Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38372e37382e302f32332d3233203d3e20323632343434.roa
File:                     3137372e38372e37382e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          Ea+TG2fkMd8iWRpqxSWrBYOhCFrCUrEqa2DDOuqw8pQ=
Subject key identifier:   67:7A:40:EE:52:7B:DC:46:6F:51:50:33:5C:C1:30:35:29:7D:39:BE
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       097357582E32BDE88A34F222EB30CC2F01A1687F
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38372e37382e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:41 +0000
ROA not before:           Wed 07 Aug 2024 13:09:41 +0000
ROA not after:            Wed 06 Aug 2025 13:14:41 +0000
asID:                     262444
IP address blocks:        177.87.78.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 17:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:73:57:58:2e:32:bd:e8:8a:34:f2:22:eb:30:cc:2f:01:a1:68:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:41 2024 GMT
            Not After : Aug  6 13:14:41 2025 GMT
        Subject: CN=677A40EE527BDC466F5150335CC13035297D39BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:7e:03:c4:4a:8b:3c:65:a7:3e:6d:de:08:
                    fd:0c:17:ef:d8:11:8f:ed:ff:2a:89:46:a9:62:2a:
                    7f:11:bb:e6:a7:a5:b6:5a:35:61:2b:49:55:2e:b8:
                    6a:18:82:ef:47:43:e9:a8:ed:94:94:5f:02:89:64:
                    ea:12:fb:39:a1:ea:23:19:f0:33:8d:a8:3e:06:01:
                    7b:60:1e:c7:40:ba:5b:f5:b8:4b:1e:51:4a:b7:b5:
                    a3:68:f5:bc:a9:b5:a9:9e:ec:65:17:88:84:aa:32:
                    c6:cf:40:0e:21:a7:14:d7:61:9a:23:2d:73:dd:62:
                    2c:4b:21:c8:94:3f:70:f8:36:03:12:21:7e:8a:a9:
                    40:ca:6d:5a:33:14:ab:45:d9:53:5b:29:f3:11:db:
                    c2:bf:04:aa:b5:17:f4:8e:2c:31:00:7e:a6:7b:17:
                    1a:ed:41:28:66:3b:b5:59:f8:d5:51:97:c5:17:11:
                    94:10:d4:38:d7:bd:a9:96:df:cf:b9:1b:db:30:91:
                    20:18:0d:45:c2:bd:aa:2e:63:65:82:1a:5a:1e:a7:
                    95:69:7f:9b:d3:2b:ed:03:0b:61:13:7e:a1:49:2a:
                    2e:d2:89:60:c6:d9:25:39:2f:0c:7d:9b:fc:79:f5:
                    b2:c1:11:8b:59:7e:59:ff:08:bc:9e:ae:0b:90:db:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7A:40:EE:52:7B:DC:46:6F:51:50:33:5C:C1:30:35:29:7D:39:BE
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38372e37382e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:b5:54:04:de:e2:54:e5:2d:5c:da:cc:8c:01:95:ed:d6:89:
         ab:cf:b6:86:d9:1b:5e:44:f2:ab:31:37:a1:25:ff:a1:8d:3d:
         00:24:78:b8:5e:1e:74:d7:6d:b1:c8:55:7d:60:ed:28:94:9a:
         3e:90:e4:af:67:6a:4f:21:35:61:b2:1b:37:3f:22:93:5b:f9:
         7e:d8:08:10:0f:ec:7d:2a:41:04:52:55:3d:5f:1c:36:30:91:
         01:3b:14:21:61:df:98:d2:3d:3b:8c:b4:db:7f:09:8a:61:42:
         6b:6e:ac:a7:df:e4:5b:6d:24:9b:90:66:a7:03:46:32:59:b2:
         b4:e9:04:03:a0:21:53:6c:37:3f:a2:00:68:41:e3:c5:3e:86:
         df:eb:64:5e:48:8e:0e:6a:fc:37:56:ae:00:bf:e0:37:80:fc:
         56:06:2b:26:79:ee:93:4e:cc:a0:b7:23:c0:e6:1d:08:81:7a:
         cf:4c:0f:47:df:26:28:2f:19:af:80:cd:ac:b2:47:e6:1a:af:
         ca:f3:89:83:14:e8:37:d3:f1:1d:10:83:af:7c:46:25:6d:95:
         52:da:e9:c8:1b:4f:5f:c3:7a:28:cb:5e:fb:d8:a1:1e:7d:28:
         3e:fe:8f:a6:c8:aa:ce:6a:6b:8a:70:6b:8d:0b:a4:4e:df:01:
         dd:7e:17:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 20:15:37 2024 by rpki-client on console-ams.rpki-client.org