Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36302e302f32332d3233203d3e203631353733.roa
File:                     3133382e3132322e36302e302f32332d3233203d3e203631353733.roa (raw, json)
Hash identifier:          Qymv6r4ytBCa8cYvAcc82Vt7DXDkT0S+WyUdSuT+Nhg=
Subject key identifier:   3E:55:16:C1:C6:4E:10:C8:D4:36:FA:6A:75:E1:19:D4:1D:77:F1:06
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       21CDA2AA44F95135735FF1764877129DC6AC3FCD
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36302e302f32332d3233203d3e203631353733.roa
Signing time:             Fri 31 May 2024 23:25:10 +0000
ROA not before:           Fri 31 May 2024 23:20:10 +0000
ROA not after:            Fri 30 May 2025 23:25:10 +0000
asID:                     61573
IP address blocks:        138.122.60.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Tue 11 Jun 2024 11:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:cd:a2:aa:44:f9:51:35:73:5f:f1:76:48:77:12:9d:c6:ac:3f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May 31 23:20:10 2024 GMT
            Not After : May 30 23:25:10 2025 GMT
        Subject: CN=3E5516C1C64E10C8D436FA6A75E119D41D77F106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:f8:6e:87:a1:62:b2:7a:2e:25:1c:21:5d:
                    ca:6e:0e:01:5d:cd:41:a9:d5:08:6e:ae:87:db:b6:
                    fa:90:76:89:d7:90:89:62:55:6d:9d:74:6f:50:6a:
                    85:1e:e7:ed:90:30:9f:ea:8d:4e:bb:d0:d3:32:22:
                    0c:47:91:d2:2b:67:b1:bc:78:e3:aa:ce:15:c8:33:
                    2d:c8:6f:fc:d0:fb:e6:ff:05:28:8c:8c:4b:15:c9:
                    5e:a9:93:f7:a3:33:77:7b:d4:f2:ba:9b:6d:5b:bf:
                    68:d4:4a:dc:87:08:c2:4d:8c:79:54:4c:11:25:21:
                    95:42:06:14:4e:68:26:17:4b:1c:0c:28:be:47:17:
                    e8:28:86:e7:8a:e6:b9:96:f7:69:00:4f:4d:af:ee:
                    a3:c0:7c:b8:ab:52:68:53:6a:d4:aa:a7:ae:f0:88:
                    10:e6:a3:07:01:27:c2:f0:54:b4:65:c7:7e:58:5b:
                    f7:a8:79:a2:34:cb:05:33:fe:de:96:63:0d:af:cb:
                    23:e9:78:5d:44:a4:01:13:67:fa:b0:b5:45:f0:0a:
                    13:f4:46:56:a9:17:88:22:72:03:69:c2:4a:03:30:
                    6f:1c:79:6e:a2:5e:61:b3:64:66:06:24:b6:b9:84:
                    26:2b:09:d6:62:17:ef:19:be:5a:a2:fd:3a:30:14:
                    da:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:55:16:C1:C6:4E:10:C8:D4:36:FA:6A:75:E1:19:D4:1D:77:F1:06
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36302e302f32332d3233203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:8b:e3:8f:70:f0:99:fa:c7:00:1a:0c:ed:fa:68:f1:79:d8:
         83:61:6f:94:5f:2d:d7:5b:59:48:d1:70:82:55:9c:5d:34:39:
         53:e3:6d:6f:99:1a:7b:1b:a4:9b:ea:95:ac:ff:e1:3a:64:34:
         72:d1:e6:6a:ce:47:9b:a0:6a:b3:e8:58:3d:9d:82:82:58:65:
         b1:1b:11:52:fb:f9:fe:5e:1d:2f:38:fc:21:54:e6:2a:c0:a2:
         12:b0:e6:90:ae:bf:d2:7a:e1:bd:ca:7b:f9:27:60:f6:ac:51:
         75:39:1f:e8:22:17:18:b0:6c:2c:41:b4:d3:f7:99:56:04:db:
         cb:49:62:3b:a1:ab:6e:2d:ec:ce:fd:76:5c:a1:af:ec:9a:39:
         d2:51:b4:6e:f9:bb:bb:ed:8b:98:4b:2a:78:90:bd:b7:a2:d8:
         78:47:a7:09:b9:3a:20:76:05:48:e9:54:64:09:56:56:94:cc:
         26:a9:f9:4e:e4:2e:3c:f2:fe:95:00:67:64:ee:63:18:24:1f:
         3b:9e:f8:21:16:f7:a7:8e:48:7d:e6:99:da:e5:40:99:7c:10:
         38:10:3b:98:32:b5:03:f7:7e:8f:69:c8:50:51:2d:a0:c0:51:
         25:5e:da:75:05:2d:2b:30:b6:1d:35:f5:16:63:89:cf:a0:08:
         98:fe:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:50:56 2025 by rpki-client