Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138362e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138362e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          xczxgKUMUZbsraXgiuxxwWZxSJVDt+ThkQW6atVAnh0=
Subject key identifier:   81:4E:A2:F7:90:10:1F:25:1C:40:59:1E:C9:62:78:DF:93:5E:A9:B8
Certificate issuer:       /CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
Certificate serial:       137AE4323602B0DBEF30EDF3F47BE4BA2D30BDFF
Authority key identifier: 22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138362e302f32342d3234203d3e203238353837.roa
Signing time:             Mon 15 Jul 2024 00:15:34 +0000
ROA not before:           Mon 15 Jul 2024 00:10:34 +0000
ROA not after:            Mon 14 Jul 2025 00:15:34 +0000
asID:                     28587
IP address blocks:        177.128.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 15:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7a:e4:32:36:02:b0:db:ef:30:ed:f3:f4:7b:e4:ba:2d:30:bd:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
        Validity
            Not Before: Jul 15 00:10:34 2024 GMT
            Not After : Jul 14 00:15:34 2025 GMT
        Subject: CN=814EA2F790101F251C40591EC96278DF935EA9B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:94:98:b9:9c:74:e7:4a:e0:e8:a5:17:69:
                    dd:c3:58:41:61:6f:06:57:23:51:80:44:17:06:10:
                    cf:1d:30:cd:ee:c1:7e:27:32:3d:1a:b4:9f:c6:4e:
                    4e:a8:6b:66:ce:30:ee:ab:a8:b7:b0:4c:d8:28:53:
                    f1:9e:0c:62:02:88:2e:e1:15:6f:df:ad:93:8f:16:
                    77:18:b0:48:94:e5:87:58:7a:93:cf:4b:35:f0:0d:
                    e6:78:15:e0:40:58:dc:02:8c:af:2f:36:1a:42:6a:
                    93:29:94:ee:3a:64:b7:7a:f3:3b:e8:23:06:ce:76:
                    e8:06:c0:22:d6:65:be:a7:23:f9:cd:71:46:60:78:
                    25:a7:30:b7:f8:b7:74:b0:1b:ef:cc:d8:96:00:87:
                    b2:13:9d:cd:79:9e:4d:08:c8:8c:47:9e:86:57:ff:
                    d5:71:c1:6a:7c:3e:5e:d2:54:9e:3a:b0:94:56:4b:
                    fb:24:fc:05:67:ae:47:94:5e:43:77:44:8c:71:3f:
                    da:b0:84:73:4a:a3:c1:52:82:7e:4d:55:81:21:f7:
                    c8:b4:23:0d:ad:18:df:ad:f0:0c:0e:15:7d:11:c0:
                    02:18:af:7c:25:6c:c2:74:4e:7d:f9:d8:80:8f:a8:
                    59:40:40:74:bc:ed:9d:25:86:2f:48:d3:83:e4:c2:
                    8d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4E:A2:F7:90:10:1F:25:1C:40:59:1E:C9:62:78:DF:93:5E:A9:B8
            X509v3 Authority Key Identifier:
                keyid:22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138362e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:68:be:d4:57:58:ba:48:4a:8f:f9:a5:25:6c:48:5b:3b:1b:
         12:1c:e3:f5:94:bf:02:c9:3e:c6:1e:7e:88:a4:4d:8f:5d:09:
         f0:8b:ff:46:f4:c2:ad:f5:46:9d:24:6f:ed:db:cb:2a:3b:3e:
         3c:7e:0d:85:24:c2:01:06:16:50:6c:4d:d5:b0:8e:0b:a5:65:
         e5:48:9b:01:61:14:ba:cd:f9:10:31:4c:31:ea:5b:0f:b3:31:
         e7:90:b0:fb:cb:ed:8b:90:9c:e3:52:e0:f6:19:34:7c:c0:ae:
         d6:e9:61:54:3e:15:ff:29:e6:f2:b6:40:af:82:75:d1:3d:1a:
         32:44:2c:83:92:d8:e1:99:18:8c:bb:49:85:65:f8:7c:dd:5e:
         b3:df:6d:d0:21:c2:4e:4c:79:b1:2f:cb:7e:93:c8:f1:60:73:
         b6:f6:cf:a6:cd:2f:ed:69:9f:d4:48:9d:83:5c:41:82:4c:42:
         bc:b0:66:d1:d1:d1:e1:23:e6:a0:c9:29:15:bf:df:f5:29:ea:
         7c:e3:6e:6d:65:39:26:81:a7:b4:4d:9c:d9:8e:8f:18:23:03:
         3b:85:bb:ef:90:d8:44:a1:12:81:88:b0:de:9a:8d:a6:b9:d5:
         9d:64:44:ff:db:e3:05:13:8c:c9:11:ad:8e:b8:6e:ce:96:6d:
         32:57:de:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 18:31:50 2024 by rpki-client on console-ams.rpki-client.org