Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          WF1gsj1XnKeu3Y4U6NE00sDot6tNgYaLdMDKLdw7qJY=
Subject key identifier:   E8:26:41:27:91:52:F3:01:D7:68:93:06:6E:C2:09:47:BC:14:16:A1
Certificate issuer:       /CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
Certificate serial:       40244D64A0278120F9EA51D82B9A5E1B5C6A0080
Authority key identifier: 22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa
Signing time:             Mon 15 Jul 2024 00:15:40 +0000
ROA not before:           Mon 15 Jul 2024 00:10:40 +0000
ROA not after:            Mon 14 Jul 2025 00:15:40 +0000
asID:                     28587
IP address blocks:        177.128.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 15:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:24:4d:64:a0:27:81:20:f9:ea:51:d8:2b:9a:5e:1b:5c:6a:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
        Validity
            Not Before: Jul 15 00:10:40 2024 GMT
            Not After : Jul 14 00:15:40 2025 GMT
        Subject: CN=E82641279152F301D76893066EC20947BC1416A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e3:4d:f6:1c:9c:ff:a7:45:9c:d6:1c:27:2b:
                    17:25:a3:c9:98:11:e1:56:88:42:f6:1e:49:e7:30:
                    b6:5d:76:5d:40:6f:5e:7a:2e:d8:5f:78:35:6f:2b:
                    74:17:77:23:6c:f2:24:a3:da:e0:dc:cc:05:f3:85:
                    89:55:72:6b:7a:b0:8d:88:34:a1:41:56:fc:5b:66:
                    f0:c6:ba:8c:15:a9:aa:07:48:43:e7:78:ac:1b:80:
                    48:b4:75:c5:80:be:08:18:5a:d8:25:8c:24:b9:8f:
                    fd:3b:f4:36:ad:e1:63:59:92:d5:2d:96:69:8e:8a:
                    a4:09:6f:f9:99:94:9d:af:60:ae:6b:6e:99:ae:e1:
                    cf:56:d7:30:b5:81:ca:88:a3:29:8d:bc:8d:88:34:
                    71:91:9c:db:f7:e9:ae:96:09:cc:34:d2:47:2e:df:
                    96:9e:79:4d:1f:b8:d3:1f:83:3e:b6:8c:69:50:56:
                    4b:85:6d:50:f8:9f:a9:79:36:70:80:fc:1e:a2:04:
                    2f:a3:95:86:fe:92:33:8b:1d:ad:d2:94:7a:b8:b9:
                    f3:89:1b:2c:b7:bd:2a:36:1f:cc:35:7c:f6:08:41:
                    34:ff:b9:1c:6e:1b:e4:ed:5e:ce:63:bb:5f:05:66:
                    f2:1e:18:60:ed:5f:38:85:0c:cf:a8:75:02:18:74:
                    ee:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:26:41:27:91:52:F3:01:D7:68:93:06:6E:C2:09:47:BC:14:16:A1
            X509v3 Authority Key Identifier:
                keyid:22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:66:5e:f0:b4:dc:97:d4:5d:ed:e1:1d:52:3f:dc:be:02:49:
         4f:b2:67:d4:22:b9:7b:ec:ca:64:92:f7:9f:f6:8b:aa:3c:c0:
         fc:17:83:cc:b7:2f:fc:03:32:9e:08:e6:6d:5e:4c:2b:32:17:
         0b:b2:d2:89:a0:78:4e:46:96:7e:ee:ab:b6:4c:10:e6:99:9a:
         7f:da:f4:44:5d:af:c7:7f:f0:66:ed:f1:47:5a:3b:d3:be:40:
         01:ea:53:74:4d:70:ce:31:1f:9a:db:4d:39:ca:f5:30:9a:9b:
         87:cc:f6:f2:d4:ce:a0:eb:d5:6b:1f:9f:32:f0:dc:14:b9:a5:
         e2:01:45:22:cf:12:2a:e3:49:72:cf:65:5f:e7:ef:8b:d8:35:
         c9:b7:16:4a:2f:6f:f6:08:39:8a:3f:2f:7a:c4:fb:60:33:3b:
         02:e9:73:33:df:ef:7b:9e:07:d2:dc:43:94:a8:3e:d8:52:36:
         e4:d7:18:7f:20:67:a2:23:c2:06:9f:d1:e4:05:85:01:d8:23:
         fd:0c:3d:bb:c5:4a:29:9a:72:e7:40:f2:1a:ec:6c:9d:33:34:
         1c:20:00:bd:5c:d8:8c:a0:fb:cd:77:96:9b:5d:a4:d9:a0:a2:
         3e:f6:a1:9a:fe:b4:e3:2c:5a:0b:f1:21:52:57:92:86:8d:49:
         57:e7:24:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 16:58:14 2024 by rpki-client on console-fra.rpki-client.org