Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32312e302f32342d3234203d3e20323633303236.roa
File:                     3133382e33362e32312e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          x7kFE9dvc9M1vHQNCHDhqO/y+zImTG4GxpwoBxrvhtc=
Subject key identifier:   6B:A4:21:4D:84:F1:8C:B1:00:F1:71:74:91:0F:86:92:16:4B:57:7F
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       1772A4BAA8F997ECAC48F30F3AF5AB1EEE1C481F
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32312e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:31 +0000
ROA not before:           Thu 04 Apr 2024 15:05:31 +0000
ROA not after:            Thu 03 Apr 2025 15:10:31 +0000
asID:                     263026
IP address blocks:        138.36.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:72:a4:ba:a8:f9:97:ec:ac:48:f3:0f:3a:f5:ab:1e:ee:1c:48:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:31 2024 GMT
            Not After : Apr  3 15:10:31 2025 GMT
        Subject: CN=6BA4214D84F18CB100F17174910F8692164B577F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:27:c8:be:a6:14:fb:4e:ab:bc:19:d6:79:42:
                    66:d8:69:64:3c:88:c5:2a:76:e6:ad:02:d8:2a:1f:
                    4d:90:a8:83:87:09:d1:0a:87:93:7a:91:18:88:63:
                    79:42:50:45:fe:9b:df:b9:b5:03:52:28:b4:61:41:
                    38:a9:f2:b0:a5:54:b0:c0:8e:30:c4:25:0c:f3:26:
                    3e:39:2d:7f:97:44:da:dc:83:d2:6f:e4:22:74:18:
                    81:42:7e:e7:8a:cc:b3:9b:29:7f:4d:cf:96:47:c0:
                    2b:3e:79:cc:73:3f:c6:2c:28:c9:30:3c:28:6d:b4:
                    bc:82:7d:e0:b2:58:cf:78:d5:59:24:f9:38:65:34:
                    41:3a:96:3c:a7:b5:4a:69:dd:ce:d9:f6:c0:d7:58:
                    09:47:ff:23:c1:20:5e:b3:24:8c:27:61:c4:df:0b:
                    d0:c4:84:2f:16:ba:de:09:2b:fb:69:a4:97:80:60:
                    a7:32:69:15:c1:ff:82:b1:fb:41:4c:ca:a4:b4:65:
                    10:b1:ca:97:43:76:bf:fd:bf:d9:2f:7d:f2:b2:0e:
                    70:4b:88:1f:36:71:ba:39:e5:7b:7a:9b:8e:fa:14:
                    bc:32:57:dc:95:7e:ec:76:59:25:01:21:40:0c:12:
                    cd:87:52:94:25:41:dc:d5:cd:bb:48:5f:d5:9d:59:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A4:21:4D:84:F1:8C:B1:00:F1:71:74:91:0F:86:92:16:4B:57:7F
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32312e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:e2:bb:eb:f1:3c:3b:ca:8d:1b:54:a4:a3:9f:80:27:a8:13:
         56:8a:16:5a:d7:56:63:7d:87:52:d6:0b:a5:8f:df:08:7c:a2:
         3f:af:6c:12:e5:c3:75:66:aa:11:9a:b4:c1:26:28:14:64:9b:
         d9:7f:b7:0d:d8:cb:3d:e1:9e:48:59:f2:b8:7e:fc:70:9f:7b:
         36:54:62:22:78:44:9b:2d:d7:41:85:e5:43:4f:2c:a3:45:fd:
         12:5d:24:0c:fd:b6:2b:b2:46:e6:8d:e5:13:2f:e4:38:dc:52:
         37:4b:1f:ac:f2:a3:d1:d4:67:39:e5:53:73:f0:7a:e1:cf:c8:
         95:ec:f2:fe:50:b0:ba:06:59:a7:53:2c:4d:a4:7c:73:ca:b1:
         93:ca:d2:d8:7d:a9:ec:aa:04:81:fc:8c:01:5c:28:8b:e3:a2:
         81:e7:c7:18:0d:8e:8f:96:80:07:ec:a5:eb:46:a5:a9:79:9a:
         38:2e:dd:fd:7c:4d:2b:38:da:e4:70:74:68:c2:81:9e:07:5c:
         ef:0d:2a:7c:28:41:99:cd:42:ba:42:a5:34:88:73:d0:eb:0d:
         24:12:e4:09:50:a4:a9:de:c7:06:a8:ed:ec:30:b6:af:09:97:
         13:b6:25:f3:ed:a3:05:e0:f2:88:16:42:22:cb:f8:61:79:54:
         6d:52:56:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org