Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32312d3231203d3e20323632333933.roa
File:                     3137372e3132392e38302e302f32312d3231203d3e20323632333933.roa (raw, json)
Hash identifier:          c7G+pakt09M5bgx6MuvQ86kDMAxOtsT6HQKZ9o7P4lc=
Subject key identifier:   7A:54:A4:2C:0A:61:D7:16:54:1C:E7:29:6A:C5:47:F6:AA:0C:35:6B
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       25554680E87E67AEFBB0ED0264F216C60F388F00
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32312d3231203d3e20323632333933.roa
Signing time:             Thu 04 Apr 2024 18:32:48 +0000
ROA not before:           Thu 04 Apr 2024 18:27:48 +0000
ROA not after:            Thu 03 Apr 2025 18:32:48 +0000
asID:                     262393
IP address blocks:        177.129.80.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Thu 02 May 2024 20:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:55:46:80:e8:7e:67:ae:fb:b0:ed:02:64:f2:16:c6:0f:38:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Apr  4 18:27:48 2024 GMT
            Not After : Apr  3 18:32:48 2025 GMT
        Subject: CN=7A54A42C0A61D716541CE7296AC547F6AA0C356B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9b:eb:a8:44:8e:36:eb:4c:77:f8:90:f7:94:
                    34:6c:65:08:2a:28:94:5d:b0:cf:8b:0c:fe:f2:34:
                    ed:2b:51:0f:2e:d7:ef:6e:82:24:5f:08:9a:81:c8:
                    3e:02:a4:9f:35:54:fc:69:6d:6d:10:f4:27:72:7e:
                    41:2a:73:c9:6c:d8:a1:36:17:40:c1:42:17:7b:c9:
                    cd:a9:ca:18:b9:25:90:e6:d5:93:af:a9:ad:9f:3c:
                    8a:e6:5d:5f:f1:98:f5:d7:6a:5f:20:72:82:39:66:
                    2c:43:47:c1:f5:a0:60:06:fa:5f:f5:96:cb:04:a0:
                    91:ee:43:e2:bc:8b:00:0f:bf:a9:d9:db:84:11:06:
                    6c:aa:66:3a:4e:e3:51:76:25:8e:54:e8:2f:0b:cf:
                    60:7e:6b:a5:3e:e5:c0:3e:19:93:07:d9:a7:58:15:
                    2d:27:ac:38:09:7e:14:32:8d:b5:c2:8f:74:f6:06:
                    b5:d2:b3:60:36:63:cf:64:87:3e:16:03:e9:00:02:
                    4f:36:64:49:d0:58:ee:04:2a:ba:ae:78:82:1f:9b:
                    92:9b:76:a6:f5:41:c1:11:3c:e1:c3:d9:44:e9:f3:
                    dd:0c:c5:72:31:52:d6:b7:4f:26:e9:15:ca:cf:dd:
                    d2:01:0b:90:8d:53:01:bd:6d:06:f0:8d:5c:39:f5:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:54:A4:2C:0A:61:D7:16:54:1C:E7:29:6A:C5:47:F6:AA:0C:35:6B
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32312d3231203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:cc:95:ef:22:be:3d:4d:1d:00:76:5c:87:72:3a:9f:1f:c2:
         b7:00:da:36:a3:4c:94:d3:a0:19:ba:de:07:e8:0c:56:f0:27:
         05:84:00:9e:cf:5d:d5:d8:e0:0c:a3:f9:1e:95:0a:e8:28:5d:
         52:b7:a9:7f:85:4b:b7:a2:b2:35:cb:48:b3:cd:3f:31:3b:9a:
         90:eb:d6:57:55:26:86:ac:3b:1e:c1:13:28:3c:2e:14:e9:57:
         90:9a:bc:56:aa:7f:87:ac:7c:b0:ac:af:10:e0:35:1a:44:6a:
         b7:17:3b:64:ac:82:f1:8a:d4:84:3d:97:f2:e1:22:c9:c7:51:
         f3:e3:8d:98:fb:47:f0:68:93:a4:a9:b6:34:68:f4:79:c4:e3:
         05:ac:67:c0:31:5a:89:23:e2:b6:34:3b:b5:25:2f:4d:3f:e3:
         4d:a4:3d:09:ab:3c:63:65:11:f5:97:dd:03:e3:70:cb:1a:27:
         ee:06:18:5a:11:16:92:2e:7a:4a:8d:c7:7e:f9:b1:17:d0:fe:
         73:f9:85:4b:4e:59:68:e9:65:df:31:14:e9:6a:79:ed:13:06:
         60:8b:c1:ef:21:ec:b9:8c:3c:a4:e5:1c:75:7e:ff:7c:41:fb:
         26:a1:f1:ba:04:c7:3a:ae:98:b6:ca:1d:7a:6d:84:4b:9e:5d:
         9b:51:6f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org