Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32322d3232203d3e20323632333933.roa
File:                     3137372e3132392e38302e302f32322d3232203d3e20323632333933.roa (raw, json)
Hash identifier:          65VwsWLaM2yQufTc2b1WzCTR0mjI0OrWrZu53foEUFU=
Subject key identifier:   66:D5:30:5F:63:30:E1:1B:58:27:4E:23:A9:3F:F8:A3:50:4A:DA:00
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       4B48578E74C6DD3FED22813EC19B5C259CB2B57A
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32322d3232203d3e20323632333933.roa
Signing time:             Mon 06 May 2024 12:17:57 +0000
ROA not before:           Mon 06 May 2024 12:12:57 +0000
ROA not after:            Mon 05 May 2025 12:17:57 +0000
asID:                     262393
IP address blocks:        177.129.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 24 Aug 2024 18:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:48:57:8e:74:c6:dd:3f:ed:22:81:3e:c1:9b:5c:25:9c:b2:b5:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  6 12:12:57 2024 GMT
            Not After : May  5 12:17:57 2025 GMT
        Subject: CN=66D5305F6330E11B58274E23A93FF8A3504ADA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:3b:97:51:06:08:a2:20:9a:72:0c:fa:89:
                    2a:7b:57:f7:37:e4:08:94:05:99:7d:18:4c:50:ff:
                    e5:3b:be:e4:58:15:2b:ee:09:4e:62:eb:c4:25:5d:
                    6d:da:57:25:aa:6c:71:fc:e8:ea:0b:3c:5d:ac:13:
                    15:33:6d:82:b8:a5:a7:f8:e9:be:82:e2:f2:e3:6a:
                    bc:fe:3f:4e:0c:1d:9d:5f:93:22:b0:ad:73:12:ba:
                    17:c9:bb:02:f1:8c:b6:17:b4:72:28:6f:d0:24:d3:
                    16:ac:5d:fc:81:b6:d3:e1:cd:24:21:78:4a:3d:4f:
                    05:7b:c8:6a:35:eb:fe:b2:e8:d0:71:d2:93:b1:4b:
                    68:8f:08:15:73:e4:41:13:b0:70:2a:cb:5d:64:43:
                    ea:53:15:08:78:fc:c9:64:35:c2:99:7f:87:f9:dc:
                    6e:18:e7:b9:66:0c:cd:dd:d9:57:f5:9a:27:8a:4d:
                    0f:3e:5a:a2:cb:a3:94:c0:a5:c0:15:12:92:d2:eb:
                    d0:a3:2d:8f:6a:d1:18:3c:4f:dd:aa:c0:32:62:a9:
                    8b:f7:66:de:26:ab:25:a3:9f:a2:58:fc:f7:7a:21:
                    80:7e:a2:f6:be:16:a7:59:9e:ef:a7:ca:bf:d7:e6:
                    b4:41:43:7a:e2:af:a8:67:27:03:aa:a9:35:d9:10:
                    e9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D5:30:5F:63:30:E1:1B:58:27:4E:23:A9:3F:F8:A3:50:4A:DA:00
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32322d3232203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:4a:99:f6:41:63:89:83:7b:e1:2d:9e:45:5b:90:28:88:b7:
         1a:60:29:13:f3:9f:a2:32:16:ba:90:bb:0b:d0:fc:09:8d:c1:
         96:76:fb:cd:85:11:02:f1:ab:9d:52:3a:2e:f8:6d:e6:5c:d9:
         d5:bf:02:51:4b:9e:da:e5:bf:52:ed:0f:f1:51:54:87:2e:21:
         53:25:6a:dc:bd:ee:3b:c0:80:54:22:37:8e:a4:a2:91:53:14:
         66:98:5d:1f:0a:c3:e5:1c:40:f6:18:72:8c:3a:12:dc:2d:f6:
         ea:19:59:66:39:95:25:5f:5a:79:7c:f5:2f:5a:6b:ad:cf:e2:
         b8:29:b1:92:70:74:ac:0c:3d:a4:70:4c:b4:33:a1:57:2b:41:
         75:79:3c:c5:88:86:ed:f9:01:61:bd:24:5f:71:de:d5:dd:28:
         fa:8b:c3:7f:09:25:98:11:37:bc:b9:08:65:19:b7:d1:7e:c4:
         7a:4e:09:02:36:59:79:dd:4a:53:8c:fa:ec:c3:f1:66:2a:d6:
         9e:81:ed:62:51:f0:38:e3:bf:35:fd:2f:15:0c:f3:58:97:89:
         26:ec:11:3b:57:b7:2e:ed:12:6b:bf:92:bd:15:cb:8d:93:3a:
         2d:3c:fc:21:68:31:f9:41:06:03:4e:10:61:fc:95:9e:be:3a:
         98:3a:e1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 18:59:41 2024 by rpki-client on console-fra.rpki-client.org