Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34372e302f32342d3234203d3e20323632333639.roa
File:                     3133382e302e34372e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          MTAZEdtMYhw9sE59A38DH6CKI8HSiw18Q19t/asfPRM=
Subject key identifier:   91:3A:F6:66:B8:FC:E1:28:C4:21:79:D8:BC:DA:CD:E8:A2:FF:94:16
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       0CC27070E48FB8E26954B90255ACD06091CFB83E
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34372e302f32342d3234203d3e20323632333639.roa
Signing time:             Mon 10 Jun 2024 14:04:31 +0000
ROA not before:           Mon 10 Jun 2024 13:59:31 +0000
ROA not after:            Mon 09 Jun 2025 14:04:31 +0000
asID:                     262369
IP address blocks:        138.0.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Jun 2025 14:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c2:70:70:e4:8f:b8:e2:69:54:b9:02:55:ac:d0:60:91:cf:b8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Jun 10 13:59:31 2024 GMT
            Not After : Jun  9 14:04:31 2025 GMT
        Subject: CN=913AF666B8FCE128C42179D8BCDACDE8A2FF9416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:29:4b:a2:36:49:95:1e:e3:76:cf:5b:9b:
                    01:8e:50:ac:5b:b8:ef:14:67:8e:e5:53:5a:18:b9:
                    1b:ab:95:18:70:c7:9a:45:08:c2:4d:d1:ef:20:8c:
                    9a:ed:8d:42:56:88:c8:58:6f:99:01:d9:5d:60:e1:
                    9a:88:cb:ef:45:67:93:2c:a2:8c:e3:50:6d:6b:2e:
                    e9:98:1c:dd:ce:40:92:77:cd:66:ae:59:a1:0d:0d:
                    5e:2c:b3:97:41:f1:85:3c:ca:e6:64:9e:01:02:8d:
                    e4:32:df:a9:a4:7d:20:d4:17:86:79:0d:17:f1:8b:
                    90:43:e0:7b:dd:07:38:66:2b:e1:28:f4:e5:40:cb:
                    ed:92:c7:ce:52:95:20:71:cd:31:03:5c:7c:3c:f2:
                    9e:24:fc:31:ee:49:6b:4c:4e:36:ab:f5:54:0e:f0:
                    7f:ff:f1:d9:4e:4c:bb:4f:bb:5d:3e:c6:ac:92:de:
                    bf:5d:e4:eb:0c:0d:cd:f2:f3:56:75:d8:2a:0f:4e:
                    a6:13:db:6a:79:7a:3a:e3:2b:fd:d4:83:ba:d2:9d:
                    31:f7:1a:6e:f0:9e:16:78:eb:8b:bf:8a:5b:19:f8:
                    81:d3:43:ba:6c:3c:03:42:5d:a5:e5:42:e4:f2:47:
                    c1:2f:b3:80:f0:d7:76:7a:6d:f7:77:ce:fd:c6:62:
                    cc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3A:F6:66:B8:FC:E1:28:C4:21:79:D8:BC:DA:CD:E8:A2:FF:94:16
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3133382e302e34372e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:4c:2d:c0:1a:8a:96:18:3e:d5:99:5b:c1:e0:af:cd:0c:67:
         64:20:06:b7:15:bd:8d:da:5b:b0:62:db:ea:f3:cf:f8:be:69:
         dc:e6:58:f0:c5:59:57:59:c7:da:bb:c0:0b:a2:be:53:1e:43:
         16:c1:3c:dc:fc:2a:9f:7e:d4:dd:e9:33:19:30:a6:81:0f:fd:
         bd:b2:a2:da:87:3c:a1:35:4e:dd:a3:fa:31:25:a8:ea:61:5b:
         71:78:a5:3b:9f:85:44:27:69:b7:0e:5f:6e:d6:89:40:a7:40:
         59:41:de:b5:17:e8:f1:61:74:4e:ef:8b:9a:28:e8:71:5c:f7:
         d9:06:15:b0:c6:8d:55:0b:9e:d8:db:fb:71:75:99:96:6c:a3:
         f5:ed:ef:0c:ae:d3:8e:a0:24:38:52:c5:88:4d:e5:0e:82:44:
         49:58:0a:4e:7d:8f:39:d6:dc:25:a1:bb:37:bf:cb:86:71:6c:
         47:27:fb:69:12:09:4d:71:09:7b:a2:b7:d6:87:3f:df:ea:98:
         b8:0b:fc:b8:98:05:cd:96:56:55:ee:4d:61:00:33:ee:39:00:
         48:01:4d:a3:b0:f9:f5:93:ab:3a:85:8a:44:94:79:9b:7f:e4:
         49:ae:66:30:d7:7f:36:b0:5b:ba:98:22:5d:fa:e7:52:37:a9:
         44:5c:b6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 21:17:14 2024 by rpki-client on console-ams.rpki-client.org