Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133382e3132312e3235342e302f32342d3234203d3e20323632373635.roa
File:                     3133382e3132312e3235342e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          aDNf/f91sbJH+YrVF/fM+z63ADb0PydA5s74KJmpN/4=
Subject key identifier:   26:62:92:48:44:37:D4:89:E5:37:3B:96:93:D6:B0:41:D7:FE:32:2C
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       3C3F77775875F17237454A31082394335AC536AD
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133382e3132312e3235342e302f32342d3234203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:54 +0000
ROA not before:           Thu 04 Apr 2024 20:42:54 +0000
ROA not after:            Thu 03 Apr 2025 20:47:54 +0000
asID:                     262765
IP address blocks:        138.121.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3f:77:77:58:75:f1:72:37:45:4a:31:08:23:94:33:5a:c5:36:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:54 2024 GMT
            Not After : Apr  3 20:47:54 2025 GMT
        Subject: CN=266292484437D489E5373B9693D6B041D7FE322C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:d7:32:92:a7:9e:05:82:dc:e5:4a:36:9b:
                    94:c1:53:f3:36:bc:f8:e2:a8:6a:d1:2a:4d:3d:67:
                    7e:c3:25:a0:eb:6a:e1:8b:a3:c0:e0:39:ff:36:a7:
                    43:df:0c:6a:e3:76:cf:cf:30:a9:6a:6a:d0:53:cc:
                    79:0b:60:9a:c2:d7:cf:66:29:76:cb:ea:79:cd:1c:
                    39:b7:a0:95:86:08:de:fc:28:a7:a0:43:f2:a9:bb:
                    19:5c:a0:6c:12:22:b3:64:09:17:47:d6:90:05:74:
                    07:48:b9:3d:81:9b:6b:49:cc:7c:00:db:42:88:85:
                    c1:9e:f2:b7:5d:46:3a:da:6f:f2:de:4a:d5:db:1c:
                    94:ed:04:46:c0:15:81:db:26:fe:ae:32:0a:97:4e:
                    44:9b:b0:c9:aa:ed:fc:e4:85:0f:7f:c6:d7:ec:dc:
                    08:2b:93:85:e2:21:a9:6e:bd:b9:7f:2d:7b:6a:22:
                    cd:23:ce:f1:9b:db:3d:53:d5:ba:36:b3:70:03:1c:
                    31:68:56:98:5b:18:76:15:ed:1a:37:5f:cd:78:7b:
                    96:b9:7a:7e:1a:7b:2b:e6:5e:9e:cf:5d:0f:b2:81:
                    10:c8:47:0e:72:9d:f9:8f:2e:0c:6b:4b:33:49:d3:
                    d3:45:c5:40:dc:ee:45:61:fb:83:3d:02:c4:d9:61:
                    3e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:62:92:48:44:37:D4:89:E5:37:3B:96:93:D6:B0:41:D7:FE:32:2C
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133382e3132312e3235342e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:44:48:3b:b9:09:9e:1b:8e:5f:bd:2f:aa:ea:98:3a:56:49:
         84:e2:c2:1d:a4:c1:77:23:9f:5c:63:11:f5:70:00:ef:33:ba:
         8e:5c:f3:2a:c2:61:60:86:07:08:ce:ab:15:4a:53:e2:a8:51:
         88:99:64:7a:e8:a9:c9:6f:60:f3:36:a6:d9:27:f2:96:fb:ed:
         d3:3e:81:e4:c8:c0:67:9c:2b:e8:2a:c1:7d:a2:c8:54:6c:d3:
         bf:61:31:ce:5a:45:da:29:f9:6d:7f:90:78:2f:85:38:2b:4a:
         2e:aa:e5:19:1f:93:93:09:dd:16:82:74:39:0d:e2:19:8e:47:
         84:78:5a:b0:7a:3a:c7:63:7d:6b:c9:26:17:ff:71:2f:04:ed:
         c4:77:c8:dc:9e:e8:28:3b:42:1f:64:79:b8:49:68:51:41:fe:
         26:a6:19:a2:dd:a5:dc:56:c1:08:a9:ec:06:b4:ca:12:85:ce:
         5c:a2:af:80:b9:d9:af:44:35:05:3c:21:4e:19:eb:52:79:be:
         97:89:bf:b0:9a:47:a5:44:9b:91:21:55:cc:d4:5e:48:e2:b7:
         23:c8:2b:98:b0:8d:4a:94:2f:0e:ad:d5:03:8d:72:7e:e5:38:
         70:3f:44:2d:d8:53:d8:d3:c7:c9:59:94:37:51:f9:02:9d:a5:
         61:ea:9c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 14:34:50 2024 by rpki-client on console-fra.rpki-client.org