Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34352e302f32342d3234203d3e20323632333639.roa
File:                     3133382e302e34352e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          nai1jIr5ER5UEwML5SgQUkXWz7p/t9Q8a2s+ZU4at/I=
Subject key identifier:   A9:3C:51:D0:35:80:A0:5A:5D:03:51:4D:29:8F:75:62:6D:5F:41:6A
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       7753304057BDDB1FDE316F7137C8460834387A2F
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34352e302f32342d3234203d3e20323632333639.roa
Signing time:             Mon 10 Jun 2024 14:04:30 +0000
ROA not before:           Mon 10 Jun 2024 13:59:30 +0000
ROA not after:            Mon 09 Jun 2025 14:04:30 +0000
asID:                     262369
IP address blocks:        138.0.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Jun 2025 14:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:53:30:40:57:bd:db:1f:de:31:6f:71:37:c8:46:08:34:38:7a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Jun 10 13:59:30 2024 GMT
            Not After : Jun  9 14:04:30 2025 GMT
        Subject: CN=A93C51D03580A05A5D03514D298F75626D5F416A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:92:57:2a:db:84:22:5b:3b:63:a6:95:b1:
                    42:78:7a:7d:9b:44:03:85:21:3b:8e:70:14:eb:9c:
                    e0:3f:e1:f0:9f:67:4d:3f:29:e4:46:7b:7b:4d:c0:
                    d2:ac:33:05:85:36:34:26:ec:bb:fb:17:34:82:47:
                    c8:3a:bb:ad:2e:5f:11:19:c0:d9:5d:78:dc:47:ae:
                    6b:9a:61:6b:7c:10:9b:b3:b4:8f:68:0d:ec:0f:6f:
                    2d:f5:8b:f7:0c:58:14:9f:a9:7f:d2:c2:d4:36:ed:
                    d3:f8:1c:e9:eb:6e:b5:30:67:61:62:6d:c1:17:9a:
                    7e:ca:8d:89:49:dc:84:e9:28:b5:b4:66:f5:a4:07:
                    b8:28:ea:84:ce:f4:53:50:59:27:f9:45:cf:48:fd:
                    a7:6d:d9:31:7d:78:dd:cd:6e:11:1d:ba:73:dc:d4:
                    78:93:5b:1d:51:09:a0:cf:f3:b5:73:72:79:1a:e6:
                    d1:82:63:58:5e:c8:80:09:51:fd:1a:d0:5d:67:8d:
                    a5:05:5b:83:0b:9a:10:1b:ee:3c:e7:db:70:7e:ed:
                    f3:1e:e7:a6:32:33:b2:10:ec:84:83:3e:65:30:5b:
                    da:08:73:fa:bb:61:fc:25:4b:23:28:2f:39:75:52:
                    66:e0:4e:c5:dc:fb:a4:ab:81:da:4e:13:4e:21:31:
                    26:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3C:51:D0:35:80:A0:5A:5D:03:51:4D:29:8F:75:62:6D:5F:41:6A
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34352e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:37:03:f6:81:1a:12:55:ed:c9:f9:c7:62:04:ae:c9:a9:71:
         b4:e7:16:99:87:e1:93:5e:a8:df:4d:38:1e:03:6d:66:d3:84:
         3a:3c:c5:29:c3:44:29:41:6c:99:76:1e:53:c5:46:dc:04:11:
         45:ed:58:58:02:0b:e6:bb:96:a2:5c:91:a4:21:43:7d:88:1e:
         24:b6:9d:98:9c:77:c2:60:73:5c:d2:98:cc:e0:92:c5:6c:9b:
         52:b0:83:eb:85:8b:b8:84:29:6d:2a:35:74:04:96:e5:c1:73:
         ed:b5:22:13:05:21:2e:c4:86:a2:7b:47:39:1a:f6:04:de:7a:
         5a:93:0f:a8:c1:6c:50:79:11:3c:dd:ab:4c:2d:bb:7b:91:38:
         bd:ec:0d:e3:a0:3f:d2:a3:05:7c:36:cc:20:c4:23:95:b7:1c:
         08:74:3d:21:f6:b0:9c:78:66:2e:6b:55:d6:a9:af:15:a5:19:
         f9:e0:ce:1d:19:46:74:b4:d9:c6:91:39:a4:97:fd:ce:bb:37:
         06:ee:de:40:4c:ab:85:cb:d0:84:e5:55:47:31:9a:a9:61:b4:
         76:e9:89:cc:fe:3a:85:31:dc:21:5e:5d:70:84:b5:ed:4b:7c:
         b9:39:80:fa:9d:c7:50:ca:ec:d4:33:e1:53:fc:bc:60:a9:17:
         4e:de:64:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 19:39:13 2024 by rpki-client on console-fra.rpki-client.org