Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e37302e302f32342d3234203d3e20323730393139.roa
File:                     3133382e3138352e37302e302f32342d3234203d3e20323730393139.roa (raw, json)
Hash identifier:          fddFYbfmgxRyBKZW7wMW1NX5gxFNIi8eZvcxa7OS0Ow=
Subject key identifier:   E7:6A:77:E0:94:9F:93:C6:94:E5:CF:AD:70:D4:47:D1:DA:F9:E6:D0
Certificate issuer:       /CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
Certificate serial:       0B20276F08423A15A640FC367890DF3B7B37E90C
Authority key identifier: 65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e37302e302f32342d3234203d3e20323730393139.roa
Signing time:             Wed 03 Apr 2024 18:32:21 +0000
ROA not before:           Wed 03 Apr 2024 18:27:21 +0000
ROA not after:            Wed 02 Apr 2025 18:32:21 +0000
asID:                     270919
IP address blocks:        138.185.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:20:27:6f:08:42:3a:15:a6:40:fc:36:78:90:df:3b:7b:37:e9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
        Validity
            Not Before: Apr  3 18:27:21 2024 GMT
            Not After : Apr  2 18:32:21 2025 GMT
        Subject: CN=E76A77E0949F93C694E5CFAD70D447D1DAF9E6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:f4:fa:94:6f:fb:68:e9:d9:74:fb:dd:d1:
                    b3:ed:8c:a1:8a:e2:aa:5a:70:52:a8:e6:d4:48:9c:
                    e2:e7:9c:4d:3e:13:d2:03:e6:2b:20:6b:5a:bd:13:
                    6b:22:38:61:39:b5:17:0a:fd:98:79:b8:eb:c2:b5:
                    8e:60:7b:f6:22:38:22:7a:0d:ff:93:a8:52:86:cb:
                    67:6f:17:aa:71:73:c8:29:22:30:c4:92:57:af:33:
                    a5:fc:2a:41:c5:c6:85:85:2e:d7:17:fc:2a:2a:d8:
                    cb:39:ff:81:d8:40:fa:91:b3:d8:35:3e:6e:ef:80:
                    96:ef:b8:fb:67:97:12:6c:17:79:5d:ee:ef:38:a3:
                    99:fe:10:f5:a3:fd:4a:7e:68:19:47:1c:39:f7:34:
                    3a:86:2d:bf:a7:f7:4b:f2:e5:29:f0:cc:3d:c6:dd:
                    1a:bd:b8:69:5e:08:82:aa:9c:5f:40:02:01:cf:bf:
                    3e:4e:22:ca:63:09:b5:67:3c:5d:17:1f:32:0e:44:
                    e8:28:95:0a:18:5c:7b:0d:80:d5:22:08:bb:e4:b5:
                    31:ec:69:36:be:95:d2:c1:8a:75:e0:31:ce:dc:51:
                    28:39:92:5f:7a:ee:10:aa:34:59:98:00:2c:20:dd:
                    f8:ac:e0:e0:5f:89:5d:81:f2:70:ad:39:16:1d:50:
                    8c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6A:77:E0:94:9F:93:C6:94:E5:CF:AD:70:D4:47:D1:DA:F9:E6:D0
            X509v3 Authority Key Identifier:
                keyid:65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e37302e302f32342d3234203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:62:0e:64:58:81:a4:cf:22:1f:74:22:12:9b:52:f8:38:9e:
         da:ee:e8:88:39:58:38:40:95:0a:cc:9c:65:3f:bb:9a:d5:af:
         da:f0:2a:97:dd:4b:3a:ea:05:12:9e:40:59:3e:6c:72:f2:e9:
         90:d0:43:f3:fa:13:b0:90:f7:93:25:b6:c5:7d:3f:1f:16:a6:
         a9:f5:a4:b7:22:5d:08:0c:68:cd:3d:de:01:68:08:28:fd:86:
         65:54:8b:61:05:1f:ca:54:99:40:57:e7:6f:19:9b:08:c7:6a:
         77:fe:09:ac:1d:33:3a:c4:1f:6f:6a:ef:f8:b2:03:2f:e8:45:
         af:b9:18:4d:2d:b4:02:2b:2f:ff:61:af:7a:2e:7e:ae:40:2f:
         f2:de:87:15:33:cb:61:22:d2:24:23:b7:70:5e:d8:ef:ec:dd:
         1b:e9:0c:73:ce:aa:b1:37:af:1a:17:f8:dc:9d:6c:4e:7d:ce:
         23:7e:1e:74:75:dd:7d:d0:bc:35:5f:58:d4:44:97:54:da:c1:
         39:43:df:29:f1:fd:c9:5a:d7:51:6f:67:93:1d:84:d5:c5:d3:
         04:88:3e:4d:86:34:05:a9:3f:f9:cd:52:1f:0a:0d:af:3a:f2:
         44:83:4a:24:20:20:4d:ab:ad:74:f2:a9:33:90:5e:91:93:5d:
         c0:df:68:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:42:11 2024 by rpki-client on console-fra.rpki-client.org