Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34302e302f32342d3234203d3e20323633303836.roa
File:                     3133382e39392e34302e302f32342d3234203d3e20323633303836.roa (raw, json)
Hash identifier:          nV/IKxypGlllp8KVxTasr4zBzJLFUrD5/LDl81/7r70=
Subject key identifier:   94:C3:65:CB:BB:C9:8D:3E:13:4D:17:CC:0D:1F:F0:F4:F3:C3:EE:D4
Certificate issuer:       /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial:       6831412B5B8B2BF2AD275077A309311FE5D373B2
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34302e302f32342d3234203d3e20323633303836.roa
Signing time:             Tue 28 May 2024 14:22:06 +0000
ROA not before:           Tue 28 May 2024 14:17:06 +0000
ROA not after:            Tue 27 May 2025 14:22:06 +0000
asID:                     263086
IP address blocks:        138.99.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 17:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:31:41:2b:5b:8b:2b:f2:ad:27:50:77:a3:09:31:1f:e5:d3:73:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
        Validity
            Not Before: May 28 14:17:06 2024 GMT
            Not After : May 27 14:22:06 2025 GMT
        Subject: CN=94C365CBBBC98D3E134D17CC0D1FF0F4F3C3EED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:dd:57:64:99:52:28:9a:71:db:1a:23:a0:
                    52:31:9c:23:85:6f:9c:62:9d:bd:be:a3:c5:bd:de:
                    40:03:10:63:2d:dc:5a:8e:d1:c1:9d:d5:77:e3:94:
                    98:fa:dd:4f:68:c7:47:3f:eb:98:72:16:58:14:e0:
                    73:69:e1:3c:5a:5f:fd:ed:79:c6:04:78:22:70:d8:
                    aa:fc:69:e4:64:4d:c3:6c:a2:0d:c3:fd:e4:57:3b:
                    e4:55:86:cb:36:cd:08:72:1a:f2:cc:bd:87:91:9c:
                    41:6e:f8:47:b4:d8:a2:94:83:b5:64:e2:90:5a:41:
                    0e:20:dc:da:b6:3a:b9:2c:ef:e0:5b:37:8e:b0:53:
                    8c:23:2b:5e:4a:16:9d:02:fe:e1:33:67:cd:10:06:
                    01:6e:44:7a:ab:c1:0e:94:9a:bf:a2:0d:10:81:38:
                    ac:34:67:35:4d:68:ef:68:2d:41:d6:8a:02:19:68:
                    3d:13:a2:2f:b5:a7:05:09:ba:e7:b1:57:44:75:88:
                    36:2b:cb:2c:91:be:af:08:9b:33:fb:88:39:ac:d6:
                    f2:2d:2b:d9:fa:f8:56:06:a6:cb:0a:87:55:64:41:
                    a9:74:8a:c3:ed:45:c9:01:ff:2a:cf:64:d0:9b:47:
                    93:8e:dd:53:ec:95:f6:f9:d9:2b:ba:43:63:bc:5f:
                    3b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C3:65:CB:BB:C9:8D:3E:13:4D:17:CC:0D:1F:F0:F4:F3:C3:EE:D4
            X509v3 Authority Key Identifier:
                keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34302e302f32342d3234203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:4d:a1:2e:39:1c:3a:a1:04:d8:b8:8b:cd:49:cf:3d:0c:3c:
         f3:82:5c:42:34:b5:06:9a:da:d7:f2:7b:fd:8f:08:d0:98:18:
         76:e6:a4:a5:8c:d7:83:a2:49:4d:b3:69:95:89:49:36:c8:ac:
         a5:d8:42:56:5a:25:f9:80:34:34:79:74:12:94:80:c7:73:33:
         a8:64:d5:b6:07:ba:f6:69:f0:06:13:87:de:fd:b6:2f:db:8b:
         51:d3:fb:3c:77:88:79:20:2c:d8:18:74:f1:2b:ce:dd:0e:7f:
         f1:34:27:02:9f:0e:96:fe:22:1c:c5:29:bf:bf:31:e5:ff:68:
         92:e1:11:13:bf:e8:02:fe:e2:27:65:47:37:2d:34:a7:33:e1:
         14:7a:d9:78:48:3b:d0:9a:36:b3:c8:64:32:9b:e3:cf:52:9e:
         70:8c:2a:e1:9a:47:86:b3:e4:52:01:71:07:9c:1f:2c:26:8f:
         39:f8:6c:b9:55:3c:54:2d:77:2b:b4:c6:3e:49:a2:5a:c9:8f:
         8a:f6:9e:c2:e7:ee:82:b4:b3:d3:5c:26:c0:16:02:cc:80:1b:
         1c:6f:d1:a0:22:61:cf:c2:04:a6:06:c5:29:a5:79:e3:b8:79:
         47:46:04:68:91:99:ef:1e:c4:e8:36:2e:f2:77:67:45:eb:35:
         b5:b2:ca:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 00:00:37 2024 by rpki-client on console-ams.rpki-client.org