Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32322e302f32342d3234203d3e20323633303236.roa
File:                     3133382e33362e32322e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          YkeT2QNBofBHIy0ySH6jxxoaM3Ffjtzk3wdF44Ys/oc=
Subject key identifier:   7D:C4:04:93:9E:84:85:C4:26:FC:84:59:C8:9C:6A:EF:FD:6A:CB:F4
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       3899E654E79669FE2C6FC2D1BB4F2931392E4251
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32322e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:31 +0000
ROA not before:           Thu 04 Apr 2024 15:05:31 +0000
ROA not after:            Thu 03 Apr 2025 15:10:31 +0000
asID:                     263026
IP address blocks:        138.36.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:99:e6:54:e7:96:69:fe:2c:6f:c2:d1:bb:4f:29:31:39:2e:42:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:31 2024 GMT
            Not After : Apr  3 15:10:31 2025 GMT
        Subject: CN=7DC404939E8485C426FC8459C89C6AEFFD6ACBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:20:a2:47:62:af:1d:38:fb:ab:10:26:bb:
                    9f:59:19:11:42:b0:23:08:9e:06:67:19:2f:0f:f8:
                    82:2c:91:1a:ac:cf:f9:eb:44:b1:77:5e:bc:49:c2:
                    fd:e0:73:f5:43:39:ef:55:16:33:c3:29:e6:6d:72:
                    1c:5e:55:41:19:81:5a:3c:6e:bc:57:28:cd:b3:09:
                    79:e6:ef:40:e2:ff:d7:3d:8b:f6:b1:f7:68:84:9e:
                    08:2c:3b:89:24:29:6f:70:a6:d0:9f:f8:a6:9f:6b:
                    87:c7:0d:17:a6:13:76:e5:f1:ac:6c:ef:c8:a6:d3:
                    74:a0:c7:55:64:ad:b4:34:c8:d5:0c:2d:9f:10:c9:
                    a0:12:01:be:1f:b7:a8:1a:e8:ac:84:d9:ee:38:86:
                    da:7d:e5:b5:2b:7e:48:c2:18:1b:bf:5c:22:d7:0a:
                    a8:9b:7b:02:68:2d:d0:24:35:d9:3b:05:47:ac:0e:
                    45:6a:1a:7f:ee:d3:d4:07:db:cb:af:dc:30:83:32:
                    53:cb:60:01:fb:64:a8:3a:ec:29:ac:f0:ce:3b:84:
                    ab:94:ca:a2:24:1c:13:d0:65:ce:76:26:e0:d1:3c:
                    36:31:0a:c1:93:e6:28:8a:25:29:bb:39:c6:7c:6b:
                    41:d2:4b:6d:6a:01:da:d3:a3:01:a7:71:35:e4:d8:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C4:04:93:9E:84:85:C4:26:FC:84:59:C8:9C:6A:EF:FD:6A:CB:F4
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32322e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:e0:26:e0:f7:aa:08:5a:a2:72:74:98:22:aa:42:38:6b:e6:
         65:7b:b1:86:77:37:b3:4b:d8:80:f7:08:9f:5d:18:40:da:dc:
         45:5f:f4:8b:d0:87:b1:cf:f9:b3:17:a2:48:4f:d7:65:76:7b:
         c4:e2:cb:aa:d1:3c:09:1d:97:96:26:3d:0b:a0:14:62:09:b4:
         f6:b5:a8:e3:3c:c8:23:a6:ca:e4:ca:91:d0:4f:19:be:f7:42:
         91:03:b6:b4:6d:c0:d7:97:cd:5c:3d:1f:eb:71:ad:24:2c:a3:
         b7:7a:8a:65:da:be:49:c5:3f:05:d9:53:6a:f0:6b:12:5a:26:
         59:e1:41:87:f7:bd:73:5d:28:4e:e1:64:18:38:fb:d2:01:67:
         78:f8:20:01:4a:26:ff:b0:67:19:23:1b:51:7e:dc:a5:ab:51:
         8a:79:79:4f:14:cf:f6:6d:64:3e:53:96:74:c4:0c:03:d2:f9:
         b0:19:9b:05:f2:e0:48:0d:99:74:7a:73:75:e0:0c:d8:74:a2:
         30:34:19:89:60:b8:ff:e0:75:05:60:5a:6d:b9:a4:a8:ff:c4:
         c4:77:10:a4:4a:b2:9c:e3:b9:79:ef:b2:79:ef:b2:0f:fa:5c:
         c6:ed:9d:f9:72:9a:97:5c:2e:f5:1d:aa:81:60:e4:ff:96:0c:
         63:14:56:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org