Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138352e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138352e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          QE5nSbrCf/0lCkbiTASAQvAvIkAGyo6RsQKl/IjWQ0I=
Subject key identifier:   D0:2F:98:3F:3A:89:F9:59:4E:0F:69:BE:1D:5D:0E:F5:A3:41:E1:41
Certificate issuer:       /CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
Certificate serial:       28AE1BF90247C862C07254063DBA6016D76F2CB8
Authority key identifier: 22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138352e302f32342d3234203d3e203238353837.roa
Signing time:             Mon 15 Jul 2024 00:15:32 +0000
ROA not before:           Mon 15 Jul 2024 00:10:32 +0000
ROA not after:            Mon 14 Jul 2025 00:15:32 +0000
asID:                     28587
IP address blocks:        177.128.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 15:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ae:1b:f9:02:47:c8:62:c0:72:54:06:3d:ba:60:16:d7:6f:2c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
        Validity
            Not Before: Jul 15 00:10:32 2024 GMT
            Not After : Jul 14 00:15:32 2025 GMT
        Subject: CN=D02F983F3A89F9594E0F69BE1D5D0EF5A341E141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:48:26:a1:a1:bf:23:2c:0e:bb:35:91:0f:
                    0b:6b:19:c7:0c:4e:9f:1d:3e:5a:d1:11:c1:3b:5c:
                    b9:97:ae:8e:cf:a2:bf:a5:5c:a3:08:e3:2d:e3:98:
                    89:c3:a3:72:21:ee:da:2d:44:f4:a8:a4:06:73:93:
                    6d:a3:8c:dc:66:b2:00:fd:15:ad:0a:31:ce:21:d8:
                    ad:fe:89:36:84:0f:cd:c3:00:7e:72:c0:e3:f8:b6:
                    45:94:61:a6:f6:56:7a:ae:e1:42:0f:67:26:d6:15:
                    18:59:c2:b5:7b:f3:b2:9e:7b:68:a6:fa:c1:cb:31:
                    81:89:17:27:6e:22:89:70:a9:89:5c:41:0f:4c:29:
                    b9:c1:02:c2:09:60:1f:45:21:62:37:af:88:d8:6f:
                    53:dc:ad:0c:c6:95:5f:33:8b:98:79:c7:10:65:4d:
                    fb:d8:81:b3:ab:47:55:de:e2:64:0d:ef:4b:4d:9b:
                    f4:a6:90:1c:cf:3b:42:1b:94:57:af:77:7f:5f:6f:
                    34:d1:05:b2:c4:fb:a5:1f:06:b2:a0:51:20:c0:3c:
                    11:d6:71:b9:ff:ef:28:07:98:15:b2:78:1b:ea:1d:
                    7e:ec:c1:8a:a7:72:1c:52:17:6d:1f:28:8b:aa:5e:
                    0f:fa:9a:43:bf:c7:0f:c8:28:4b:f0:ca:b7:3e:53:
                    28:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2F:98:3F:3A:89:F9:59:4E:0F:69:BE:1D:5D:0E:F5:A3:41:E1:41
            X509v3 Authority Key Identifier:
                keyid:22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138352e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:1b:49:d1:a8:4d:16:45:85:27:83:58:a4:0f:c9:ff:96:
         74:51:8c:9c:0f:73:80:9d:d3:9b:c5:a1:7c:21:ac:d4:a4:0b:
         f5:97:6d:79:72:28:ed:f1:9d:7f:09:5d:6b:99:ee:99:30:95:
         d6:88:0f:68:9c:f5:9e:63:01:01:25:93:c5:23:b9:3a:f5:2f:
         ab:58:0d:b9:5d:50:33:93:a9:30:cb:c4:b3:81:31:b6:4c:d3:
         31:fd:ae:e2:89:03:e5:d4:4d:85:2c:47:8f:a9:98:cd:88:a0:
         6f:88:67:97:5d:48:aa:4f:04:f0:34:18:63:ac:cc:ee:7a:08:
         72:f7:ea:2e:9a:81:6c:75:a8:7a:8d:99:c1:e0:d8:c9:01:90:
         e5:c6:81:80:dc:25:57:4a:28:28:df:30:bc:cb:cb:21:55:f5:
         43:42:a7:53:41:44:33:32:0c:ce:8f:57:ef:c5:9d:ec:da:ff:
         6b:02:ba:77:c4:0e:96:61:44:7a:6b:bc:17:e2:fe:6c:af:3f:
         95:f0:32:87:8d:8b:f5:d9:99:40:65:c4:20:a2:45:8c:d1:9a:
         68:a9:ee:c9:3e:1e:e7:44:35:b7:a4:94:65:eb:b6:b7:58:93:
         be:7e:c2:72:20:5a:12:97:f6:2b:f6:c5:19:47:98:75:45:ec:
         fb:df:54:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 18:31:50 2024 by rpki-client on console-ams.rpki-client.org