Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38372e37362e302f32332d3233203d3e20323632343434.roa
File:                     3137372e38372e37362e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          9heRHjHqWqZBrSz+PS585bH4w4+YQb5v0xMpbBOYdOo=
Subject key identifier:   76:F9:C1:D9:C3:BD:3C:EF:CE:F2:A6:12:2B:9A:B8:E0:78:AD:CA:A4
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       4CAF09346C6E43643085F32162F044FD2C329385
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38372e37362e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:37 +0000
ROA not before:           Wed 07 Aug 2024 13:09:37 +0000
ROA not after:            Wed 06 Aug 2025 13:14:37 +0000
asID:                     262444
IP address blocks:        177.87.76.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 17:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:af:09:34:6c:6e:43:64:30:85:f3:21:62:f0:44:fd:2c:32:93:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:37 2024 GMT
            Not After : Aug  6 13:14:37 2025 GMT
        Subject: CN=76F9C1D9C3BD3CEFCEF2A6122B9AB8E078ADCAA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:97:52:3d:f1:ef:c7:4b:27:98:24:97:7a:
                    64:92:a4:d1:5a:ce:d5:e4:14:b1:7d:1a:38:cc:49:
                    e8:e7:bf:ee:56:4e:5f:6f:0e:3d:7f:a0:11:0e:be:
                    b3:03:d3:a7:df:7f:47:82:fe:ca:4d:13:4e:fc:56:
                    cd:f2:45:18:fd:e5:fc:74:35:b8:82:7d:be:80:9d:
                    82:2d:a9:70:f3:49:24:d3:fd:72:0c:69:7f:8b:7e:
                    d0:e0:a5:3e:16:be:8e:69:ad:73:1b:d1:d0:39:cf:
                    8c:bf:9a:55:ed:41:3c:cc:0d:f9:74:83:99:22:61:
                    59:90:8f:38:bb:ff:6a:e3:59:65:6a:b9:20:ff:d5:
                    c1:1b:5d:75:e0:e3:fd:d1:25:29:90:0c:e1:c9:e3:
                    a7:48:e2:4a:0b:e9:c8:9c:11:c1:18:91:b9:f4:95:
                    e2:0b:74:64:9c:8b:64:25:b2:dc:3f:2e:bb:6a:83:
                    21:0d:7a:66:b4:85:cd:af:bd:4c:c4:c0:39:4c:ed:
                    53:7f:e5:76:05:a5:21:0a:ef:af:6a:5a:71:9b:05:
                    e2:6f:6b:20:fe:d3:c6:6b:38:f6:0d:dc:d0:c7:44:
                    9e:1e:4d:35:66:aa:8c:fc:bc:92:a4:f1:38:c0:34:
                    59:bf:93:0b:38:c2:36:3c:36:9c:49:19:cf:46:fe:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F9:C1:D9:C3:BD:3C:EF:CE:F2:A6:12:2B:9A:B8:E0:78:AD:CA:A4
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38372e37362e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:7d:43:96:3d:80:f2:b3:80:9c:75:1b:6f:24:68:f2:e2:19:
         77:e9:77:0f:39:f9:f2:bf:e2:a7:b0:63:39:22:a6:8d:7d:92:
         c9:39:36:54:6d:8f:e7:df:2e:22:d2:b0:0c:4e:dc:82:45:bf:
         af:19:9b:69:91:5c:ca:94:75:64:05:59:71:ba:28:c5:83:71:
         0e:73:6f:18:52:a4:96:dc:37:35:db:4b:e8:b0:8f:ed:67:41:
         43:67:04:fe:39:5a:40:45:85:b8:fd:ad:c8:6f:9f:51:a0:ee:
         8e:1c:63:31:43:69:3b:b8:b5:96:b7:8b:f3:6a:c0:fb:55:14:
         a7:11:3c:e5:ed:51:93:b2:ea:d2:14:c4:53:04:70:fd:db:db:
         ce:3b:e9:94:38:51:10:f0:17:2b:e3:ea:66:b6:7f:fd:e0:ae:
         de:38:ab:6b:3a:c2:81:a7:ed:38:75:74:13:fa:ca:02:3d:6e:
         d3:9a:34:f0:4e:ca:53:ee:50:f9:66:02:8d:ed:da:41:df:0b:
         a2:59:e1:b9:f1:1f:6a:6c:5c:63:d7:4c:b2:8d:e2:81:4a:68:
         ab:34:3a:4d:3b:82:ba:9c:4b:9b:08:81:74:c3:51:dd:15:e4:
         a5:4c:50:29:ef:3c:50:9c:3d:4c:d3:2c:03:01:a3:c8:c5:64:
         07:2c:9d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 20:15:37 2024 by rpki-client on console-ams.rpki-client.org