Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34312e302f32342d3234203d3e20323633303836.roa
File:                     3133382e39392e34312e302f32342d3234203d3e20323633303836.roa (raw, json)
Hash identifier:          laJDA+5YJi7nl5paoVh2Nc7wtUgGKPLiTi55mNIRHJg=
Subject key identifier:   66:54:E1:0E:E4:99:57:20:5E:83:31:79:F3:53:C6:54:8C:3A:45:A2
Certificate issuer:       /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial:       31AB7699600E5ADB0C420E5CDD57971B21330D09
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34312e302f32342d3234203d3e20323633303836.roa
Signing time:             Tue 28 May 2024 14:22:22 +0000
ROA not before:           Tue 28 May 2024 14:17:22 +0000
ROA not after:            Tue 27 May 2025 14:22:22 +0000
asID:                     263086
IP address blocks:        138.99.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 17:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ab:76:99:60:0e:5a:db:0c:42:0e:5c:dd:57:97:1b:21:33:0d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
        Validity
            Not Before: May 28 14:17:22 2024 GMT
            Not After : May 27 14:22:22 2025 GMT
        Subject: CN=6654E10EE49957205E833179F353C6548C3A45A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:8b:c4:38:fa:4c:e5:c1:df:ee:ae:25:f3:
                    42:17:8a:86:7e:be:ca:27:70:4e:3f:31:5c:7d:04:
                    85:96:6b:c6:08:1d:b4:41:63:81:1d:37:07:ae:a0:
                    52:9c:6e:73:52:4c:81:b4:05:e4:2d:75:3c:bd:12:
                    a8:3c:48:3b:f4:d2:06:56:e9:5c:d2:38:2b:4e:1d:
                    48:ae:22:f6:30:0d:ed:30:41:ab:b7:ee:0e:ea:28:
                    b0:a6:28:c4:ef:51:d6:f7:3c:fb:01:e2:b5:df:5b:
                    7c:3c:d8:ac:f6:ac:3c:f9:83:ff:62:39:78:22:e0:
                    85:6e:2a:ed:3e:89:1a:b5:67:f8:8a:d4:39:b4:b1:
                    59:d8:19:40:27:91:63:cb:dc:7e:ab:42:af:27:17:
                    f7:f5:90:c2:42:6c:38:cf:9f:27:72:f5:1a:18:1f:
                    f9:f1:7c:07:b9:9f:de:ed:ea:df:cb:4b:7f:16:4a:
                    c2:a6:b4:26:32:d3:40:65:0b:39:2f:26:3c:74:09:
                    4a:be:4a:e3:8a:80:c4:d0:8d:b7:e8:25:6d:bd:0c:
                    f2:82:c0:2a:3b:c1:fc:0f:3e:e2:99:95:32:58:b6:
                    4e:54:68:65:c7:04:d1:0e:08:fd:79:b8:fe:3c:4e:
                    76:ad:ce:64:98:59:b7:d1:9c:25:e2:37:d3:54:77:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:54:E1:0E:E4:99:57:20:5E:83:31:79:F3:53:C6:54:8C:3A:45:A2
            X509v3 Authority Key Identifier:
                keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34312e302f32342d3234203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:5e:1e:54:e2:0f:19:6d:ff:cb:ff:6f:8c:b6:bf:68:60:cd:
         b7:a3:4b:f7:7d:a3:0b:aa:f5:9e:06:ae:66:8f:26:46:44:02:
         f4:7d:8d:43:04:3d:f0:ca:72:3c:71:cc:e4:54:35:d4:66:24:
         3b:c5:15:f8:6d:55:d8:6c:6f:f8:d4:cf:08:be:9c:c1:2f:d5:
         89:bb:0d:90:09:16:cd:51:e8:59:55:22:ef:51:ef:54:6d:5b:
         cf:2b:68:21:8b:59:a0:2e:db:67:bb:0c:36:91:ae:3c:59:9e:
         c7:b4:dc:08:3e:a4:63:b9:25:fd:7a:1d:86:29:cd:bf:87:3b:
         cb:03:d8:14:2d:87:cf:20:cc:e7:7e:f6:29:54:b1:88:18:d8:
         9a:3c:84:6f:3e:59:0e:a4:2f:91:4f:ba:2e:94:a5:ee:94:c7:
         5b:e3:31:08:67:2b:3b:55:e8:35:05:9b:4f:ae:1a:43:0d:8e:
         51:41:2f:d6:ad:d4:1d:fa:93:82:4f:de:72:e9:2a:11:0e:7e:
         a5:56:43:87:a1:b2:05:a6:f3:8d:fc:e9:db:75:d3:df:48:cc:
         9d:96:3d:df:fe:05:47:ed:5a:dc:51:ef:26:0c:ab:86:45:e8:
         c1:59:7b:fc:53:15:1d:d3:bc:70:c4:f4:cd:0e:c4:36:69:d3:
         a9:a8:49:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 00:00:37 2024 by rpki-client on console-ams.rpki-client.org