Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3230382e302f32322d3232203d3e20323632333534.roa
File:                     3137372e3132352e3230382e302f32322d3232203d3e20323632333534.roa (raw, json)
Hash identifier:          ol4qgvUwlgdZ58wG8bbPyoP4k3zfxRWjqkgfsfTyg1M=
Subject key identifier:   B3:35:7C:19:58:48:00:AD:58:D7:F8:40:7A:1D:3A:81:2D:10:7F:6F
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       698DADB91B07259819678F092E9CBF026896EB88
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3230382e302f32322d3232203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:32 +0000
ROA not before:           Wed 06 Mar 2024 14:09:32 +0000
ROA not after:            Wed 05 Mar 2025 14:14:32 +0000
asID:                     262354
IP address blocks:        177.125.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 02 Apr 2024 23:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8d:ad:b9:1b:07:25:98:19:67:8f:09:2e:9c:bf:02:68:96:eb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:32 2024 GMT
            Not After : Mar  5 14:14:32 2025 GMT
        Subject: CN=B3357C19584800AD58D7F8407A1D3A812D107F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:e0:39:8d:0c:63:ca:8b:73:1f:62:7b:6d:
                    4c:cc:e4:c2:a5:ce:c2:0f:b6:3b:e4:03:83:f0:8f:
                    db:0e:42:e5:ce:27:04:42:e7:fd:ee:4b:f4:60:66:
                    26:14:b0:d0:55:6f:0b:f5:93:e4:05:ef:c0:d4:2d:
                    2b:7e:f3:22:a5:a8:82:33:b1:c2:19:1e:53:72:15:
                    fc:5a:a6:47:fb:59:7b:b0:ed:7a:53:9e:2e:b4:29:
                    49:8c:28:7e:73:46:0a:56:22:b1:a1:99:34:30:42:
                    59:5a:95:47:24:c9:34:07:4e:0c:f4:d5:5a:44:4d:
                    89:62:f0:e8:8c:7c:ed:c3:13:81:78:e3:af:ad:ab:
                    2a:dc:1c:69:eb:da:d3:ba:fe:b1:86:0e:21:12:e5:
                    08:17:06:d7:4f:88:33:1b:a5:39:82:d1:82:81:f8:
                    5a:de:82:d1:7e:fd:b7:ac:6f:6e:dd:90:1d:62:e0:
                    e7:d6:3b:73:f5:6d:4f:1f:79:65:7f:d5:03:e0:09:
                    06:7b:95:89:08:a7:11:f9:22:d6:93:14:72:46:a7:
                    8b:04:1b:9e:9a:97:f7:d5:aa:2d:08:ea:d3:1f:b6:
                    02:45:b4:c9:e4:0f:7a:1d:94:72:00:5c:cb:1b:49:
                    35:7f:e4:d7:7c:12:54:43:cb:a1:c1:b5:8c:ca:79:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:35:7C:19:58:48:00:AD:58:D7:F8:40:7A:1D:3A:81:2D:10:7F:6F
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3230382e302f32322d3232203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:95:b3:97:55:ad:7a:c3:b6:93:9a:eb:77:f3:32:bc:6f:82:
         33:13:66:cc:32:11:de:27:44:25:5b:95:d3:87:15:3f:a7:cf:
         81:a1:44:98:e3:1e:2c:53:98:ce:80:70:d6:ed:8e:37:85:4b:
         d9:db:ea:1a:40:fc:a0:65:9c:59:b3:bc:5d:54:2e:d2:d4:ba:
         08:2c:41:f2:e6:37:d8:9e:a4:a9:7b:6c:1d:3e:45:d0:dd:fc:
         83:e8:62:c3:dc:ad:a3:67:89:7b:4e:a7:c5:5b:35:dd:11:1a:
         5e:19:b7:94:b3:3a:54:ba:3d:8c:05:11:aa:f1:41:1c:1a:08:
         50:c6:60:2f:be:b4:ca:fc:d7:2c:70:a9:99:ea:b9:e4:7a:0f:
         b3:9e:c1:71:01:e4:55:3e:d8:24:11:ef:d6:76:57:c9:a5:64:
         d4:04:33:b1:87:c5:cb:55:ca:c4:c4:22:de:c6:04:36:15:f8:
         75:3b:48:1c:18:73:3a:41:94:51:d6:1c:8f:28:1f:e4:03:10:
         79:96:fd:53:6b:44:30:7a:c1:3e:d4:b8:cf:58:aa:06:2f:e8:
         6f:f3:e2:1f:4f:a7:2c:63:d0:9a:89:1c:b5:e2:fa:93:05:05:
         ca:04:e9:ea:91:c3:8e:de:05:01:42:3e:d1:de:c7:30:60:cc:
         15:2d:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 03:09:10 2024 by rpki-client on console-ams.rpki-client.org