Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138382e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138382e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          5Hc7bvsW0F8Vsj4v/8rJtSHRzVUntwwJZBS9h9Q4eqo=
Subject key identifier:   30:E2:6F:76:77:69:94:07:75:D6:9D:1A:74:8E:27:A4:84:E8:33:DC
Certificate issuer:       /CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
Certificate serial:       7E2BA263D65F3223D93DBE433C3E2F46BB44175A
Authority key identifier: 22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138382e302f32342d3234203d3e203238353837.roa
Signing time:             Mon 15 Jul 2024 00:15:39 +0000
ROA not before:           Mon 15 Jul 2024 00:10:39 +0000
ROA not after:            Mon 14 Jul 2025 00:15:39 +0000
asID:                     28587
IP address blocks:        177.128.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 15:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2b:a2:63:d6:5f:32:23:d9:3d:be:43:3c:3e:2f:46:bb:44:17:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
        Validity
            Not Before: Jul 15 00:10:39 2024 GMT
            Not After : Jul 14 00:15:39 2025 GMT
        Subject: CN=30E26F767769940775D69D1A748E27A484E833DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:02:e2:ec:b6:0a:29:7e:53:87:5b:21:99:
                    18:6e:4e:5d:77:a4:6c:21:52:f6:0c:7a:8b:7a:00:
                    88:19:b5:3e:ad:ef:ba:8d:0d:64:24:7a:43:34:2f:
                    50:55:5f:cc:ef:f6:bf:c7:4c:01:03:70:45:45:ae:
                    1f:2b:97:87:ed:c5:5c:b3:df:e2:08:ab:14:85:6a:
                    00:be:b3:ad:63:7b:6b:04:9b:31:d5:1f:0e:3b:3a:
                    99:a9:37:5b:7b:32:de:dd:ff:26:97:e0:36:11:6e:
                    34:25:0e:08:b1:3d:7d:c4:8b:27:0d:db:a3:4a:18:
                    8a:11:fa:61:af:0e:16:a1:e0:1f:a2:7f:c9:00:09:
                    bc:db:51:d6:35:ca:26:1e:4c:bb:d0:be:ea:f2:5c:
                    43:91:fc:db:35:f8:35:a2:87:5c:be:a1:d8:5b:71:
                    a9:40:0e:2b:ea:44:dc:7d:e5:94:cd:54:2c:0a:63:
                    81:75:69:75:e9:57:f7:a7:75:e1:d9:a1:a0:84:e6:
                    86:eb:03:a7:54:b5:3a:5d:04:a5:72:e8:21:9e:4e:
                    99:94:82:f8:51:11:aa:8f:67:b9:2c:04:e4:06:c4:
                    b3:85:6e:53:20:c7:cc:06:f1:d3:aa:05:7b:83:1a:
                    5d:59:ad:a3:bc:97:1e:f7:8e:34:01:43:9e:5d:1a:
                    b7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E2:6F:76:77:69:94:07:75:D6:9D:1A:74:8E:27:A4:84:E8:33:DC
            X509v3 Authority Key Identifier:
                keyid:22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138382e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:92:b6:45:ef:af:24:2d:fa:ed:71:d6:37:68:c4:e2:7d:76:
         d1:aa:66:93:89:f8:93:f4:97:9b:6f:8c:5c:83:8b:79:c4:0f:
         61:99:13:fc:e0:78:18:6f:76:03:02:fd:b4:76:45:b4:ec:aa:
         10:58:14:dd:7d:67:73:44:31:9e:b3:56:a0:cf:8e:d9:bc:75:
         dc:0a:24:e7:f3:09:50:c1:0e:c1:63:a5:c0:b1:83:44:69:75:
         19:90:90:56:f8:84:55:48:89:5a:88:ab:1e:08:69:a8:f2:50:
         d0:74:07:3d:99:b8:51:c3:ef:07:75:05:d7:06:62:f5:86:f7:
         6d:b5:1a:88:62:86:45:41:95:66:52:5a:f9:10:1d:de:1c:9e:
         e7:bf:ab:fd:9b:af:57:6b:97:64:2a:2a:65:4d:c8:83:67:73:
         20:33:85:e2:2b:57:7e:ed:50:0d:54:66:0c:84:42:b1:79:96:
         28:8b:7f:df:0f:d2:23:bb:3f:44:06:83:b6:98:31:36:a2:82:
         23:db:c6:3a:1c:07:b9:65:e5:45:d2:fa:b5:ce:d5:8b:6b:51:
         3d:11:b6:27:f6:ed:0e:df:d6:3c:5c:eb:72:0f:76:9a:eb:0b:
         68:1a:44:66:e1:e0:9f:de:6b:ea:8d:ed:b6:2c:ac:e7:b5:2d:
         2e:e1:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 16:58:14 2024 by rpki-client on console-fra.rpki-client.org