Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          z9lfufZokGrKqFjeQV0UtVbGZMh+nubIWcYKK212wE0=
Subject key identifier:   78:C9:11:DF:3E:92:72:28:66:F8:73:1F:15:4A:96:4A:C9:6F:6E:F7
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       3DE2C63E53A03015036D42E1C0F785D90D7BF87B
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa
Signing time:             Thu 02 May 2024 20:05:14 +0000
ROA not before:           Thu 02 May 2024 20:00:14 +0000
ROA not after:            Thu 01 May 2025 20:05:14 +0000
asID:                     262393
IP address blocks:        177.129.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 05 May 2024 21:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e2:c6:3e:53:a0:30:15:03:6d:42:e1:c0:f7:85:d9:0d:7b:f8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  2 20:00:14 2024 GMT
            Not After : May  1 20:05:14 2025 GMT
        Subject: CN=78C911DF3E92722866F8731F154A964AC96F6EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:ce:fa:67:2a:93:65:c8:81:8b:57:de:34:
                    16:01:e1:db:47:eb:9b:a5:61:9a:9f:27:37:c2:27:
                    0f:03:b9:97:75:9a:15:1d:85:61:0e:61:fe:05:8e:
                    19:49:2e:12:e2:f0:07:ca:2c:7e:16:cc:58:95:21:
                    10:79:f8:53:09:e3:11:92:e3:a0:f0:db:b1:1f:f8:
                    aa:00:69:06:3a:e8:5b:2e:ab:4f:29:dc:6e:9f:dd:
                    a1:9c:e0:08:3b:5b:b6:d6:d5:67:02:04:55:9b:8b:
                    1f:79:94:9f:7b:bc:bb:fb:c8:e4:0a:6d:54:89:5d:
                    93:73:b0:5a:f2:f8:fa:65:41:b2:ac:36:1d:a4:f5:
                    69:25:ed:b2:3f:f1:4d:f4:27:4b:06:b3:b6:48:ad:
                    a0:89:66:cc:aa:b0:17:3b:c4:97:fd:c7:ff:1b:8c:
                    9f:42:10:28:38:f3:21:73:73:80:64:fd:e4:35:53:
                    20:28:d5:d4:a6:30:ca:8d:91:94:c8:44:b2:4e:79:
                    e6:6c:c0:a6:8f:a9:e6:9e:8b:02:4f:7e:a7:0c:14:
                    fc:47:3c:f8:a1:45:57:ab:b8:ec:aa:6b:79:07:f0:
                    aa:1f:9d:0d:d0:13:30:35:b7:88:f2:ad:e6:ba:19:
                    34:60:f2:b1:1b:4a:14:a9:de:b8:09:b0:d7:cb:00:
                    19:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C9:11:DF:3E:92:72:28:66:F8:73:1F:15:4A:96:4A:C9:6F:6E:F7
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:2c:cd:20:2f:3f:ec:5f:f5:c2:fe:c8:33:55:87:78:7b:da:
         1e:16:21:22:25:fe:77:2d:f2:04:29:07:50:43:4e:cc:8a:e0:
         f5:aa:b0:f2:99:e6:32:79:3c:c7:e0:99:e5:43:92:1d:7e:f5:
         fb:5e:e9:1b:cb:8e:89:e0:91:13:04:99:7f:98:59:40:69:45:
         e6:d1:41:3c:44:d4:20:fb:6f:ca:c6:10:87:ff:a1:b0:a2:1c:
         6c:50:4b:5a:45:1c:67:f7:32:4c:32:09:d3:8b:46:7a:db:2a:
         15:f4:26:cc:e7:29:3b:d3:7b:c2:f0:56:1a:f7:14:6d:44:3a:
         18:a6:94:d5:24:0a:b8:44:63:d3:b9:c9:f0:aa:6c:69:8e:85:
         a3:fd:f1:de:3d:89:77:9d:a9:1a:0e:55:dd:4c:88:a6:ce:a8:
         a8:d3:14:b5:2f:8b:7c:e4:ed:24:e2:85:8b:aa:09:b5:c6:5e:
         97:47:16:d8:3c:32:21:5b:41:b6:bd:90:33:77:98:d0:57:b3:
         41:06:52:f6:b0:76:f4:ea:71:b5:3a:2d:30:d1:ac:0f:a9:71:
         25:aa:0f:50:15:bf:57:5d:22:95:69:27:62:d9:af:2a:e1:f6:
         8b:7c:37:e2:9f:df:0b:de:7c:67:e9:e2:db:c1:4d:4f:8e:30:
         46:2d:a8:7c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPeLGPlOgMBUDbULhwPeF2Q17+HswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNDA1MDIyMDAwMTRaFw0yNTA1MDEyMDA1MTRaMDMxMTAvBgNV
BAMTKDc4QzkxMURGM0U5MjcyMjg2NkY4NzMxRjE1NEE5NjRBQzk2RjZFRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNd876ZyqTZciBi1feNBYB4dtH
65ulYZqfJzfCJw8DuZd1mhUdhWEOYf4FjhlJLhLi8AfKLH4WzFiVIRB5+FMJ4xGS
46Dw27Ef+KoAaQY66Fsuq08p3G6f3aGc4Ag7W7bW1WcCBFWbix95lJ97vLv7yOQK
bVSJXZNzsFry+PplQbKsNh2k9Wkl7bI/8U30J0sGs7ZIraCJZsyqsBc7xJf9x/8b
jJ9CECg48yFzc4Bk/eQ1UyAo1dSmMMqNkZTIRLJOeeZswKaPqeaeiwJPfqcMFPxH
PPihRVeruOyqa3kH8KofnQ3QEzA1t4jyrea6GTRg8rEbShSp3rgJsNfLABl9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeMkR3z6Scihm+HMfFUqWSslvbvcwHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzEzNzM3MmUzMTMyMzkyZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxgVcwDQYJKoZIhvcNAQELBQADggEBAB8szSAv
P+xf9cL+yDNVh3h72h4WISIl/nct8gQpB1BDTsyK4PWqsPKZ5jJ5PMfgmeVDkh1+
9fte6RvLjongkRMEmX+YWUBpRebRQTxE1CD7b8rGEIf/obCiHGxQS1pFHGf3Mkwy
CdOLRnrbKhX0JsznKTvTe8LwVhr3FG1EOhimlNUkCrhEY9O5yfCqbGmOhaP98d49
iXedqRoOVd1MiKbOqKjTFLUvi3zk7STihYuqCbXGXpdHFtg8MiFbQba9kDN3mNBX
s0EGUvawdvTqcbU6LTDRrA+pcSWqD1AVv1ddIpVpJ2LZryrh9ot8N+Kf3wvefGfp
4tvBTU+OMEYtqHw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org