Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32332e302f32342d3234203d3e20323633303236.roa
File:                     3133382e33362e32332e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          tiDBX2DQL9J087nBdy2w7F/TUZotdUJAveexr8uo1HM=
Subject key identifier:   EA:D5:AB:E4:59:6A:63:A5:BD:72:3D:23:4F:DD:EA:4B:81:66:1C:06
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       2C109B3A1AC18E7D02D3F9C2CCF0D21C122B7C20
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32332e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:37 +0000
ROA not before:           Thu 04 Apr 2024 15:05:37 +0000
ROA not after:            Thu 03 Apr 2025 15:10:37 +0000
asID:                     263026
IP address blocks:        138.36.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:10:9b:3a:1a:c1:8e:7d:02:d3:f9:c2:cc:f0:d2:1c:12:2b:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:37 2024 GMT
            Not After : Apr  3 15:10:37 2025 GMT
        Subject: CN=EAD5ABE4596A63A5BD723D234FDDEA4B81661C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:79:57:5d:6c:82:16:e2:29:42:2f:d9:12:
                    d9:d2:1d:6c:d1:94:ff:ed:bf:85:40:32:60:46:83:
                    e0:d2:19:55:47:24:30:33:12:c3:77:9b:ba:8f:dc:
                    a8:ed:50:97:0f:31:d8:2f:df:90:85:8a:c3:da:fa:
                    b1:8f:f5:4b:20:0d:16:73:d1:57:60:ad:2a:f3:ab:
                    9a:b5:84:09:5a:a2:e7:13:eb:76:99:5f:3d:dd:ff:
                    0b:2c:19:31:30:fc:ff:71:69:33:9e:8d:09:95:ba:
                    62:b2:93:39:cf:d7:ee:46:15:55:82:27:8d:6e:50:
                    76:c1:e1:95:7f:d4:7a:66:bb:9a:c7:53:87:f0:8f:
                    ed:11:92:1c:81:56:d4:98:47:bd:5b:44:ed:67:55:
                    c3:8c:9c:77:2f:1d:26:9a:36:38:75:c1:e1:2e:03:
                    e8:ae:ca:8c:bd:c7:bd:b5:ed:ef:5e:94:c0:eb:a4:
                    5e:a9:cb:e8:ff:a0:f3:dd:b7:40:84:0d:23:a4:8e:
                    9b:4b:0b:00:83:61:88:3a:4f:a1:f4:32:30:b8:c3:
                    3c:12:e1:9f:e0:77:a5:c6:52:fc:f1:38:0e:25:35:
                    0b:6f:0d:b3:f2:9c:b4:99:2e:f9:61:d3:1e:c7:92:
                    64:6c:ad:5e:a4:e9:0f:d1:13:dd:06:08:26:ba:10:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D5:AB:E4:59:6A:63:A5:BD:72:3D:23:4F:DD:EA:4B:81:66:1C:06
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3133382e33362e32332e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:1f:ab:64:69:19:98:3e:6a:0e:7c:66:7b:c0:7f:15:bc:fc:
         b1:ff:1a:97:11:62:f5:56:53:c8:1c:83:86:4e:c1:c8:30:aa:
         3b:11:89:c2:7d:e1:9d:c5:c3:f5:24:58:6a:ef:ee:db:ae:e2:
         f0:c5:79:7e:e5:ab:dc:74:9a:c1:b6:fd:7e:5e:8c:ab:a4:5a:
         35:8a:f2:35:f2:2f:63:0c:c8:ff:64:04:6c:28:84:e7:c0:43:
         14:e3:d4:13:8d:1e:97:4e:70:ec:95:6d:96:94:60:17:89:e0:
         4f:16:f9:fb:3c:98:78:25:11:48:fd:9f:35:a2:28:f4:27:35:
         ba:a5:80:54:77:38:01:3f:f3:d7:45:5e:93:76:c7:14:7d:f6:
         5d:ad:2d:21:53:63:7d:6c:be:51:8c:8f:36:5a:af:e2:61:ea:
         4d:1e:7a:04:20:f9:8e:c8:cd:5d:d6:6c:cc:77:cf:72:48:81:
         27:c4:d4:14:10:0a:57:01:ba:74:25:69:68:a2:5e:9d:40:fd:
         ef:59:57:bb:f4:95:f7:c0:7a:da:e8:12:86:d7:0d:96:a9:37:
         c6:e2:d7:27:e2:47:8f:46:31:3e:f5:47:3a:2b:4c:10:32:16:
         8d:63:72:be:3c:80:db:04:e3:c9:9f:a1:8c:59:d8:d5:5a:86:
         9b:72:48:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org