Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34342e302f32322d3232203d3e20323632333639.roa
File:                     3133382e302e34342e302f32322d3232203d3e20323632333639.roa (raw, json)
Hash identifier:          HBi+6pwgTn6LowlSKhNQnPKzbB3iIGGKZQ++sfHJHVQ=
Subject key identifier:   69:5D:E1:5B:97:81:E2:6B:7D:14:92:42:17:6C:18:19:78:FA:A5:DA
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       2E80EB99728C1A064EB769AF92108768026901DE
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34342e302f32322d3232203d3e20323632333639.roa
Signing time:             Wed 03 Apr 2024 18:33:00 +0000
ROA not before:           Wed 03 Apr 2024 18:28:00 +0000
ROA not after:            Wed 02 Apr 2025 18:33:00 +0000
asID:                     262369
IP address blocks:        138.0.44.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:80:eb:99:72:8c:1a:06:4e:b7:69:af:92:10:87:68:02:69:01:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Apr  3 18:28:00 2024 GMT
            Not After : Apr  2 18:33:00 2025 GMT
        Subject: CN=695DE15B9781E26B7D149242176C181978FAA5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:47:2e:d9:1c:45:16:70:52:af:b7:0c:95:
                    d2:a8:4b:30:be:c6:2c:4d:7c:7e:9c:75:5f:85:aa:
                    f9:55:88:ca:db:b1:67:4e:36:6c:0e:aa:2d:66:3f:
                    df:8e:7c:37:e3:84:36:94:09:00:bb:8a:a4:ba:03:
                    d5:5e:46:f3:13:97:8e:60:a4:a3:fb:98:6c:07:6d:
                    0e:1e:02:01:da:2d:df:a6:ce:87:60:d8:4c:18:f4:
                    a4:86:21:73:55:e0:0d:7d:08:e1:7a:c9:99:45:b5:
                    6f:07:bf:24:99:58:ec:61:8d:ab:e9:e1:7f:2b:77:
                    29:0e:58:47:09:d5:80:35:e7:83:2e:4f:00:5b:13:
                    1b:d4:df:97:3f:82:2c:e7:36:c7:25:7d:33:a4:87:
                    9e:a7:ce:e0:68:e9:66:d3:7e:eb:9e:7a:a3:d9:87:
                    5d:57:99:a5:16:2e:a1:18:0e:23:9b:59:18:b2:76:
                    54:49:25:d8:fa:c0:e4:38:0b:a9:90:ec:bf:3b:0a:
                    9a:ce:3d:32:f8:a7:50:33:82:82:83:a6:20:a5:c2:
                    98:32:80:8b:99:19:d1:b0:4c:df:05:7c:4a:06:6f:
                    4a:e2:a8:b6:d6:28:fd:17:cd:ad:74:ac:07:9c:94:
                    92:92:82:45:cf:d3:1b:1c:26:b6:c9:1d:50:19:48:
                    13:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5D:E1:5B:97:81:E2:6B:7D:14:92:42:17:6C:18:19:78:FA:A5:DA
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34342e302f32322d3232203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:84:fb:fd:f1:51:86:4f:df:62:f1:0b:16:bc:3e:a4:d5:35:
         aa:dd:f9:e9:b6:00:c9:fa:41:ee:3e:c1:42:dc:d7:a2:55:21:
         ab:37:eb:b1:86:3b:c6:0e:48:7c:e3:2d:38:e6:98:52:d8:79:
         8c:bc:52:5b:99:0b:7f:bb:48:ba:a1:0b:1f:d5:e7:6b:b3:cb:
         08:3a:30:36:bd:41:75:ff:3a:80:3c:a2:17:14:ff:01:38:2e:
         70:d5:5e:f5:0e:4a:a8:6e:f4:af:47:f9:0b:6b:da:35:f1:83:
         24:36:d8:fc:61:4e:7b:37:57:a5:ab:3f:86:44:fc:f9:f1:86:
         cd:b3:5c:03:9c:ca:54:23:81:82:c4:e7:ea:31:73:94:39:c7:
         27:c7:9f:6c:d9:43:66:e6:6f:52:5b:4b:af:54:ed:19:6e:e1:
         47:e8:c9:7b:21:96:cd:0d:77:f3:0a:9b:06:b0:98:86:f3:2d:
         d5:1a:6f:2e:5f:de:1e:61:c5:f3:06:69:cf:57:ff:3a:d1:66:
         55:9e:e8:f5:7d:1d:47:ea:72:6a:45:b5:d9:e9:4e:25:ee:41:
         e2:cc:95:e7:72:4a:ca:2d:88:aa:0e:30:6b:96:f0:ba:07:2e:
         59:65:57:6a:1f:da:70:2d:62:28:ce:d8:82:61:66:63:83:8b:
         6a:ad:04:48
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULoDrmXKMGgZOt2mvkhCHaAJpAd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y0NkExMzIzNDgxNDNFN0I2MEQ1NEFDNTk5QkU3NDg2
OEIwMDgyOTAeFw0yNDA0MDMxODI4MDBaFw0yNTA0MDIxODMzMDBaMDMxMTAvBgNV
BAMTKDY5NURFMTVCOTc4MUUyNkI3RDE0OTI0MjE3NkMxODE5NzhGQUE1REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67kcu2RxFFnBSr7cMldKoSzC+
xixNfH6cdV+FqvlViMrbsWdONmwOqi1mP9+OfDfjhDaUCQC7iqS6A9VeRvMTl45g
pKP7mGwHbQ4eAgHaLd+mzodg2EwY9KSGIXNV4A19COF6yZlFtW8HvySZWOxhjavp
4X8rdykOWEcJ1YA154MuTwBbExvU35c/giznNsclfTOkh56nzuBo6WbTfuueeqPZ
h11XmaUWLqEYDiObWRiydlRJJdj6wOQ4C6mQ7L87CprOPTL4p1AzgoKDpiClwpgy
gIuZGdGwTN8FfEoGb0riqLbWKP0Xza10rAeclJKSgkXP0xscJrbJHVAZSBNFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUaV3hW5eB4mt9FJJCF2wYGXj6pdowHwYDVR0j
BBgwFoAUz0ahMjSBQ+e2DVSsWZvnSGiwCCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWFyYWZGZ25SYVk1TGlhWE5HYVZpdWlGU3RWd0dvS1dqMUs1N3I1dzJ3
dXIvMS9DRjQ2QTEzMjM0ODE0M0U3QjYwRDU0QUM1OTlCRTc0ODY4QjAwODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGNDZBMTMyMzQ4MTQzRTdC
NjBENTRBQzU5OUJFNzQ4NjhCMDA4MjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhcmFmRmduUmFZNUxpYVhOR2FWaXVpRlN0VndHb0tXajFLNTdyNXcyd3VyLzEv
MzEzMzM4MmUzMDJlMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMjMz
MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAooALDANBgkqhkiG9w0BAQsFAAOCAQEAi4T7/fFRhk/f
YvELFrw+pNU1qt356bYAyfpB7j7BQtzXolUhqzfrsYY7xg5IfOMtOOaYUth5jLxS
W5kLf7tIuqELH9Xna7PLCDowNr1Bdf86gDyiFxT/ATgucNVe9Q5KqG70r0f5C2va
NfGDJDbY/GFOezdXpas/hkT8+fGGzbNcA5zKVCOBgsTn6jFzlDnHJ8efbNlDZuZv
UltLr1TtGW7hR+jJeyGWzQ138wqbBrCYhvMt1RpvLl/eHmHF8wZpz1f/OtFmVZ7o
9X0dR+pyakW12elOJe5B4syV53JKyi2Iqg4wa5bwugcuWWVXah/acC1iKM7YgmFm
Y4OLaq0ESA==
-----END CERTIFICATE-----
Generated at Mon Jun 10 16:21:30 2024 by rpki-client on console-fra.rpki-client.org