Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/3137372e33382e36382e302f32322d3232203d3e203532373838.roa
File:                     3137372e33382e36382e302f32322d3232203d3e203532373838.roa (raw, json)
Hash identifier:          HwBgZE4mC6NtmuKvZ/w+ehfJD6eAiZ5YKnVg39ffrcM=
Subject key identifier:   E9:E4:ED:61:93:78:9D:7B:4F:DE:AE:68:62:9B:28:8A:F2:C6:B1:F0
Certificate issuer:       /CN=33D444D18668AFF627287DE909F4EDC258CA9CC3
Certificate serial:       56B3C689A16D1D5E0F814D8AFF346B0D5506C9BE
Authority key identifier: 33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/3137372e33382e36382e302f32322d3232203d3e203532373838.roa
Signing time:             Thu 25 Apr 2024 17:52:09 +0000
ROA not before:           Thu 25 Apr 2024 17:47:09 +0000
ROA not after:            Thu 24 Apr 2025 17:52:09 +0000
asID:                     52788
IP address blocks:        177.38.68.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b3:c6:89:a1:6d:1d:5e:0f:81:4d:8a:ff:34:6b:0d:55:06:c9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D444D18668AFF627287DE909F4EDC258CA9CC3
        Validity
            Not Before: Apr 25 17:47:09 2024 GMT
            Not After : Apr 24 17:52:09 2025 GMT
        Subject: CN=E9E4ED6193789D7B4FDEAE68629B288AF2C6B1F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:2a:dd:a4:27:88:be:f8:5c:92:30:e1:eb:
                    6e:e1:aa:bb:e7:18:41:e1:41:25:7e:5e:07:94:fd:
                    db:f9:9a:9a:95:ab:ff:e7:ec:c0:7d:2b:bf:a8:46:
                    62:08:0d:e7:d5:60:1d:6a:78:59:41:cf:a8:5e:15:
                    ef:83:69:3a:8c:e7:a4:84:5d:85:54:48:75:a6:a3:
                    b4:69:48:d5:fe:89:77:87:8b:b8:ac:19:1b:04:ea:
                    31:ba:77:b1:f6:07:ae:c4:7e:83:85:1c:bd:96:27:
                    ae:f9:c7:42:17:3b:51:21:61:5b:ca:5d:98:21:df:
                    3a:96:f5:28:e7:72:44:0d:a2:14:37:d9:51:2a:f8:
                    8f:49:e8:cc:51:a2:92:1e:99:3e:62:eb:88:02:88:
                    d6:20:16:68:0d:07:11:5c:cf:7e:9c:81:11:b7:12:
                    56:d7:cd:07:6f:04:9b:b4:f1:4a:d3:98:a3:dd:87:
                    82:6b:67:b5:3d:b2:3f:cf:fc:8c:84:5d:d1:bc:d3:
                    75:53:ab:47:38:81:15:2d:d0:d3:1c:1d:a1:d7:c9:
                    2e:93:0f:bf:b3:56:ed:ed:b1:5a:72:d6:a2:10:b8:
                    56:88:c4:7b:06:b3:2f:e1:d6:d7:31:06:47:e5:d2:
                    bf:dd:4a:2d:81:34:42:b7:17:f7:9d:b4:91:11:e8:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E4:ED:61:93:78:9D:7B:4F:DE:AE:68:62:9B:28:8A:F2:C6:B1:F0
            X509v3 Authority Key Identifier:
                keyid:33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/3137372e33382e36382e302f32322d3232203d3e203532373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:9c:b0:2d:9d:00:f2:1c:a3:92:97:9d:df:9d:08:e4:4a:f5:
         8a:50:6f:97:0d:ee:36:7c:96:dc:b1:bf:2f:c8:b7:a5:da:ce:
         16:84:a2:22:52:a4:32:5c:f2:9c:56:09:73:c4:3a:32:10:3e:
         ce:c9:b8:d1:61:7a:14:ab:54:b9:26:96:83:cf:27:fc:2f:a8:
         12:50:ca:bb:67:8a:49:df:94:bf:5e:69:f2:bb:d7:d6:1d:87:
         a7:e0:50:0f:e8:f9:a3:cf:af:2c:fd:12:a7:ea:c8:e4:51:ec:
         59:e1:2a:21:8a:1a:76:10:25:17:5a:01:4d:de:1e:67:c1:92:
         9c:50:24:6c:20:79:e9:a2:4d:22:46:83:ce:e2:0e:48:37:00:
         c5:48:5c:cd:3e:72:e8:ea:48:2a:f2:a3:79:9f:1b:7f:82:b5:
         b5:be:e0:71:ce:e2:3c:a0:5f:4a:45:37:2a:4e:e7:aa:3e:eb:
         d8:cf:f7:d9:2f:7a:09:6b:16:49:d8:fa:b1:13:7a:92:2b:de:
         b5:f2:26:84:8e:6b:3e:0b:2e:29:2f:b5:8a:76:6b:ba:ad:84:
         93:91:25:c5:eb:dd:53:aa:47:b2:3a:19:3a:25:57:e3:a3:c5:
         5d:64:f7:1b:9c:18:fd:71:00:11:a6:36:29:10:b0:d9:3f:84:
         00:f3:1d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org