Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3232203d3e20323632333933.roa
File:                     3137372e3132392e38342e302f32322d3232203d3e20323632333933.roa (raw, json)
Hash identifier:          l6DAcIOOxbsP4xSEyfaXdLpfmM8v/V/KACbOszgX9qo=
Subject key identifier:   BE:95:53:92:6E:56:0D:CF:F7:E5:FD:0B:06:0E:97:B4:40:CB:75:01
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       78A3230E291470FD2BE1C55E60BA6FB2F1DFFD2B
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3232203d3e20323632333933.roa
Signing time:             Mon 06 May 2024 12:17:57 +0000
ROA not before:           Mon 06 May 2024 12:12:57 +0000
ROA not after:            Mon 05 May 2025 12:17:57 +0000
asID:                     262393
IP address blocks:        177.129.84.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 24 Aug 2024 18:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a3:23:0e:29:14:70:fd:2b:e1:c5:5e:60:ba:6f:b2:f1:df:fd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  6 12:12:57 2024 GMT
            Not After : May  5 12:17:57 2025 GMT
        Subject: CN=BE9553926E560DCFF7E5FD0B060E97B440CB7501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:d6:65:d0:f2:24:5c:e6:d9:c0:ac:a9:83:
                    82:df:07:72:c1:55:39:b3:1e:8f:56:7b:a6:8b:f2:
                    2b:6b:5c:77:9e:41:d4:da:ac:90:bd:af:a5:ed:ce:
                    e8:f2:a6:8f:8c:1b:28:b0:a8:c5:3d:24:df:df:b2:
                    7e:74:98:f8:eb:5c:79:e0:d4:ac:8e:dc:d7:f8:b6:
                    1b:64:fe:e6:0a:63:c6:cc:74:85:ae:ca:47:dc:86:
                    cf:b0:b9:ef:32:84:c9:4a:b8:73:70:74:7d:4d:93:
                    f2:5c:4e:89:5d:05:5a:c6:99:aa:94:c3:3a:76:b8:
                    ea:8c:32:82:7f:67:ed:ca:63:fc:27:86:cc:1a:0d:
                    68:00:8a:24:8a:5e:2f:7b:2d:a5:a1:19:de:47:a9:
                    5a:f8:57:e0:72:a8:2a:e1:77:a6:65:9c:6e:f1:4e:
                    d1:2a:87:87:22:c9:a7:66:21:25:ab:87:59:44:24:
                    d2:66:be:c4:93:04:b1:7c:35:82:de:0b:7c:3b:f4:
                    78:34:b8:41:1d:0e:af:d8:bb:c2:7d:a0:dd:52:92:
                    79:64:39:7f:b6:61:28:93:33:07:a5:92:48:bf:61:
                    7e:9d:59:e6:8e:26:f9:b5:87:b9:4f:e5:51:6a:c9:
                    b5:dd:37:5a:41:47:c6:00:65:d7:6d:ae:dd:51:22:
                    95:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:95:53:92:6E:56:0D:CF:F7:E5:FD:0B:06:0E:97:B4:40:CB:75:01
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3232203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:26:10:f5:a3:cb:d8:d1:83:bd:27:41:28:da:50:15:ec:56:
         a7:d4:3c:66:ad:0d:09:8c:9e:7e:eb:40:e4:d6:df:05:ec:f8:
         e5:05:1e:9d:6c:df:1f:e9:ea:05:83:64:70:9b:38:47:57:5c:
         cc:66:5d:9f:b9:42:55:83:c9:14:33:3b:46:c0:39:9c:a1:f9:
         f6:73:ce:0f:6c:68:c7:e7:b2:ef:2a:8f:05:48:36:46:d1:f9:
         6e:c1:c0:fb:fd:e1:95:09:d2:c2:23:82:06:04:86:23:26:ed:
         97:97:d6:9d:31:a0:a8:e0:6b:f8:98:97:a6:7f:2c:b2:63:c3:
         4b:a0:96:e2:40:ac:0a:c1:ad:79:60:81:5a:2c:8b:19:9f:51:
         5a:d9:d7:3f:ef:9e:7b:03:1e:cf:ff:f8:91:61:e5:35:91:8a:
         93:94:87:b6:45:ff:4d:be:3f:61:d2:c1:4b:d8:64:ef:7d:5f:
         b3:51:e0:3f:19:8a:3f:64:f5:ce:cd:97:33:e5:04:b6:be:cf:
         c7:47:c4:ec:5c:1f:34:0e:bd:54:90:74:d6:91:f9:8d:f6:b2:
         58:ae:89:e6:05:a2:40:9c:0c:4d:fc:6f:e5:6a:9b:d6:09:21:
         46:15:00:4f:c7:91:e1:2e:23:89:f1:2b:4a:85:3a:ef:dc:9d:
         e0:3c:78:63
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeKMjDikUcP0r4cVeYLpvsvHf/SswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNDA1MDYxMjEyNTdaFw0yNTA1MDUxMjE3NTdaMDMxMTAvBgNV
BAMTKEJFOTU1MzkyNkU1NjBEQ0ZGN0U1RkQwQjA2MEU5N0I0NDBDQjc1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPNZl0PIkXObZwKypg4LfB3LB
VTmzHo9We6aL8itrXHeeQdTarJC9r6Xtzujypo+MGyiwqMU9JN/fsn50mPjrXHng
1KyO3Nf4thtk/uYKY8bMdIWuykfchs+wue8yhMlKuHNwdH1Nk/JcToldBVrGmaqU
wzp2uOqMMoJ/Z+3KY/wnhswaDWgAiiSKXi97LaWhGd5HqVr4V+ByqCrhd6ZlnG7x
TtEqh4ciyadmISWrh1lEJNJmvsSTBLF8NYLeC3w79Hg0uEEdDq/Yu8J9oN1Sknlk
OX+2YSiTMwelkki/YX6dWeaOJvm1h7lP5VFqybXdN1pBR8YAZddtrt1RIpW5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvpVTkm5WDc/35f0LBg6XtEDLdQEwHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzEzNzM3MmUzMTMyMzkyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxgVQwDQYJKoZIhvcNAQELBQADggEBACEmEPWj
y9jRg70nQSjaUBXsVqfUPGatDQmMnn7rQOTW3wXs+OUFHp1s3x/p6gWDZHCbOEdX
XMxmXZ+5QlWDyRQzO0bAOZyh+fZzzg9saMfnsu8qjwVINkbR+W7BwPv94ZUJ0sIj
ggYEhiMm7ZeX1p0xoKjga/iYl6Z/LLJjw0ugluJArArBrXlggVosixmfUVrZ1z/v
nnsDHs//+JFh5TWRipOUh7ZF/02+P2HSwUvYZO99X7NR4D8Zij9k9c7NlzPlBLa+
z8dHxOxcHzQOvVSQdNaR+Y32sliuieYFokCcDE38b+Vqm9YJIUYVAE/HkeEuI4nx
K0qFOu/cneA8eGM=
-----END CERTIFICATE-----
Generated at Sat Aug 24 18:59:41 2024 by rpki-client on console-fra.rpki-client.org