Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3234203d3e20323632333933.roa
File:                     3137372e3132392e38342e302f32322d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          sgOXG5oHHQrnEkfd1u5CZKEqfO7LfkWOTLNrUtIYEMQ=
Subject key identifier:   F5:4C:57:EB:08:CE:B8:DF:23:DB:C2:8B:45:C1:84:03:E5:AC:60:92
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       0B2B5646EE81674882F1367B1FBA25D4A1A459FA
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3234203d3e20323632333933.roa
Signing time:             Thu 04 Apr 2024 18:32:48 +0000
ROA not before:           Thu 04 Apr 2024 18:27:48 +0000
ROA not after:            Thu 03 Apr 2025 18:32:48 +0000
asID:                     262393
IP address blocks:        177.129.84.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 02 May 2024 20:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2b:56:46:ee:81:67:48:82:f1:36:7b:1f:ba:25:d4:a1:a4:59:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Apr  4 18:27:48 2024 GMT
            Not After : Apr  3 18:32:48 2025 GMT
        Subject: CN=F54C57EB08CEB8DF23DBC28B45C18403E5AC6092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:2d:66:40:12:1c:4c:cf:97:04:48:9e:e1:
                    6c:68:d4:1d:c0:f9:6f:ae:e6:41:76:3d:a5:ed:01:
                    30:3a:80:1b:4e:c3:72:8d:19:6f:c5:28:5d:23:d9:
                    26:58:db:45:58:5d:40:e4:a0:0f:47:2d:c3:1b:8c:
                    04:52:3e:be:f0:8d:ba:e4:8d:89:51:00:8c:d1:58:
                    9b:8e:b2:bd:1e:09:0a:d8:dd:27:ba:2a:49:a5:e8:
                    c7:71:b7:4b:6c:e3:00:78:32:9e:8d:5a:90:29:ad:
                    6d:da:f8:bc:77:15:2b:d2:1a:b7:67:bc:8f:ab:b5:
                    2c:03:2d:87:98:c2:b9:e9:25:5e:0b:bd:0c:14:2d:
                    1a:f0:80:ec:33:30:ab:f7:88:5c:ad:b0:27:2b:91:
                    8a:b7:e8:a1:77:bb:e1:83:38:6a:d2:e5:ea:bb:2c:
                    fc:46:30:b9:b4:00:0c:68:44:c7:1a:01:26:c0:d1:
                    86:a8:38:09:f2:85:9c:84:5c:54:89:6d:1c:13:f3:
                    8b:84:32:9c:ea:a4:91:b3:2c:2c:2e:16:f6:5c:a4:
                    7c:73:37:02:9a:c7:b3:d5:72:4c:72:04:ed:36:4b:
                    e0:76:68:98:b4:6b:17:44:b1:63:c0:a1:74:9c:30:
                    58:15:6d:68:11:82:a8:ea:36:e4:1a:5f:9b:6a:88:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4C:57:EB:08:CE:B8:DF:23:DB:C2:8B:45:C1:84:03:E5:AC:60:92
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:b1:5c:46:89:47:a3:13:28:45:6d:72:e8:ff:06:9e:fd:31:
         0c:20:29:1b:a7:99:b2:d6:6a:b8:1c:bb:5e:21:ea:e0:8e:5b:
         9a:a3:08:a7:65:fe:38:c9:73:1e:b6:ba:f3:72:5f:f3:71:64:
         b4:e4:2b:50:54:34:7d:73:59:74:a6:0a:8f:58:49:4f:73:67:
         dc:53:2d:17:9e:9f:e4:a4:7d:5d:79:e9:8d:9b:e0:82:7b:5d:
         ce:32:6a:9c:e7:16:2b:2f:26:a0:71:ad:68:3c:28:9e:94:cb:
         47:da:06:45:3d:70:77:57:1c:eb:5e:f6:cf:0c:f5:13:3b:5d:
         85:ed:88:57:60:5a:ab:39:f0:d2:b3:49:2f:7d:45:a5:84:b9:
         ee:4a:e2:7d:3c:7f:e9:e7:f5:7a:c7:71:34:37:eb:62:8f:dc:
         6e:9b:6c:35:95:e1:13:57:aa:1f:ce:9d:4c:78:cb:6a:4f:e2:
         bc:22:c4:ea:10:7b:42:2e:26:b3:37:76:ec:4e:8a:d9:03:16:
         eb:73:44:e8:9c:e1:67:9a:c3:72:38:b5:43:8d:a7:18:48:e1:
         7b:a0:54:67:9a:09:23:7c:60:de:e0:1f:d0:7f:5b:e6:03:56:
         6e:c9:67:d1:e3:6f:4b:3a:11:7b:be:c2:2d:b3:32:22:a2:a0:
         8d:c6:bb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org