Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e39342e3135362e302f32322d3232203d3e20323632373733.roa
File:                     3133382e39342e3135362e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          RdMT3eDBu+Rxqmz+z4q7rAssT/EKnFqmjl87BqlNXNw=
Subject key identifier:   15:94:53:F2:35:DF:CA:3C:CC:08:D6:3F:8E:F8:34:E8:2A:F9:F1:90
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       292118603BF626FDA1BED8B6DADA4BFB223D0C28
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e39342e3135362e302f32322d3232203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:28 +0000
ROA not before:           Wed 14 Aug 2024 12:03:28 +0000
ROA not after:            Wed 13 Aug 2025 12:08:28 +0000
asID:                     262773
IP address blocks:        138.94.156.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:44:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:21:18:60:3b:f6:26:fd:a1:be:d8:b6:da:da:4b:fb:22:3d:0c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:28 2024 GMT
            Not After : Aug 13 12:08:28 2025 GMT
        Subject: CN=159453F235DFCA3CCC08D63F8EF834E82AF9F190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:40:bc:ef:78:6f:09:23:a3:ef:49:37:c3:6d:
                    d4:2f:e9:39:e4:d4:19:44:c1:d7:e3:d8:5e:f0:65:
                    a3:1c:c0:bf:4c:93:59:58:8b:ca:25:d0:4f:bf:64:
                    88:95:4d:d0:e0:d0:ce:ea:28:da:61:fb:14:72:f0:
                    1e:04:d5:42:13:cf:42:55:59:42:90:e3:2e:1a:f0:
                    fe:b3:1a:f6:5d:6c:17:6b:8c:a7:d5:e1:89:8e:cf:
                    fb:31:e6:c3:74:35:fd:55:63:ec:a1:64:9d:3f:f8:
                    f6:7f:59:0c:c7:34:66:3b:1b:20:0d:c0:44:a3:e0:
                    17:d6:1c:50:65:3e:9d:34:80:fe:c5:57:c7:3a:ef:
                    6e:38:26:0c:d6:9d:20:35:9d:f8:21:1b:39:d0:5e:
                    95:31:8d:64:ed:63:64:6f:34:63:57:66:a8:f1:94:
                    8a:4a:60:d6:17:41:8c:0a:84:3e:40:dc:6d:e3:4b:
                    b3:63:8c:4e:f5:08:fd:fc:a5:cc:45:64:2b:2b:53:
                    97:14:73:1d:18:51:77:6c:02:93:d4:5f:a6:60:4b:
                    ab:d6:ca:43:4c:25:8e:59:bb:55:12:ab:b1:e4:36:
                    5a:50:83:17:b2:32:b0:72:e3:69:85:9c:67:ac:a5:
                    5d:e6:94:9f:64:65:5c:f8:2d:6d:01:e4:ba:73:13:
                    34:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:94:53:F2:35:DF:CA:3C:CC:08:D6:3F:8E:F8:34:E8:2A:F9:F1:90
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e39342e3135362e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:d5:a1:2e:ff:b6:3d:48:f7:69:66:7b:94:95:df:04:bd:85:
         2f:a2:58:49:92:fe:25:e9:a3:67:17:da:c2:dd:c5:4e:56:a5:
         91:33:84:25:7b:6c:83:6d:f6:47:13:9c:34:55:0f:75:78:0f:
         44:17:c3:29:76:bb:28:31:4d:e3:f2:a6:95:f7:49:a0:3a:2f:
         ad:21:c4:35:ef:84:49:69:de:16:3f:f5:3c:d5:b3:2a:78:d7:
         fb:08:fe:2c:1e:0a:93:2c:0a:b6:07:c4:fe:cd:87:0a:64:91:
         bd:b0:92:7c:c4:2d:14:6a:c4:8f:e9:45:87:fc:79:b4:f6:cc:
         9e:d9:08:ee:84:40:15:e8:c9:68:9c:60:33:2c:12:9e:40:6e:
         74:36:69:73:f7:5b:d8:63:d2:71:07:9e:e4:ca:50:22:30:d2:
         7e:6e:d9:62:bb:ed:10:25:4f:2e:2f:ce:8e:9f:18:d3:ca:35:
         7e:c7:19:73:f8:5e:f6:ed:5c:c1:57:81:a3:0d:eb:ee:59:20:
         b9:07:ad:59:1d:5e:25:39:2e:83:e4:1b:c7:f5:e7:0a:b6:ad:
         94:77:0b:f7:3e:50:8d:ee:fc:44:f5:52:eb:4b:ad:fc:55:84:
         84:b1:d6:d1:0b:63:25:71:98:a4:6b:29:f7:05:85:b5:c0:fd:
         e6:b1:e4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org