Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa
File:                     3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa (raw, json)
Hash identifier:          41es1ok1SwIX5jCpxBMu1VZiRRf4rDuCf3SWlULE+34=
Subject key identifier:   68:54:99:5A:F9:4D:AB:4C:02:CB:AA:82:E3:8E:BF:8E:45:55:89:7F
Certificate issuer:       /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Certificate serial:       38DEEF747C3E59F7E01D27E470D06F18530E7A8B
Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa
Signing time:             Thu 04 Apr 2024 10:57:44 +0000
ROA not before:           Thu 04 Apr 2024 10:52:44 +0000
ROA not after:            Thu 03 Apr 2025 10:57:44 +0000
asID:                     263400
IP address blocks:        177.222.232.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 14:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:de:ef:74:7c:3e:59:f7:e0:1d:27:e4:70:d0:6f:18:53:0e:7a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
        Validity
            Not Before: Apr  4 10:52:44 2024 GMT
            Not After : Apr  3 10:57:44 2025 GMT
        Subject: CN=6854995AF94DAB4C02CBAA82E38EBF8E4555897F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:d2:52:87:21:d1:71:ef:76:29:5f:49:f3:
                    3e:b8:42:5a:0b:d2:0b:1c:04:bb:52:d7:7a:23:49:
                    bd:75:7f:1f:41:30:f5:e1:a6:b1:67:88:cc:81:c7:
                    dd:65:b0:83:55:8b:ab:b3:43:d2:56:65:5f:fe:fd:
                    df:54:b7:b7:a5:f5:ec:8e:74:c2:14:20:c7:6e:ba:
                    c9:73:98:a6:11:a2:e5:76:64:e7:fb:8b:40:1f:8d:
                    4b:a6:e6:dc:ce:f8:14:19:5e:a8:5f:6d:61:9d:7c:
                    69:19:ea:4d:3a:1b:bd:25:de:96:1b:6e:f4:a7:90:
                    12:82:87:1f:b6:ed:08:c9:ad:65:0d:07:12:1a:54:
                    81:09:39:47:ed:d6:2c:c0:7c:69:81:d7:9a:94:0b:
                    42:6d:16:38:82:03:25:77:91:b7:c7:4e:6c:06:18:
                    cb:17:da:41:0e:29:c7:8a:5f:fe:1c:73:57:6c:cc:
                    33:29:33:47:77:c8:b1:e7:ee:31:1b:df:74:98:9a:
                    8f:7d:9f:f1:2c:2a:90:14:e8:0b:39:c5:a5:ec:23:
                    2d:03:64:ee:0a:76:96:13:de:1f:9d:d7:9b:e3:12:
                    13:89:73:a1:a1:5e:41:f7:70:f1:44:f8:7d:44:a5:
                    cb:6f:05:5d:23:70:0b:30:2c:b1:6f:1f:9b:d1:03:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:54:99:5A:F9:4D:AB:4C:02:CB:AA:82:E3:8E:BF:8E:45:55:89:7F
            X509v3 Authority Key Identifier:
                keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:9d:6a:16:c3:cf:4f:d5:8f:ad:7b:8c:fe:da:60:43:1d:af:
         b3:d8:83:aa:f6:cd:34:0b:49:ca:37:23:57:e5:eb:47:bb:48:
         95:6f:d7:7d:fc:d6:0b:d0:7f:86:b3:3b:79:05:33:8f:58:92:
         94:6c:c9:ce:39:db:e5:01:58:f7:79:2b:74:86:53:b8:13:d7:
         8f:ec:e2:2a:e8:eb:1f:72:34:61:f6:00:9d:ae:ab:df:e7:8c:
         37:a7:b1:ac:a9:bb:bd:69:2e:14:23:b5:41:be:d6:0c:0d:b3:
         12:a7:f0:8f:3b:2c:1b:25:ef:e4:29:a8:33:94:ba:2e:19:78:
         23:e9:d5:cc:aa:ae:ce:f3:b4:eb:c5:aa:ca:b7:e5:39:c9:6c:
         bc:9d:d5:7d:70:e1:49:1c:46:f2:e6:8e:92:04:bc:75:6d:f4:
         6a:b2:47:3e:c0:63:3c:64:a7:59:a5:ab:c8:e9:69:b8:8b:94:
         a5:62:13:14:6d:a2:e9:e8:d6:00:60:6f:18:f1:a3:8e:33:20:
         be:c2:f2:76:4e:86:c3:71:ca:8a:3f:73:5f:0a:b6:e8:ea:1a:
         5b:c1:18:9d:83:ba:11:83:67:27:33:77:08:46:bd:58:fe:4e:
         ea:a8:7c:d5:03:aa:73:97:b6:8e:08:09:49:90:b7:55:d6:a3:
         85:48:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 16:54:14 2024 by rpki-client on console-fra.rpki-client.org