Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3133382e33362e35382e302f32342d3234203d3e203532363133.roa
File:                     3133382e33362e35382e302f32342d3234203d3e203532363133.roa (raw, json)
Hash identifier:          92mPWwwasVo13XVI1W/gN/iIaSc6ubqpI5/uRRbrzng=
Subject key identifier:   D4:FD:01:1C:CE:DB:F1:C8:21:84:94:FA:7C:05:B2:87:7F:7C:98:65
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       42E86638488FBBE92092F51A35913869D8D977EA
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3133382e33362e35382e302f32342d3234203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:18 +0000
ROA not before:           Thu 04 Apr 2024 09:13:18 +0000
ROA not after:            Thu 03 Apr 2025 09:18:18 +0000
asID:                     52613
IP address blocks:        138.36.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 02 May 2024 12:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e8:66:38:48:8f:bb:e9:20:92:f5:1a:35:91:38:69:d8:d9:77:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:18 2024 GMT
            Not After : Apr  3 09:18:18 2025 GMT
        Subject: CN=D4FD011CCEDBF1C8218494FA7C05B2877F7C9865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:23:ff:89:05:0a:9d:3b:a3:91:d9:64:4d:
                    db:02:0f:1d:8a:3a:6b:e4:ed:b1:9b:3b:c9:07:ce:
                    38:b4:19:55:87:66:82:d7:07:d6:3f:a4:e4:c2:66:
                    60:29:33:19:8c:0b:6f:f5:70:ff:65:9c:46:09:60:
                    7d:ab:64:90:88:dc:eb:2a:eb:4b:48:d7:71:c4:73:
                    1a:57:8b:83:9a:96:9d:38:a6:11:ff:80:1d:89:71:
                    be:a1:2f:aa:43:bf:67:b1:dc:87:3b:2b:81:e7:a1:
                    90:30:7e:ef:e4:33:43:4d:d3:6c:97:b2:fd:7b:e5:
                    50:c3:4f:bb:b5:99:2b:9e:fd:19:08:61:c6:eb:36:
                    07:07:7a:16:2f:c5:0d:1d:7a:06:da:f7:7f:55:17:
                    d2:b1:75:f3:20:40:1e:87:b3:32:dd:18:ee:ae:7e:
                    10:a8:da:fb:e0:2e:ae:1d:4b:e0:7a:89:98:95:c6:
                    5b:f3:69:e5:44:97:38:8c:b4:19:e0:39:fd:b5:5c:
                    7d:15:17:88:48:b1:01:76:ca:4c:ba:eb:42:e9:b2:
                    55:1c:7d:dd:95:b2:91:7c:d1:5f:e0:3a:bf:aa:54:
                    a8:30:0f:70:0e:f3:7f:1e:41:51:3f:a8:88:80:d9:
                    d2:8c:94:be:85:d0:91:3c:98:eb:2e:a9:3f:47:33:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FD:01:1C:CE:DB:F1:C8:21:84:94:FA:7C:05:B2:87:7F:7C:98:65
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3133382e33362e35382e302f32342d3234203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:62:ab:f0:ab:da:16:02:7e:c5:37:4c:f2:3e:25:a8:3c:34:
         c0:3f:46:45:e3:de:7e:87:99:aa:6a:c4:a8:23:99:8e:75:c9:
         8e:e1:f7:71:4c:61:8b:28:67:a5:ca:56:88:3e:17:33:b7:32:
         08:e7:49:8b:2b:dd:c2:98:a3:51:d3:cd:81:4b:ed:82:9e:d5:
         b0:6f:dd:ef:d2:d5:ea:1d:2e:ba:e1:74:63:ff:5b:5c:66:88:
         dd:78:04:3b:81:24:d0:fc:83:80:e9:62:18:ce:bb:fa:9a:a2:
         02:8a:d0:87:ef:c4:01:fb:18:ac:88:2d:5d:be:76:98:b0:91:
         b1:51:0b:b1:f3:63:4d:d1:b3:85:14:44:2c:45:1a:d1:38:7c:
         8b:51:70:7c:48:a0:a7:a6:38:6c:d3:06:92:bd:ad:49:f2:b3:
         b6:98:e1:2a:73:14:8c:ad:a8:df:35:f1:f3:8d:87:fe:7d:c1:
         ae:a0:85:56:cd:c0:75:b9:99:58:46:50:d5:64:56:9f:0e:9b:
         ba:82:40:a0:fd:cf:79:19:16:a5:1f:6e:88:cb:15:a7:e9:e0:
         46:3e:cb:cb:c8:ac:0b:60:c9:33:df:5e:e5:c2:b3:38:64:bd:
         3a:db:b0:4b:8c:d0:7a:5f:be:95:9f:19:8a:47:6e:a0:bf:32:
         ef:74:65:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org