Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3133382e33362e35392e302f32342d3234203d3e203532363133.roa
File:                     3133382e33362e35392e302f32342d3234203d3e203532363133.roa (raw, json)
Hash identifier:          U8SybeW/ihKfRccELZniBu/S7q8n8z4rfuuRv4B/lgk=
Subject key identifier:   63:13:BC:DD:59:76:64:AC:C7:0E:8E:C9:A0:AF:4C:25:C8:3A:D6:F4
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       58E3AF807B0B40914110D82D28C8A9664807A7A6
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3133382e33362e35392e302f32342d3234203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:17 +0000
ROA not before:           Thu 04 Apr 2024 09:13:17 +0000
ROA not after:            Thu 03 Apr 2025 09:18:17 +0000
asID:                     52613
IP address blocks:        138.36.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 02 May 2024 12:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e3:af:80:7b:0b:40:91:41:10:d8:2d:28:c8:a9:66:48:07:a7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:17 2024 GMT
            Not After : Apr  3 09:18:17 2025 GMT
        Subject: CN=6313BCDD597664ACC70E8EC9A0AF4C25C83AD6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:57:d7:1f:c6:fd:28:70:24:21:ce:96:8c:a9:
                    50:af:7f:96:08:2b:c5:48:12:7a:6d:ba:dd:94:0e:
                    d2:ef:72:d3:30:6d:63:e0:d1:e0:ba:0d:84:8d:88:
                    5f:9c:0f:fb:0b:7a:24:49:b4:a6:d9:25:bf:f5:ab:
                    75:44:64:d1:f7:38:28:73:28:f4:17:43:e0:19:e7:
                    7d:22:28:b6:d9:d5:3b:1b:c9:8b:cb:fa:2c:de:3c:
                    4b:2d:09:4c:e3:70:93:82:de:99:a1:d4:f9:e2:dc:
                    c6:6c:e8:ed:96:ba:2c:ac:c9:b5:94:bf:5f:a9:c3:
                    3b:8e:52:43:a1:62:a1:dd:0c:b8:5f:87:a1:81:c6:
                    fe:f9:f9:17:34:9b:3b:4d:c6:d3:82:d3:e2:cc:e0:
                    13:18:fc:ed:10:2c:a2:c6:e4:2a:e8:eb:f0:74:e6:
                    a3:f7:41:9e:22:14:87:e4:02:8f:75:f8:7f:71:5d:
                    0a:80:8b:2e:c2:40:c7:58:d8:75:5e:76:d1:58:ef:
                    4c:35:fe:b0:37:41:3d:db:7b:64:3f:d6:10:4f:c3:
                    14:0e:bd:59:a1:16:15:26:47:42:bb:7d:08:e4:99:
                    d7:83:12:75:ab:88:c2:dd:c4:b9:c4:e6:e4:85:c5:
                    c0:97:e0:a2:ed:bb:0a:70:ed:9f:63:fb:3c:d4:46:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:13:BC:DD:59:76:64:AC:C7:0E:8E:C9:A0:AF:4C:25:C8:3A:D6:F4
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3133382e33362e35392e302f32342d3234203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:37:33:17:0d:ca:2c:15:b3:01:ef:10:42:69:47:a6:eb:ed:
         5d:3b:a5:45:4d:ac:76:39:18:a5:60:1f:73:53:98:0a:c4:6b:
         0d:e4:4f:2f:7d:eb:a3:c1:b9:29:57:b5:98:57:97:06:03:a4:
         2b:f2:eb:52:fa:78:ea:36:af:14:b4:83:aa:00:a4:dc:d9:37:
         ad:d3:50:f8:fc:07:8e:fb:1a:3f:53:74:aa:e8:5c:04:fb:3b:
         53:84:97:2e:c4:1d:40:d8:26:7d:38:28:fc:b8:1c:aa:2c:36:
         c7:f7:82:63:a8:00:76:cc:c2:61:33:77:7e:42:24:b1:b7:1f:
         09:90:cd:e0:01:55:b6:90:3a:d0:f2:2f:26:fd:bb:70:08:3c:
         c5:2b:41:08:f7:0b:44:6b:70:45:94:e1:e9:f8:5d:6b:af:dd:
         20:1a:15:dc:60:c9:9c:cf:53:1f:f9:b5:88:9d:15:f6:17:7f:
         ef:fc:91:cd:dd:c7:b3:4d:f7:8d:50:6a:4a:c7:b4:5a:e6:e8:
         f0:f4:92:a5:9c:7e:ef:b4:43:04:c2:a6:6e:6e:6e:7a:78:ab:
         f5:61:e2:e6:85:9e:45:3d:0b:ef:ef:55:54:aa:8c:88:88:ba:
         62:08:f9:bb:82:fd:5e:fa:3a:b9:a2:8f:0a:ac:ce:7b:8f:92:
         9c:bf:f1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:21 2024 by rpki-client on console-ams.rpki-client.org