:76:99:2e:5f:1d:d8:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:94:E9:BD:19:B4:F1:5E:DB:6E:99:57:5F:07:BF:01:2D:B7:1A:E0
            X509v3 Authority Key Identifier:
                keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38302e302f32322d3232203d3e20323634353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:5a:ea:a8:92:f5:81:58:67:8c:14:5d:06:50:95:30:8d:73:
         83:df:4c:e6:0b:57:6f:4c:d4:a4:fa:82:03:aa:48:c8:75:95:
         14:70:64:4c:19:61:04:b9:9f:ba:84:f7:cc:37:7b:71:9c:83:
         73:65:e9:5a:f7:6e:34:ed:c7:08:40:8e:de:78:82:a6:be:bf:
         78:e0:11:92:87:f1:4f:28:92:5d:21:49:a7:1d:74:da:b3:bc:
         19:82:28:26:4c:07:a6:e0:e8:3d:4d:76:e7:87:8c:55:8b:05:
         27:c0:9e:64:e2:9f:c6:d8:39:20:06:d5:71:87:8d:19:f6:ad:
         e4:e0:46:7b:a3:0b:6f:64:05:f2:31:67:7d:3d:1c:c5:45:ce:
         8d:3a:6b:fc:63:a3:87:db:57:e0:03:bf:aa:8b:03:cc:be:5a:
         bd:9f:29:a7:c1:4b:59:76:80:6c:0c:14:d1:80:6d:0b:cf:72:
         74:8a:9a:49:9d:0a:6a:60:0f:dc:e5:df:b5:a9:e2:6e:63:b3:
         fd:43:cf:88:c0:51:67:e0:06:69:ef:57:5f:01:a9:b3:4e:c2:
         f9:2f:53:f4:79:8a:3a:57:90:b9:c1:a4:c7:6d:a0:76:b0:2f:
         e2:36:46:5f:c4:6d:5f:4d:35:46:2e:ce:d2:1b:7a:94:53:13:
         15:0d:3a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 20:15:45 2024 by rpki-client on console-ams.rpki-client.org