Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32332d3233203d3e20323632333933.roa
File:                     3137372e3132392e38302e302f32332d3233203d3e20323632333933.roa (raw, json)
Hash identifier:          CLHxMc+j3qXu584hNUkLbXQQEK+gVJMGlavwbAKTGow=
Subject key identifier:   C7:70:15:53:E7:BC:C6:77:5A:2B:A9:8D:06:47:CA:4D:13:EF:8F:9F
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       51FC414FF779DA084DF9EA8CE13D702435D82E67
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32332d3233203d3e20323632333933.roa
Signing time:             Sun 05 May 2024 21:40:37 +0000
ROA not before:           Sun 05 May 2024 21:35:37 +0000
ROA not after:            Sun 04 May 2025 21:40:37 +0000
asID:                     262393
IP address blocks:        177.129.80.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 24 Aug 2024 18:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fc:41:4f:f7:79:da:08:4d:f9:ea:8c:e1:3d:70:24:35:d8:2e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  5 21:35:37 2024 GMT
            Not After : May  4 21:40:37 2025 GMT
        Subject: CN=C7701553E7BCC6775A2BA98D0647CA4D13EF8F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:12:8d:6c:d1:f0:e2:20:f9:30:fd:2c:2c:f1:
                    9b:0f:80:a5:ef:94:4b:76:80:91:81:95:62:a4:61:
                    24:ce:8b:84:6e:8c:55:d8:56:55:d8:33:5b:56:d3:
                    57:27:49:5d:f1:ef:35:79:7e:ae:b2:90:f3:51:b5:
                    22:de:46:86:71:dc:41:ec:be:35:67:b8:65:ad:86:
                    44:47:d9:7e:49:a0:99:ec:90:44:99:37:ac:b5:ce:
                    cf:3a:3d:f4:65:10:66:1c:40:a2:06:2c:9e:20:8b:
                    a3:4a:fe:8b:cf:39:9d:ba:d0:ec:f0:ec:d3:24:d3:
                    35:10:12:3c:cc:2b:7d:9d:a8:79:20:69:82:65:fc:
                    96:e3:d8:68:9f:7e:40:c0:a1:66:47:76:d1:0a:c4:
                    3a:b0:e9:2c:ba:68:fa:2e:b8:cc:52:bf:e9:8e:8f:
                    51:cd:65:29:47:98:51:b4:d3:4f:0a:eb:38:98:a3:
                    13:87:1a:aa:65:f9:e4:02:bb:d3:8a:9b:75:f0:bc:
                    a8:64:46:c7:fe:0f:36:70:90:97:21:78:f6:ba:0f:
                    00:fa:04:ae:ea:70:0a:da:03:21:c5:3c:60:db:36:
                    30:3e:fe:1e:b5:ef:3b:d1:9e:0b:cf:bc:cd:e3:eb:
                    4a:1a:80:fa:1b:e7:f3:43:42:15:83:94:a6:ea:ef:
                    c2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:70:15:53:E7:BC:C6:77:5A:2B:A9:8D:06:47:CA:4D:13:EF:8F:9F
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32332d3233203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:38:37:14:93:53:c9:03:97:0d:87:e6:39:0a:85:d3:e4:bf:
         10:6d:2f:dc:64:99:8e:52:59:82:84:21:21:14:c1:c0:36:dd:
         d8:db:f8:ca:77:ce:d6:8b:b2:56:6b:e2:38:95:a9:f2:24:61:
         d3:86:94:d7:48:13:75:99:87:0f:a3:fd:fd:78:eb:c1:3e:b9:
         71:45:09:9d:30:ec:46:67:70:8d:fe:90:4b:6b:62:63:c3:da:
         c8:84:32:a6:c2:5e:95:35:a8:d2:b3:d2:56:c1:70:c0:ce:de:
         48:3c:93:a9:44:de:df:c0:54:f9:45:ec:f9:cf:73:c0:f8:35:
         1c:f6:dc:61:e4:c8:ce:e2:66:e3:a8:d6:71:f5:ef:da:17:63:
         ed:06:f0:db:b1:51:07:d4:0c:2f:92:96:b2:a4:81:a7:2e:4a:
         b8:73:6a:fd:25:62:09:7d:57:b0:7b:c6:7d:98:0a:4c:e3:45:
         c7:ba:a8:7d:ab:e3:45:2e:cb:c1:c9:34:64:a1:50:9c:7f:8d:
         ff:5b:48:c5:68:a6:e4:0f:52:40:7e:b1:1d:ab:94:07:48:8d:
         0a:8a:a3:19:e6:f2:65:3e:29:39:2a:95:f2:3b:63:d0:fd:3f:
         73:31:c4:f5:8a:75:4e:2a:b8:85:0d:a3:3f:05:68:60:35:80:
         96:5e:d2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 19:33:34 2024 by rpki-client on console-ams.rpki-client.org