Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36382e302f32342d3234203d3e20323730393139.roa
File:                     3133382e3138352e36382e302f32342d3234203d3e20323730393139.roa (raw, json)
Hash identifier:          dn+jUntKHctULhHtZGcaUoEbhJLJd6OL3riBzC40YUE=
Subject key identifier:   0F:A7:D8:1A:1D:F5:D7:BF:35:58:B7:CE:E1:CA:90:07:0B:7D:35:C2
Certificate issuer:       /CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
Certificate serial:       31671B064D40851210DEB9F7F3E08D75659A5048
Authority key identifier: 65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36382e302f32342d3234203d3e20323730393139.roa
Signing time:             Wed 03 Apr 2024 18:32:22 +0000
ROA not before:           Wed 03 Apr 2024 18:27:22 +0000
ROA not after:            Wed 02 Apr 2025 18:32:22 +0000
asID:                     270919
IP address blocks:        138.185.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:67:1b:06:4d:40:85:12:10:de:b9:f7:f3:e0:8d:75:65:9a:50:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
        Validity
            Not Before: Apr  3 18:27:22 2024 GMT
            Not After : Apr  2 18:32:22 2025 GMT
        Subject: CN=0FA7D81A1DF5D7BF3558B7CEE1CA90070B7D35C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5b:98:8e:c1:e8:e2:9b:75:91:a5:7d:67:2f:
                    57:8e:d8:ab:9c:43:e1:8f:30:51:81:73:5b:0a:e6:
                    7d:11:72:1f:e3:d0:a6:d8:54:bf:55:db:a6:c9:3a:
                    74:9d:88:59:e6:c5:1f:91:92:67:41:63:8b:f8:ad:
                    84:b5:a2:d1:2a:5a:09:5c:10:74:4c:0b:9a:7e:fc:
                    2b:20:97:c8:e1:66:b7:88:9b:0a:cd:65:04:14:fc:
                    1c:72:57:21:b1:fa:23:a6:ff:ad:3d:fe:e3:ca:98:
                    5d:b8:d8:90:63:80:60:82:3f:fc:02:a2:a2:f5:57:
                    88:7f:59:65:83:5a:30:07:d8:0d:8e:b5:89:a3:cb:
                    1e:b2:f8:8e:05:96:26:8c:07:b0:e3:17:55:c7:91:
                    d1:8c:22:58:1b:f3:6b:a9:5f:bf:5b:47:77:dd:20:
                    68:ce:96:a2:ac:37:77:49:10:08:78:7c:f6:4e:cf:
                    72:b9:5c:6f:20:32:93:36:08:9d:66:76:2a:52:ae:
                    43:80:3a:42:6e:88:08:f3:08:6a:8c:ba:22:0e:28:
                    cc:4c:6a:89:18:93:f5:74:b0:0b:7f:2e:45:08:0f:
                    eb:54:f9:45:da:45:1b:94:c8:3c:bc:9c:5b:f6:7b:
                    a9:c3:35:ca:71:de:55:38:fb:eb:ad:38:6e:b0:b0:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A7:D8:1A:1D:F5:D7:BF:35:58:B7:CE:E1:CA:90:07:0B:7D:35:C2
            X509v3 Authority Key Identifier:
                keyid:65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36382e302f32342d3234203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:f3:fa:4a:dc:cb:9f:55:b4:53:ab:11:c5:7d:89:06:61:c7:
         8f:13:3c:3f:20:27:97:35:58:fa:43:58:f5:ba:64:76:ca:ba:
         ad:0c:2a:5b:b0:da:de:fc:2f:ab:08:bc:27:3f:7f:c8:12:e9:
         ec:bb:a7:08:71:74:21:0f:c1:2b:a0:90:2e:b8:f0:f8:d8:38:
         36:63:82:f8:39:f0:f0:76:95:49:f7:cd:d5:0a:59:18:b8:d5:
         d5:ce:11:52:c5:8b:a8:04:68:d4:1f:38:c9:0f:33:6d:0a:14:
         0e:b0:d6:9c:b8:0d:98:33:da:b6:b8:9c:97:cd:ba:b4:a4:33:
         ba:44:32:e2:61:69:97:4b:78:33:16:5f:40:67:68:b5:96:4a:
         70:95:ab:74:cc:d2:f7:71:19:87:b9:ef:13:bd:d0:91:af:1c:
         b4:03:ab:5b:b1:c9:5e:30:43:58:a3:45:72:e5:59:4c:d6:94:
         ed:70:c5:fc:3c:fe:7e:ce:ee:03:6c:dd:87:7a:15:1d:a5:ee:
         20:cf:2b:3c:a5:68:a8:2d:73:b3:35:b8:98:00:fd:fa:a1:35:
         39:01:73:d4:e9:b1:73:e6:bd:ea:fb:0a:93:bf:f1:d0:9e:1d:
         2e:a7:1e:61:8a:00:87:69:7d:32:46:99:77:90:3b:1c:70:85:
         c4:a7:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:42:11 2024 by rpki-client on console-fra.rpki-client.org