Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36392e302f32342d3234203d3e20323730393139.roa
File:                     3133382e3138352e36392e302f32342d3234203d3e20323730393139.roa (raw, json)
Hash identifier:          /1J1lrlvCA/H1q36o3ZrgyTy1i3rm8dXKzKcZf4TPps=
Subject key identifier:   9D:FF:1F:96:96:5C:4E:CC:D4:82:FE:8D:65:01:37:EC:C3:0D:38:F2
Certificate issuer:       /CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
Certificate serial:       17CC16D7BBFE04174B0DD51063F0EE2B2F658252
Authority key identifier: 65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36392e302f32342d3234203d3e20323730393139.roa
Signing time:             Wed 03 Apr 2024 18:32:21 +0000
ROA not before:           Wed 03 Apr 2024 18:27:21 +0000
ROA not after:            Wed 02 Apr 2025 18:32:21 +0000
asID:                     270919
IP address blocks:        138.185.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cc:16:d7:bb:fe:04:17:4b:0d:d5:10:63:f0:ee:2b:2f:65:82:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
        Validity
            Not Before: Apr  3 18:27:21 2024 GMT
            Not After : Apr  2 18:32:21 2025 GMT
        Subject: CN=9DFF1F96965C4ECCD482FE8D650137ECC30D38F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:45:75:ba:38:5d:64:59:f0:0d:71:14:da:41:
                    73:fb:63:57:e7:74:6b:f0:43:da:b9:24:a4:5a:e3:
                    ec:99:d9:5a:3b:38:b9:b7:39:4a:6b:10:2a:88:f3:
                    cf:18:c6:49:ff:04:bf:9c:ac:6a:23:5a:ec:46:3e:
                    32:ab:42:40:6a:ec:91:f0:be:75:6f:56:89:05:f4:
                    2a:30:b3:de:85:ca:c7:dd:bc:47:42:06:d6:d5:33:
                    55:96:4b:f1:e9:09:a1:51:58:e5:59:78:82:79:c8:
                    ad:ee:9f:fb:33:57:a9:13:81:e0:9e:f6:90:1a:e6:
                    be:f2:e9:59:cf:1c:8f:1a:af:e4:da:6e:26:f8:a1:
                    83:7b:ba:2a:5e:14:cd:0f:77:27:eb:11:13:9f:78:
                    35:23:aa:17:41:40:68:6b:fc:c1:c1:8d:1f:ee:24:
                    43:4d:9d:56:5f:40:09:cf:e3:21:7d:8e:0c:a8:75:
                    93:c9:37:49:1a:15:07:5a:d6:98:e2:7c:69:ed:af:
                    df:58:4f:bf:42:db:55:24:69:46:91:e1:0a:7a:9e:
                    76:1f:a3:7f:27:84:fc:4e:61:2f:5d:49:bc:e7:65:
                    68:a6:d8:de:73:b0:e7:2a:fc:be:46:b4:4f:34:e2:
                    df:a3:23:b7:31:b7:5f:9c:85:fb:d7:19:b6:05:6b:
                    38:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FF:1F:96:96:5C:4E:CC:D4:82:FE:8D:65:01:37:EC:C3:0D:38:F2
            X509v3 Authority Key Identifier:
                keyid:65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36392e302f32342d3234203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:f8:4f:b1:7b:9f:59:21:dd:6a:01:6e:44:ec:7e:83:b3:e0:
         e1:f5:d8:19:b5:0d:a0:b1:65:d4:fd:14:34:6f:c1:6b:6a:c1:
         89:d6:76:11:df:2c:e3:7f:b4:c5:16:0a:80:2c:27:4b:4f:0c:
         bb:54:89:fe:8e:9d:d9:fb:c4:e6:75:d1:f6:d6:99:67:1b:4f:
         64:21:37:81:fb:60:1b:a7:8d:c9:cb:b2:97:ef:2a:da:1d:b0:
         5a:c7:ec:4b:e2:8e:c3:f7:e2:5f:60:81:b9:18:49:0a:3f:4d:
         d9:34:6a:30:24:0a:87:cd:3a:ac:12:e3:7a:8b:9b:c8:3b:d3:
         e4:55:fe:af:cc:9b:36:ef:3f:ac:b6:f4:af:cc:0e:44:d6:d0:
         3c:62:bc:db:81:aa:09:27:bf:f5:70:0d:a4:9b:3e:db:0c:a2:
         8e:15:b1:45:86:67:f3:42:7c:2a:c6:ed:8b:b0:87:fa:dd:11:
         0f:be:3c:60:68:24:85:0b:c7:a5:68:6d:65:7b:42:0d:6c:c4:
         37:f7:18:49:bf:4c:14:3c:48:40:29:e9:a1:75:5b:76:49:48:
         34:b6:ec:ce:70:6b:de:35:f0:23:c1:a6:d8:89:e8:8c:31:af:
         9a:c1:98:51:e1:cd:33:e0:1f:9f:a0:e8:f4:fc:3e:1b:02:4f:
         46:37:7e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:42:11 2024 by rpki-client on console-fra.rpki-client.org