Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133382e3132312e3235352e302f32342d3234203d3e20323632373635.roa
File:                     3133382e3132312e3235352e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          IsVGdTTKJW9MT8qJ3TWpyNrwEddZwHNn9iwN1SSubkk=
Subject key identifier:   7B:F9:F3:85:44:21:D8:DC:E6:D5:38:36:D8:2A:C7:09:B3:63:2C:3A
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       1FE677AD4618EE4A2D60B8FA7F2523A3DDABA392
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133382e3132312e3235352e302f32342d3234203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:56 +0000
ROA not before:           Thu 04 Apr 2024 20:42:56 +0000
ROA not after:            Thu 03 Apr 2025 20:47:56 +0000
asID:                     262765
IP address blocks:        138.121.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e6:77:ad:46:18:ee:4a:2d:60:b8:fa:7f:25:23:a3:dd:ab:a3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:56 2024 GMT
            Not After : Apr  3 20:47:56 2025 GMT
        Subject: CN=7BF9F3854421D8DCE6D53836D82AC709B3632C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:51:54:f5:b4:a3:1c:50:44:d9:b1:44:c1:70:
                    e4:a9:63:39:25:51:28:3b:ae:80:0d:92:92:78:96:
                    ee:c6:47:53:82:14:dc:ea:80:84:45:89:5f:15:3c:
                    34:89:ab:ff:a2:c7:86:9b:09:ce:1b:e6:0b:6e:e2:
                    b6:c3:dd:0e:28:84:38:21:a3:d2:2b:49:5e:7a:5d:
                    d0:e8:24:f8:3c:48:a8:c7:13:94:7a:93:39:d7:00:
                    9d:84:81:b9:be:0b:50:50:3a:7b:4c:a0:7e:d2:96:
                    dd:73:70:ac:af:c6:bd:a1:29:fb:67:6d:fa:ef:b6:
                    11:c9:fb:bf:b4:6b:b9:ea:6b:01:4e:a8:f5:92:2a:
                    bd:09:10:3a:e2:13:7c:c4:9b:58:4c:93:43:5c:1c:
                    cd:f4:6a:11:02:c0:4b:3b:47:50:b0:eb:5d:87:1f:
                    16:b9:da:58:63:45:3c:85:6e:a6:a0:6d:c8:40:46:
                    68:39:13:18:03:17:d9:98:f8:ca:b1:3a:5a:9b:32:
                    b4:79:50:18:9f:7c:e6:99:15:37:20:65:21:87:84:
                    10:9b:23:0b:7d:fa:cf:e5:f5:80:1e:dd:00:18:de:
                    8c:a1:a0:02:3b:6a:11:8d:4d:f3:6a:45:df:b8:6d:
                    5e:59:5d:7d:f6:93:0e:5d:24:ec:a6:93:a2:46:06:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F9:F3:85:44:21:D8:DC:E6:D5:38:36:D8:2A:C7:09:B3:63:2C:3A
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3133382e3132312e3235352e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:cd:f7:9f:29:db:b2:66:d4:bc:9b:0a:b0:fd:4c:a6:17:08:
         24:78:34:86:97:b4:5f:15:3a:41:a7:45:8a:da:48:b5:78:b6:
         a6:85:86:29:46:39:2c:a1:43:3b:48:bb:4a:7f:30:f4:60:0e:
         af:5a:59:a8:63:e0:32:14:50:c6:d8:20:dd:6a:9a:d7:e3:8a:
         77:c7:ef:00:a5:86:f8:f6:84:43:1e:77:14:ee:38:6f:88:ae:
         ad:7f:3a:06:a3:c7:eb:03:ce:b1:f4:ec:bb:84:49:b7:e0:36:
         de:b0:0f:80:41:ff:0a:98:c6:ce:53:13:07:28:de:85:d2:50:
         ae:c1:81:48:47:0a:2b:f8:cb:6e:70:62:3c:c0:f1:ef:a1:c7:
         5b:3d:a8:61:af:d1:65:4a:fb:66:f6:83:af:26:42:82:ed:3d:
         dd:77:55:f1:15:6a:f7:4e:9e:59:8e:a3:4d:2f:91:79:c5:af:
         b6:65:4e:93:67:73:47:94:ff:80:3b:54:cd:13:15:b8:86:84:
         d3:28:d2:85:78:31:d8:a9:bd:83:68:1b:e9:52:3e:b4:e8:19:
         86:d8:86:b8:2e:15:83:4c:61:01:fa:b8:e1:5c:25:21:b3:5d:
         e0:0f:db:37:f6:a8:81:f3:51:3c:20:09:62:09:84:e7:ae:3e:
         f3:0e:8e:ff
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUH+Z3rUYY7kotYLj6fyUjo92ro5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENG
QzhBRjI4RDAeFw0yNDA0MDQyMDQyNTZaFw0yNTA0MDMyMDQ3NTZaMDMxMTAvBgNV
BAMTKDdCRjlGMzg1NDQyMUQ4RENFNkQ1MzgzNkQ4MkFDNzA5QjM2MzJDM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkUVT1tKMcUETZsUTBcOSpYzkl
USg7roANkpJ4lu7GR1OCFNzqgIRFiV8VPDSJq/+ix4abCc4b5gtu4rbD3Q4ohDgh
o9IrSV56XdDoJPg8SKjHE5R6kznXAJ2Egbm+C1BQOntMoH7Slt1zcKyvxr2hKftn
bfrvthHJ+7+0a7nqawFOqPWSKr0JEDriE3zEm1hMk0NcHM30ahECwEs7R1Cw612H
Hxa52lhjRTyFbqagbchARmg5ExgDF9mY+MqxOlqbMrR5UBiffOaZFTcgZSGHhBCb
Iwt9+s/l9YAe3QAY3oyhoAI7ahGNTfNqRd+4bV5ZXX32kw5dJOymk6JGBvRVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUe/nzhUQh2Nzm1Tg22CrHCbNjLDowHwYDVR0j
BBgwFoAUj4AOHOJ7h/JP1912w0tp3PyK8o0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzEvOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENGQzhBRjI4RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84RjgwMEUxQ0UyN0I4N0YyNEZE
N0RENzZDMzRCNjlEQ0ZDOEFGMjhELmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzEvMzEz
MzM4MmUzMTMyMzEyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MjM3MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIp5/zANBgkqhkiG9w0BAQsFAAOCAQEAXc33nynb
smbUvJsKsP1MphcIJHg0hpe0XxU6QadFitpItXi2poWGKUY5LKFDO0i7Sn8w9GAO
r1pZqGPgMhRQxtgg3Wqa1+OKd8fvAKWG+PaEQx53FO44b4iurX86BqPH6wPOsfTs
u4RJt+A23rAPgEH/CpjGzlMTByjehdJQrsGBSEcKK/jLbnBiPMDx76HHWz2oYa/R
ZUr7ZvaDryZCgu093XdV8RVq906eWY6jTS+RecWvtmVOk2dzR5T/gDtUzRMVuIaE
0yjShXgx2Km9g2gb6VI+tOgZhtiGuC4Vg0xhAfq44VwlIbNd4A/bN/aogfNRPCAJ
YgmE564+8w6O/w==
-----END CERTIFICATE-----
Generated at Fri Nov 1 14:34:50 2024 by rpki-client on console-fra.rpki-client.org