Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34332e302f32342d3234203d3e20323633303836.roa
File:                     3133382e39392e34332e302f32342d3234203d3e20323633303836.roa (raw, json)
Hash identifier:          RV6VqDlM1wtdvEGzYZ05G7vJaRS2Lv79ZogLplWBea0=
Subject key identifier:   1D:EE:DE:96:13:62:6E:63:D6:0F:AC:9C:25:AD:A5:6B:55:6D:FD:63
Certificate issuer:       /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial:       31369893617ABE14B5A3F1D525153AEC10F8D8B4
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34332e302f32342d3234203d3e20323633303836.roa
Signing time:             Tue 28 May 2024 14:23:06 +0000
ROA not before:           Tue 28 May 2024 14:18:06 +0000
ROA not after:            Tue 27 May 2025 14:23:06 +0000
asID:                     263086
IP address blocks:        138.99.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 17:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:36:98:93:61:7a:be:14:b5:a3:f1:d5:25:15:3a:ec:10:f8:d8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
        Validity
            Not Before: May 28 14:18:06 2024 GMT
            Not After : May 27 14:23:06 2025 GMT
        Subject: CN=1DEEDE9613626E63D60FAC9C25ADA56B556DFD63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:04:f8:cb:40:41:7d:da:ed:2c:e5:e2:df:39:
                    82:1b:e5:c1:fb:74:48:c6:a7:e9:52:0c:aa:48:fb:
                    81:23:ef:7c:c1:8e:5b:f1:27:8f:60:33:83:f0:fd:
                    29:c2:92:b9:fb:57:7b:1f:e2:83:90:e3:89:8a:f3:
                    f1:3e:b6:18:56:ca:80:6c:96:c8:fc:a2:a5:98:a2:
                    96:2c:e0:54:e2:8b:38:71:5e:68:ae:10:74:46:3a:
                    7d:72:6e:f7:1c:f3:a5:0b:6c:d3:58:10:d7:87:26:
                    cb:d0:75:f9:ce:f7:13:92:7c:f4:42:22:c2:58:72:
                    c3:88:17:f3:4f:92:a0:50:d2:8a:2d:1d:52:21:44:
                    91:6a:d0:be:6d:3c:bb:6f:85:42:5b:a6:db:80:b5:
                    fe:52:dd:08:80:b0:43:e6:14:bf:e6:93:91:3e:24:
                    db:d6:2d:ba:af:fe:83:6a:98:71:58:78:0c:d8:18:
                    ad:9b:95:cc:fd:d1:77:9e:58:1c:0e:13:f1:64:57:
                    6a:3a:fa:7d:14:82:d9:b5:7a:00:b7:9b:29:47:59:
                    f6:94:8d:59:31:31:60:91:f1:2e:b8:9b:17:3e:a9:
                    44:55:d1:13:d5:13:ca:01:e6:54:9e:7f:4d:57:cf:
                    94:47:e3:6a:ac:7b:50:5c:cf:8f:d9:9e:24:a3:0d:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EE:DE:96:13:62:6E:63:D6:0F:AC:9C:25:AD:A5:6B:55:6D:FD:63
            X509v3 Authority Key Identifier:
                keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34332e302f32342d3234203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:bc:a5:cf:f9:f0:13:cc:ff:23:4c:5d:bf:3d:27:ae:e4:44:
         a8:f4:de:8e:7c:11:b4:bf:b5:8d:e6:84:d5:4a:b0:ba:1b:65:
         e6:52:2e:c2:03:5d:68:17:60:c3:5e:e6:f9:e5:77:e6:2f:6c:
         2f:86:bb:cd:2d:f2:9c:4d:fa:ad:eb:fd:1e:03:d6:f0:ef:40:
         10:d3:3b:f9:0c:8b:9e:76:f6:ea:93:41:3a:32:03:e7:a6:9e:
         f6:f1:45:89:47:22:e4:4f:6d:86:2a:a7:23:8d:1c:19:4c:31:
         81:82:63:9e:a4:b5:e3:1e:14:3b:08:88:41:bd:4c:6e:25:44:
         bd:04:85:fe:e2:a4:06:3a:6e:60:6e:4a:8c:dd:5e:0f:73:68:
         2a:d6:0f:9f:8a:6b:70:32:0a:cb:2a:ff:75:f3:0b:cb:32:65:
         3f:65:07:12:22:e8:13:1d:5f:51:7a:20:23:4c:b7:11:cd:f9:
         c6:1a:84:92:53:52:a5:7b:c7:1e:aa:48:24:55:8a:d6:fb:4e:
         5c:cb:7f:9f:57:8f:99:99:b8:ea:d7:90:52:1b:3b:54:1e:cc:
         b6:71:aa:06:44:f5:6f:eb:d6:80:a8:fb:a0:80:72:97:12:33:
         45:1a:7e:0b:39:c2:a9:e4:2b:66:9e:7a:d9:f8:54:f1:cc:8b:
         3f:55:dc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:35:30 2024 by rpki-client on console-fra.rpki-client.org