Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3133382e33362e35362e302f32322d3232203d3e203532363133.roa
File:                     3133382e33362e35362e302f32322d3232203d3e203532363133.roa (raw, json)
Hash identifier:          bxdih0HtZDr1uhJBvxWvX+IPIKGovcUlTWhHqtKcuDY=
Subject key identifier:   B4:65:C7:13:C3:AC:C1:60:45:38:E7:29:BF:9D:60:EA:A0:95:82:BC
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       21C93BE45D7FF3BCC48AF831B985CA2CE6EA5CC2
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3133382e33362e35362e302f32322d3232203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:17 +0000
ROA not before:           Thu 04 Apr 2024 09:13:17 +0000
ROA not after:            Thu 03 Apr 2025 09:18:17 +0000
asID:                     52613
IP address blocks:        138.36.56.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 02 May 2024 12:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c9:3b:e4:5d:7f:f3:bc:c4:8a:f8:31:b9:85:ca:2c:e6:ea:5c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:17 2024 GMT
            Not After : Apr  3 09:18:17 2025 GMT
        Subject: CN=B465C713C3ACC1604538E729BF9D60EAA09582BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:68:01:e7:06:d8:0d:e7:90:5c:48:50:9f:
                    29:e9:c9:b1:e6:cc:e3:86:29:97:3b:8b:1f:5b:d4:
                    06:5e:c5:53:c7:83:6d:05:23:54:c4:20:54:19:16:
                    12:d1:11:6b:9a:ad:29:6f:00:3e:dd:a1:6a:13:71:
                    be:97:10:63:bb:5e:55:08:4d:4c:55:a0:12:8e:98:
                    44:23:d7:56:36:23:37:3e:8c:d1:aa:1a:40:ae:29:
                    21:dc:41:6f:0b:b2:f6:3b:60:22:2f:94:c2:9d:3c:
                    25:9a:52:b0:cc:01:33:9c:97:34:19:03:52:f3:99:
                    a5:54:d7:b4:38:ac:d6:2a:ee:39:da:b8:34:bb:60:
                    6c:d3:ad:45:c4:d7:d8:40:d2:94:c0:73:d3:15:6a:
                    99:ef:c8:86:a5:0e:7b:77:8f:3f:5d:4a:04:58:f2:
                    12:fc:bf:93:a3:41:6f:0f:c8:b9:ac:c7:87:7d:94:
                    b6:bf:f7:1a:11:d4:fe:0a:89:ec:c2:68:a7:ad:44:
                    9a:0f:e6:9f:c9:41:49:2f:c1:9f:d7:65:74:1e:c8:
                    6b:63:29:80:50:98:93:0c:f6:c7:13:37:3f:12:34:
                    95:22:97:a3:80:8f:c8:f4:8a:68:39:8b:b9:1b:03:
                    eb:81:94:7f:17:fa:ae:ea:45:45:3e:15:9e:29:4f:
                    14:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:65:C7:13:C3:AC:C1:60:45:38:E7:29:BF:9D:60:EA:A0:95:82:BC
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3133382e33362e35362e302f32322d3232203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:2a:c4:be:52:a7:1f:87:e5:d4:78:e1:43:8c:91:b8:05:dd:
         96:9e:4b:c1:de:7f:9e:52:75:14:40:0f:1f:18:18:23:30:df:
         2b:37:e1:4b:f6:c6:a7:6c:2c:40:61:3c:24:9e:db:b6:e1:54:
         49:11:20:f0:75:4f:ea:73:57:76:da:e8:2f:b9:50:27:55:2a:
         85:00:9e:21:31:be:5e:40:84:10:c3:e1:00:68:47:f4:4f:54:
         3c:26:6e:6a:d0:a5:9f:98:df:36:ac:e7:2a:bf:3b:a1:94:70:
         ca:62:f0:62:85:26:f6:d6:9c:56:e1:88:87:28:56:55:ee:a5:
         be:ea:cd:20:43:be:f5:97:b4:f1:b9:83:31:21:d1:79:a2:96:
         b3:04:44:86:0b:e2:10:25:55:a7:ad:4a:b6:8b:22:58:f4:42:
         f0:17:18:74:db:04:3f:3f:ff:ea:a1:2e:10:9b:0c:da:c2:46:
         c3:c6:00:be:11:23:30:ca:fd:76:ac:1e:f1:de:84:34:3c:5c:
         d2:66:98:7f:b5:f3:5c:1f:82:09:da:77:66:c4:46:5a:6e:5d:
         4e:2f:64:ef:49:aa:0a:c8:0c:2d:ca:75:0c:3e:ec:96:ca:13:
         6d:79:5e:8a:61:43:4b:82:da:df:af:9e:79:11:36:63:4d:26:
         dd:1b:76:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:21 2024 by rpki-client on console-ams.rpki-client.org