Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134312e302f32342d3234203d3e203631383835.roa
File:                     3133312e302e3134312e302f32342d3234203d3e203631383835.roa (raw, json)
Hash identifier:          NLH2krLpcqETjiLH55MZ62pImTWYlCx4Eja3FpAp07o=
Subject key identifier:   82:96:44:2C:EF:CB:52:FF:59:0E:C9:2F:80:D9:9B:61:D3:E4:12:9A
Certificate issuer:       /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial:       27131207A7477815B6BFF6BB557BB71A1663909D
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134312e302f32342d3234203d3e203631383835.roa
Signing time:             Mon 03 Jun 2024 18:30:17 +0000
ROA not before:           Mon 03 Jun 2024 18:25:17 +0000
ROA not after:            Mon 02 Jun 2025 18:30:17 +0000
asID:                     61885
IP address blocks:        131.0.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 18:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:13:12:07:a7:47:78:15:b6:bf:f6:bb:55:7b:b7:1a:16:63:90:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
        Validity
            Not Before: Jun  3 18:25:17 2024 GMT
            Not After : Jun  2 18:30:17 2025 GMT
        Subject: CN=8296442CEFCB52FF590EC92F80D99B61D3E4129A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d8:0d:02:10:7f:f3:9c:6b:21:e3:2e:7d:43:
                    40:c4:c1:d5:1e:e2:b5:b4:19:45:35:b1:00:71:8e:
                    63:a9:4b:cb:c2:a3:39:5b:13:8d:72:da:fc:62:ac:
                    d0:5d:74:0e:65:89:c8:ed:f9:4e:e2:c2:be:0e:93:
                    e1:cc:b3:8e:bf:65:09:a3:80:db:2e:95:d2:74:cc:
                    ed:12:bc:9f:b5:70:5b:f4:4e:de:6c:b0:6f:ce:27:
                    8d:e6:42:8c:45:a4:c3:8b:42:9e:22:49:16:9e:01:
                    13:a3:6b:dd:97:57:70:02:80:cc:51:1e:87:87:e9:
                    8b:84:c6:cc:64:46:b3:f1:9b:88:f9:91:80:e8:b4:
                    8c:c9:63:77:78:2a:82:39:cf:41:19:be:d7:63:81:
                    f2:ca:a1:bd:82:63:b7:5a:3a:61:6a:9f:bc:c5:65:
                    2e:da:47:64:4c:ff:fa:38:70:59:b6:3b:be:10:1d:
                    5c:e2:b7:0e:9e:ff:a3:8d:8a:23:72:39:b7:f3:13:
                    2b:98:f6:98:27:b3:30:ec:49:8b:49:6d:d2:7a:64:
                    e5:9a:aa:69:98:1c:0b:38:db:07:80:7c:6e:74:ef:
                    da:e9:68:92:18:65:00:94:f3:c4:6b:09:2f:3f:df:
                    d4:1f:52:1c:4f:89:f2:6c:77:19:f9:fb:aa:06:eb:
                    76:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:96:44:2C:EF:CB:52:FF:59:0E:C9:2F:80:D9:9B:61:D3:E4:12:9A
            X509v3 Authority Key Identifier:
                keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134312e302f32342d3234203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:99:a0:5b:21:24:ed:f6:08:0e:e5:0c:54:41:d1:57:c0:df:
         c4:82:7d:32:0d:79:78:93:49:b5:3f:0a:4b:b5:53:dd:2a:cb:
         af:03:d6:80:9b:4a:01:1a:7d:a9:6f:39:b4:a0:26:3d:a7:17:
         43:5c:d8:ba:1e:28:b5:fd:2b:96:42:92:7c:fe:9e:d4:af:83:
         53:4e:38:74:27:12:cb:67:f4:8c:65:b4:42:46:91:a4:ae:a5:
         78:ce:0f:d2:68:ae:2e:41:bc:50:30:9d:89:d2:64:57:9e:c1:
         69:f2:22:56:7a:12:b3:60:ee:b9:93:17:dd:69:36:3f:ff:65:
         b9:8a:b0:ec:9c:56:00:9b:53:a4:3e:80:99:2c:bc:de:e3:2b:
         e6:21:24:ce:3a:79:00:29:6d:a0:e4:21:50:f1:2c:bb:2e:e2:
         81:cd:29:fb:65:b4:be:ba:e1:ec:7e:bd:2d:85:5e:1d:dd:13:
         52:41:70:d6:f8:c3:fb:ee:ed:77:74:7a:9e:07:79:f4:1e:a5:
         d7:f4:b4:3f:77:07:10:46:c0:8c:3a:bb:2d:48:fd:01:c2:ba:
         e6:e9:05:ef:32:0d:1a:0f:ef:13:3c:68:e8:f8:84:3f:f9:e1:
         28:8e:af:75:63:a8:5b:43:25:b5:1d:e7:ef:5e:08:2d:63:db:
         89:06:53:0c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJxMSB6dHeBW2v/a7VXu3GhZjkJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3RkE3NENERkYxRTQ3NTI0Nzk2MDI2NzJGMjZBODgz
QzdBNjA1MjAeFw0yNDA2MDMxODI1MTdaFw0yNTA2MDIxODMwMTdaMDMxMTAvBgNV
BAMTKDgyOTY0NDJDRUZDQjUyRkY1OTBFQzkyRjgwRDk5QjYxRDNFNDEyOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq2A0CEH/znGsh4y59Q0DEwdUe
4rW0GUU1sQBxjmOpS8vCozlbE41y2vxirNBddA5licjt+U7iwr4Ok+HMs46/ZQmj
gNsuldJ0zO0SvJ+1cFv0Tt5ssG/OJ43mQoxFpMOLQp4iSRaeAROja92XV3ACgMxR
HoeH6YuExsxkRrPxm4j5kYDotIzJY3d4KoI5z0EZvtdjgfLKob2CY7daOmFqn7zF
ZS7aR2RM//o4cFm2O74QHVzitw6e/6ONiiNyObfzEyuY9pgnszDsSYtJbdJ6ZOWa
qmmYHAs42weAfG5079rpaJIYZQCU88RrCS8/39QfUhxPifJsdxn5+6oG63ZzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUgpZELO/LUv9ZDskvgNmbYdPkEpowHwYDVR0j
BBgwFoAUPH+nTN/x5HUkeWAmcvJqiDx6YFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSERLU2lzN1lBTkZ1anI5ZExFR1ZmRmdpR0c5OWd5WnBRVzdxdkF0amE5
ZHQvMC8zQzdGQTc0Q0RGRjFFNDc1MjQ3OTYwMjY3MkYyNkE4ODNDN0E2MDUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDN0ZBNzRDREZGMUU0NzUy
NDc5NjAyNjcyRjI2QTg4M0M3QTYwNTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hES1NpczdZQU5GdWpyOWRMRUdWZkZnaUdHOTlneVpwUVc3cXZBdGphOWR0LzAv
MzEzMzMxMmUzMDJlMzEzNDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM4
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAIMAjTANBgkqhkiG9w0BAQsFAAOCAQEAlJmgWyEk7fYI
DuUMVEHRV8DfxIJ9Mg15eJNJtT8KS7VT3SrLrwPWgJtKARp9qW85tKAmPacXQ1zY
uh4otf0rlkKSfP6e1K+DU044dCcSy2f0jGW0QkaRpK6leM4P0miuLkG8UDCdidJk
V57BafIiVnoSs2DuuZMX3Wk2P/9luYqw7JxWAJtTpD6AmSy83uMr5iEkzjp5AClt
oOQhUPEsuy7igc0p+2W0vrrh7H69LYVeHd0TUkFw1vjD++7td3R6ngd59B6l1/S0
P3cHEEbAjDq7LUj9AcK65ukF7zINGg/vEzxo6PiEP/nhKI6vdWOoW0MltR3n714I
LWPbiQZTDA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org