Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138372e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138372e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          etmIZ7jsL2DGmTfgXew2ltrGMJG9HXofkzUsI9C/f/E=
Subject key identifier:   D8:45:6D:38:06:8F:B9:97:F9:1B:03:EE:3F:5D:E8:80:64:7F:20:3F
Certificate issuer:       /CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
Certificate serial:       403C2E661E4020235959F79ABE6FF1BCD4E96335
Authority key identifier: 22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138372e302f32342d3234203d3e203238353837.roa
Signing time:             Mon 15 Jul 2024 00:15:36 +0000
ROA not before:           Mon 15 Jul 2024 00:10:36 +0000
ROA not after:            Mon 14 Jul 2025 00:15:36 +0000
asID:                     28587
IP address blocks:        177.128.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 15:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:3c:2e:66:1e:40:20:23:59:59:f7:9a:be:6f:f1:bc:d4:e9:63:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
        Validity
            Not Before: Jul 15 00:10:36 2024 GMT
            Not After : Jul 14 00:15:36 2025 GMT
        Subject: CN=D8456D38068FB997F91B03EE3F5DE880647F203F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:95:9b:1f:19:01:2c:69:b9:37:ad:af:5d:
                    f1:61:a5:46:02:73:af:c8:8b:03:1e:7b:5e:ef:9c:
                    a0:c6:ea:93:0c:3b:79:85:57:46:77:17:f5:5b:69:
                    1e:41:eb:bd:51:c1:9c:9c:57:8e:4b:cb:79:64:5b:
                    19:01:76:51:c6:b7:83:f9:38:a9:a9:e5:bf:d4:27:
                    9b:bf:a7:94:57:5d:0b:db:68:5d:f4:8f:78:34:03:
                    c6:12:31:6c:ea:34:65:01:fe:5b:05:f1:68:9d:ec:
                    14:5c:3f:46:35:4b:0f:d9:f9:e2:6c:f1:78:dd:cc:
                    35:66:3f:bf:ed:3d:3c:c5:2a:b3:f5:0c:11:ca:f2:
                    31:88:56:d7:c5:22:ab:98:14:f9:8c:57:b6:8c:6e:
                    60:61:31:17:0e:30:d3:3e:61:65:ab:6e:31:29:e2:
                    b0:db:90:af:33:5f:c0:7b:da:4a:b9:42:fd:c9:a3:
                    bb:85:57:1f:3e:38:51:11:d3:e7:ae:d7:30:41:58:
                    88:2c:f6:c7:0d:ea:51:b7:fe:81:eb:cb:77:68:1d:
                    b1:8e:40:24:8c:f7:ef:aa:cb:4f:39:6a:8c:a8:ae:
                    c0:9b:61:ff:18:6b:79:92:c8:08:0e:cc:b8:16:06:
                    03:14:e4:48:16:65:5b:70:40:db:5d:11:07:25:c3:
                    1b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:45:6D:38:06:8F:B9:97:F9:1B:03:EE:3F:5D:E8:80:64:7F:20:3F
            X509v3 Authority Key Identifier:
                keyid:22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138372e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:87:df:33:80:a6:10:19:e3:ff:3d:e7:83:82:58:ca:1f:d3:
         51:ee:27:8e:70:89:fa:56:63:d9:a4:47:f4:b2:77:a4:37:c9:
         93:9b:58:f8:76:69:6f:df:a4:b8:1f:43:02:be:27:1e:f3:5b:
         27:eb:56:8d:9e:61:44:12:7d:5a:94:ce:28:14:76:fa:ef:fd:
         0a:9f:e9:af:f9:2f:c0:72:88:0e:aa:c5:bc:9f:a6:55:59:1b:
         ce:d9:bf:f6:3a:3d:98:3c:c2:02:fb:6a:5c:01:40:9a:8e:d1:
         fa:3e:6e:71:a3:ab:71:78:e4:30:ed:96:e0:f6:76:15:d6:80:
         34:5d:3d:d8:26:94:99:2c:89:a6:de:aa:4b:e9:48:6c:c8:75:
         8a:21:14:27:16:7a:8a:bf:48:df:6e:d2:ce:39:fe:10:9e:84:
         83:60:aa:75:59:42:c8:f7:bf:f0:30:d4:46:a4:8c:10:dd:90:
         3f:68:e9:64:a8:ed:e8:91:d3:a9:51:8a:6d:b0:0f:84:3d:93:
         50:1b:3d:ab:02:39:67:f2:92:54:04:c0:29:10:70:36:92:7a:
         5a:5b:54:83:af:5a:36:77:91:fd:c6:16:f5:63:df:7d:92:b9:
         63:71:e7:bc:da:fc:f9:3f:bc:51:71:34:ac:be:72:4e:cf:75:
         50:94:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 18:31:50 2024 by rpki-client on console-ams.rpki-client.org