Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36382e302f32322d3232203d3e20323730393139.roa
File:                     3133382e3138352e36382e302f32322d3232203d3e20323730393139.roa (raw, json)
Hash identifier:          DbHCYOoz8ipGH2BlASN+L2QJxghCAshNG1iwb2D8QNQ=
Subject key identifier:   98:79:96:69:32:05:1C:EB:AD:48:3C:7E:FF:D1:A2:A2:4F:F1:4D:7A
Certificate issuer:       /CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
Certificate serial:       07D170F41E32B12BAE4B77E4C3B31316052C43CC
Authority key identifier: 65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36382e302f32322d3232203d3e20323730393139.roa
Signing time:             Wed 03 Apr 2024 18:32:22 +0000
ROA not before:           Wed 03 Apr 2024 18:27:22 +0000
ROA not after:            Wed 02 Apr 2025 18:32:22 +0000
asID:                     270919
IP address blocks:        138.185.68.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d1:70:f4:1e:32:b1:2b:ae:4b:77:e4:c3:b3:13:16:05:2c:43:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
        Validity
            Not Before: Apr  3 18:27:22 2024 GMT
            Not After : Apr  2 18:32:22 2025 GMT
        Subject: CN=9879966932051CEBAD483C7EFFD1A2A24FF14D7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:62:a2:a5:5c:36:ff:bc:8d:27:f9:3f:3a:
                    97:11:e5:71:47:f8:3c:37:a8:37:77:a4:a6:2b:cf:
                    0e:6c:a9:0a:cc:f3:39:c8:94:1d:53:59:62:16:1b:
                    42:eb:a1:f4:f5:f8:5f:cf:af:d6:4b:3c:32:81:a3:
                    93:e2:83:36:9b:1e:48:0d:f9:1d:ea:ed:9f:a9:9a:
                    76:01:9d:29:11:96:92:8a:bf:41:46:b8:02:10:29:
                    f0:6e:73:87:73:70:5b:b4:8d:18:61:4d:8f:a1:5b:
                    49:94:49:3a:58:08:e4:b6:22:48:10:4f:76:ee:00:
                    e1:3b:a5:10:33:92:35:c4:6c:dd:ba:7f:05:58:15:
                    0f:90:03:6b:bd:22:0e:fd:fd:02:fc:99:77:c8:d4:
                    a9:3e:8c:5b:bf:8f:99:56:35:f5:f6:cd:51:99:d7:
                    4f:06:e2:b8:95:86:c0:ca:6c:32:4d:aa:e9:e4:58:
                    bb:58:50:28:da:db:d7:1e:13:aa:7d:0d:e6:74:50:
                    2d:e0:5e:36:28:11:17:30:97:63:ee:c7:89:f5:02:
                    c9:f2:b2:9c:ac:4c:9d:49:fa:4f:c0:f8:d5:5e:02:
                    2a:3f:d4:57:07:ca:da:75:bc:d3:2f:fc:e4:be:62:
                    96:14:12:e0:27:c1:86:66:26:9f:d8:98:cc:5f:57:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:79:96:69:32:05:1C:EB:AD:48:3C:7E:FF:D1:A2:A2:4F:F1:4D:7A
            X509v3 Authority Key Identifier:
                keyid:65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36382e302f32322d3232203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:44:83:99:4b:2d:f2:29:09:c2:e2:99:32:e7:64:85:8b:4c:
         e9:cb:c7:4a:4c:6d:41:f5:5b:ca:76:b3:15:7d:ab:e0:d1:c9:
         65:5e:75:e4:96:04:97:d7:ec:ee:9c:6c:74:f9:3c:36:ed:8e:
         c9:c7:6b:d7:91:86:44:56:b2:75:07:4a:e6:d7:80:0d:b8:f5:
         53:c5:e8:75:11:89:46:e3:85:32:09:1b:49:f7:e7:67:9c:a5:
         8a:73:bc:9f:00:80:b0:4e:ae:3e:07:8c:9c:9c:2d:f7:b8:b8:
         1b:9d:93:94:ed:67:b5:0b:de:6a:08:0d:8f:8b:f5:d0:95:78:
         37:d0:54:51:31:b0:3e:cd:ef:e0:76:f1:7c:8e:43:f1:3b:50:
         c3:f9:cd:30:fd:74:8f:53:be:4e:83:a5:28:6f:32:4f:60:51:
         43:7e:fc:32:be:44:32:27:75:fd:20:e7:64:aa:40:52:9e:3e:
         7e:cf:81:d4:7d:31:56:51:27:17:9d:23:8c:87:1e:c9:90:56:
         4a:f4:f4:f7:5d:cd:f6:e0:35:55:4b:5d:f2:60:f1:37:aa:1b:
         d6:5e:c3:96:62:ec:c2:ff:20:e1:f8:21:25:5b:d7:83:76:ca:
         ff:de:30:82:c1:ba:22:13:fc:b0:9c:1a:6c:f7:08:a5:bf:31:
         40:ff:8b:95
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUB9Fw9B4ysSuuS3fkw7MTFgUsQ8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVDRUI5MEIxOUI0OTNFRDY1RUVBQzU1OTY0M0Y0Q0VD
RDRGRUY1QzAeFw0yNDA0MDMxODI3MjJaFw0yNTA0MDIxODMyMjJaMDMxMTAvBgNV
BAMTKDk4Nzk5NjY5MzIwNTFDRUJBRDQ4M0M3RUZGRDFBMkEyNEZGMTREN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMGKipVw2/7yNJ/k/OpcR5XFH
+Dw3qDd3pKYrzw5sqQrM8znIlB1TWWIWG0LrofT1+F/Pr9ZLPDKBo5PigzabHkgN
+R3q7Z+pmnYBnSkRlpKKv0FGuAIQKfBuc4dzcFu0jRhhTY+hW0mUSTpYCOS2IkgQ
T3buAOE7pRAzkjXEbN26fwVYFQ+QA2u9Ig79/QL8mXfI1Kk+jFu/j5lWNfX2zVGZ
108G4riVhsDKbDJNqunkWLtYUCja29ceE6p9DeZ0UC3gXjYoERcwl2Pux4n1Asny
spysTJ1J+k/A+NVeAio/1FcHytp1vNMv/OS+YpYUEuAnwYZmJp/YmMxfVwKZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmHmWaTIFHOutSDx+/9Giok/xTXowHwYDVR0j
BBgwFoAUZc65Cxm0k+1l7qxVlkP0zs1P71wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWJENUR0MWZhWUM2VkRUOHdyNEQzR2lvZUxHTHJhbkhnTno2ZDNMYkV4
VnEvMS82NUNFQjkwQjE5QjQ5M0VENjVFRUFDNTU5NjQzRjRDRUNENEZFRjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1Q0VCOTBCMTlCNDkzRUQ2
NUVFQUM1NTk2NDNGNENFQ0Q0RkVGNUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ViRDVEdDFmYVlDNlZEVDh3cjREM0dpb2VMR0xyYW5IZ056NmQzTGJFeFZxLzEv
MzEzMzM4MmUzMTM4MzUyZTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzAzOTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKuUQwDQYJKoZIhvcNAQELBQADggEBADBEg5lL
LfIpCcLimTLnZIWLTOnLx0pMbUH1W8p2sxV9q+DRyWVedeSWBJfX7O6cbHT5PDbt
jsnHa9eRhkRWsnUHSubXgA249VPF6HURiUbjhTIJG0n352ecpYpzvJ8AgLBOrj4H
jJycLfe4uBudk5TtZ7UL3moIDY+L9dCVeDfQVFExsD7N7+B28XyOQ/E7UMP5zTD9
dI9Tvk6DpShvMk9gUUN+/DK+RDIndf0g52SqQFKePn7PgdR9MVZRJxedI4yHHsmQ
Vkr09PddzfbgNVVLXfJg8TeqG9Zew5Zi7ML/IOH4ISVb14N2yv/eMILBuiIT/LCc
Gmz3CKW/MUD/i5U=
-----END CERTIFICATE-----
Generated at Fri Jun 28 23:10:45 2024 by rpki-client on console-ams.rpki-client.org