Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34322e302f32342d3234203d3e20323633303836.roa
File:                     3133382e39392e34322e302f32342d3234203d3e20323633303836.roa (raw, json)
Hash identifier:          U3Bo9HV5879B1ZT6o2A84z3+AeM576Hc14+tdWhRweU=
Subject key identifier:   BB:FC:DF:A3:41:14:56:31:3E:42:B2:17:58:45:46:05:DA:E3:B3:77
Certificate issuer:       /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial:       72E48310DF8737DB532B116ED201A2E66371BEC7
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34322e302f32342d3234203d3e20323633303836.roa
Signing time:             Tue 28 May 2024 14:22:52 +0000
ROA not before:           Tue 28 May 2024 14:17:52 +0000
ROA not after:            Tue 27 May 2025 14:22:52 +0000
asID:                     263086
IP address blocks:        138.99.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 17:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e4:83:10:df:87:37:db:53:2b:11:6e:d2:01:a2:e6:63:71:be:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
        Validity
            Not Before: May 28 14:17:52 2024 GMT
            Not After : May 27 14:22:52 2025 GMT
        Subject: CN=BBFCDFA3411456313E42B21758454605DAE3B377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:73:2f:6e:26:b2:fe:16:ed:b7:ce:5a:c8:
                    b9:bd:cf:2b:fd:3d:5e:a7:42:d1:54:1f:b4:e6:85:
                    9a:74:59:77:f4:4a:1a:20:6c:99:ae:27:58:78:79:
                    76:82:13:b8:29:9a:ed:77:10:a4:02:72:79:65:67:
                    c7:5b:02:10:0f:63:ad:26:25:a3:8c:a8:69:ee:59:
                    5f:98:5c:19:22:fc:cd:43:5a:77:b9:37:43:86:36:
                    37:8f:e4:c2:ff:08:07:8a:a6:27:ea:06:86:0d:cb:
                    3d:29:81:55:48:9c:8b:6f:63:8f:6a:9e:c2:ba:23:
                    b7:8a:b7:d5:25:45:38:4c:3f:21:4d:47:b0:8a:b5:
                    c2:fc:fd:05:52:7b:90:7b:2a:3d:61:53:b3:ca:2f:
                    b1:d8:22:a3:04:8d:38:b4:5a:c8:1c:07:28:60:ff:
                    a1:e5:4a:d1:8a:db:81:c5:a8:8a:17:67:22:67:a2:
                    89:88:38:93:95:90:bc:55:26:4f:52:d4:2b:55:45:
                    14:35:7c:43:e4:95:56:c9:cd:70:9d:32:ea:30:76:
                    b4:e4:5d:56:48:c8:04:b4:7d:15:83:0e:75:8c:0b:
                    45:5f:13:54:e3:6f:eb:db:18:17:07:b1:f6:50:cc:
                    70:5c:30:27:bc:54:dd:68:90:10:56:2b:d0:b9:13:
                    f2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FC:DF:A3:41:14:56:31:3E:42:B2:17:58:45:46:05:DA:E3:B3:77
            X509v3 Authority Key Identifier:
                keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34322e302f32342d3234203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:9c:4a:48:fa:ce:7e:e6:c4:70:df:4c:0e:1c:3a:c2:c6:
         88:97:62:54:ea:30:c8:2e:2a:d9:28:40:4f:22:80:31:c2:c3:
         d9:3c:ab:32:d5:41:fb:d7:a5:c4:14:1a:9a:da:26:56:fd:f9:
         47:b5:19:a4:23:11:63:92:f7:3c:94:d1:99:c5:d7:e7:8e:75:
         15:cb:6c:23:38:2d:3b:4f:86:a0:57:10:9c:2d:f6:26:69:af:
         9e:02:e7:34:e6:c7:a5:4c:df:7f:cf:15:cf:6d:fa:fb:ac:6f:
         6b:7f:ec:df:be:2b:07:21:b1:96:21:a5:19:05:c5:79:2e:5a:
         ec:31:96:81:40:f1:d5:49:c0:01:44:f7:d3:dc:08:2c:d2:ce:
         50:3e:63:a2:24:d4:e9:0d:18:76:3c:f0:05:d1:46:f5:86:63:
         6a:52:57:b1:f2:65:2f:48:2e:d8:a7:87:1f:c4:ed:73:7e:e0:
         5f:75:bd:4a:f5:84:ec:c3:95:ce:2a:80:47:23:15:da:bf:5b:
         27:e9:7b:e5:3d:31:67:ed:16:98:7e:08:df:35:de:75:c2:3a:
         da:cc:89:45:86:d3:94:be:f1:69:04:68:40:d9:ab:d6:e3:bf:
         13:4f:ea:f5:fe:54:d9:66:e6:cb:98:38:6b:c4:99:56:6e:6c:
         39:6e:8a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:35:30 2024 by rpki-client on console-fra.rpki-client.org