Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133382e3132312e3235322e302f32342d3234203d3e20323632373635.roa
File:                     3133382e3132312e3235322e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          E5Z+LybW+wbCVNtvogX0CbriKVkVfqPRZdZ+asL+nws=
Subject key identifier:   91:7B:18:3E:DB:A8:FC:0C:4A:31:59:72:90:D1:D4:B6:19:6F:F9:37
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       7A94A311EB424708D0D723A0D05BF4D4E73A2C8D
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133382e3132312e3235322e302f32342d3234203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:47 +0000
ROA not before:           Thu 04 Apr 2024 20:42:47 +0000
ROA not after:            Thu 03 Apr 2025 20:47:47 +0000
asID:                     262765
IP address blocks:        138.121.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:94:a3:11:eb:42:47:08:d0:d7:23:a0:d0:5b:f4:d4:e7:3a:2c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:47 2024 GMT
            Not After : Apr  3 20:47:47 2025 GMT
        Subject: CN=917B183EDBA8FC0C4A31597290D1D4B6196FF937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:b1:5e:2f:e1:43:15:01:49:0b:83:e3:e9:
                    87:8f:51:13:f1:58:2d:1f:f9:89:32:0e:d0:fd:62:
                    ea:59:05:74:85:56:bd:74:29:20:04:22:fa:ca:34:
                    59:75:39:dd:cb:95:77:2e:f2:ac:e5:ce:45:53:e7:
                    1e:f7:96:38:f4:fa:73:9f:a2:fd:4a:88:3d:11:9c:
                    7c:3e:a6:d2:12:26:5f:f1:3a:ea:0d:43:79:4a:55:
                    e8:37:fa:e7:9b:f5:c5:9c:26:ef:a9:39:4d:80:06:
                    5d:37:a3:3e:9f:e1:fb:6b:44:64:97:ef:ff:b2:f5:
                    ba:98:61:4c:3a:9d:13:09:d2:52:f1:5d:49:e5:c2:
                    3c:a3:30:7b:6b:7f:a2:4e:72:fe:06:e8:f0:7a:1a:
                    ce:f5:a9:c0:ff:a6:dc:f0:31:17:88:d4:11:32:3f:
                    4c:d9:03:9f:24:4e:02:be:fa:5b:45:b7:08:e5:16:
                    07:0c:3c:8d:f8:3a:ef:a0:1d:9a:53:51:b8:90:26:
                    12:91:b4:2c:12:fd:84:ec:76:a3:ba:bb:7a:62:78:
                    d2:00:f8:d7:23:0d:00:4d:52:e1:5f:31:12:62:b7:
                    d6:c7:ce:d5:45:cf:43:e0:31:65:72:c9:0e:dc:df:
                    00:db:ca:7b:51:41:64:7e:71:5b:8c:ee:e4:d4:16:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7B:18:3E:DB:A8:FC:0C:4A:31:59:72:90:D1:D4:B6:19:6F:F9:37
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133382e3132312e3235322e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:9d:f7:5d:bc:dd:22:5b:cd:1f:43:94:3e:d5:a4:cd:63:10:
         fc:4c:58:8d:18:18:34:d3:68:19:09:75:8c:1f:2e:c6:50:28:
         b2:63:8b:36:dd:db:1c:40:38:3c:a8:1e:20:ea:7b:73:50:0d:
         4a:15:cc:9f:5c:bc:33:d6:42:1d:10:c6:92:a6:14:ae:d9:8f:
         13:58:bf:9d:71:63:80:65:1b:c5:e2:5f:ae:e1:13:ec:8b:f4:
         f5:d1:99:71:88:b8:44:ea:9e:a5:d1:ad:c8:76:04:cd:82:e8:
         07:3e:df:b7:8d:59:6b:40:7c:8e:32:1c:e6:14:7d:eb:58:9d:
         7e:06:80:b7:b7:73:37:a1:43:9c:4f:00:f9:f6:f7:08:13:a0:
         2b:d0:63:21:1d:a6:8b:6c:72:50:02:4e:99:c6:24:09:32:18:
         ae:21:63:73:ae:57:64:e9:99:27:35:e9:6e:2e:79:9b:d3:fd:
         80:f3:c6:10:39:29:45:95:e1:5d:41:11:30:95:3e:06:46:b0:
         2b:db:50:42:4f:ea:5a:61:cc:08:ff:f0:01:da:01:7c:73:ba:
         7e:fa:18:40:a4:cb:22:d7:54:2c:a8:2b:4b:aa:53:1f:15:45:
         93:df:60:a2:df:00:96:93:89:43:81:91:02:78:0c:5a:0a:ed:
         51:42:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:57 2024 by rpki-client on console-ams.rpki-client.org