Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3133382e35392e3231362e302f32322d3234203d3e20323634313139.roa
File:                     3133382e35392e3231362e302f32322d3234203d3e20323634313139.roa (raw, json)
Hash identifier:          +FtDSLJAlfkhaAbH6M3es9excryVH3GR08cvSKetkW0=
Subject key identifier:   4A:04:72:55:14:F9:83:C3:10:F3:66:A8:74:17:0C:81:05:FB:EE:22
Certificate issuer:       /CN=12313C794512B9199775646D0C40B3FA064905B3
Certificate serial:       787143C4D7A9DA61E9725521954E2F283AA6D07B
Authority key identifier: 12:31:3C:79:45:12:B9:19:97:75:64:6D:0C:40:B3:FA:06:49:05:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12313C794512B9199775646D0C40B3FA064905B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3133382e35392e3231362e302f32322d3234203d3e20323634313139.roa
Signing time:             Wed 28 Aug 2024 20:23:08 +0000
ROA not before:           Wed 28 Aug 2024 20:18:08 +0000
ROA not after:            Wed 27 Aug 2025 20:23:08 +0000
asID:                     264119
IP address blocks:        138.59.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 20:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:71:43:c4:d7:a9:da:61:e9:72:55:21:95:4e:2f:28:3a:a6:d0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12313C794512B9199775646D0C40B3FA064905B3
        Validity
            Not Before: Aug 28 20:18:08 2024 GMT
            Not After : Aug 27 20:23:08 2025 GMT
        Subject: CN=4A04725514F983C310F366A874170C8105FBEE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:f3:3a:35:f5:f8:d3:f3:39:b5:17:e9:09:
                    3c:0f:f6:62:45:a6:e0:73:c3:76:cc:f6:e1:a4:53:
                    eb:87:4b:8d:21:40:60:96:1b:ed:95:39:a7:42:31:
                    c7:56:da:70:22:e2:ff:b3:27:c0:ca:82:63:0e:6b:
                    c1:94:fb:e0:ed:a4:8a:14:fe:65:e4:37:0f:17:6e:
                    1f:a9:54:86:fa:ba:73:40:90:eb:68:c9:a0:11:37:
                    b3:64:2f:28:4a:26:b3:b4:51:06:6b:a2:4b:88:d0:
                    e0:b0:ec:2b:8c:a3:69:33:ab:11:df:82:52:95:22:
                    a9:b7:e0:9f:aa:b9:73:a0:b6:47:be:22:8d:fb:ad:
                    c8:24:8b:5e:ba:20:e9:d4:04:f2:1c:b0:83:c6:0e:
                    7c:f3:e0:2a:3e:9d:45:09:cc:da:b0:76:79:d1:9e:
                    a2:b4:37:64:d9:a5:42:ce:4f:83:6c:bb:bb:c5:c4:
                    56:58:1a:a3:8b:0a:8d:2a:d0:c8:56:db:b4:2a:0a:
                    67:16:f5:1d:6c:68:25:9d:07:d1:a8:dc:d3:d5:be:
                    86:3d:ad:b9:cc:be:da:4c:05:82:b2:28:b0:e2:b0:
                    d0:43:39:ac:35:4d:b9:7c:93:96:5a:fa:d9:0a:45:
                    b7:1c:35:88:7c:36:76:c3:99:f4:8f:78:a4:e0:fc:
                    c4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:04:72:55:14:F9:83:C3:10:F3:66:A8:74:17:0C:81:05:FB:EE:22
            X509v3 Authority Key Identifier:
                keyid:12:31:3C:79:45:12:B9:19:97:75:64:6D:0C:40:B3:FA:06:49:05:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/12313C794512B9199775646D0C40B3FA064905B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12313C794512B9199775646D0C40B3FA064905B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3133382e35392e3231362e302f32322d3234203d3e20323634313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:ad:cb:03:ab:ae:71:e3:bc:1a:9e:fe:36:9f:72:2e:1b:c5:
         2d:c0:9b:6d:e1:99:02:06:b6:7c:11:73:a8:f4:31:5f:fe:b4:
         f3:ee:7a:8e:8d:95:fa:ec:e0:2a:91:df:fe:c2:03:98:cd:57:
         02:ef:ae:6d:94:f9:6d:8b:e9:c8:25:6a:df:50:32:34:3e:c6:
         e5:a5:3c:6b:f8:28:5c:cd:5d:e0:32:25:6a:1a:c3:c4:bf:21:
         ef:aa:dc:62:df:5c:71:e4:77:c5:7c:94:5a:d7:95:71:f0:4e:
         71:c1:ce:c6:67:2f:39:aa:1e:f1:e4:89:54:41:f0:87:a2:05:
         fe:e5:1f:b8:64:2b:07:ef:85:63:0a:11:7f:01:ae:39:f7:e6:
         8e:e1:63:42:ea:a5:64:68:9f:53:43:51:91:73:af:f6:ab:a5:
         84:86:9b:31:d0:45:da:da:19:a7:77:8d:cd:31:8b:e0:23:a9:
         4b:3b:81:8b:b0:f5:5a:f8:25:91:1d:24:10:ce:71:6c:3a:f0:
         46:ad:0c:f6:a1:48:8c:16:44:d9:0b:ca:e5:1b:52:97:77:35:
         9a:41:26:7b:0c:cc:73:eb:13:a7:64:5e:1c:d5:ab:71:4a:33:
         7f:68:6e:78:40:9d:93:a0:11:27:97:f7:87:53:c6:87:61:dc:
         07:ab:14:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 22:15:47 2024 by rpki-client on console-fra.rpki-client.org