Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3139312e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3139312e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          XCPUKRWwwB7Hk/jkYh6j+LHppkVl0LvzNuTaCQqF4Jo=
Subject key identifier:   D1:6D:33:3A:F2:4C:68:B9:DE:42:42:0C:77:10:23:D7:3C:5E:71:37
Certificate issuer:       /CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
Certificate serial:       0361EB6903CF3B624A4E97EFB7482140CF0DF225
Authority key identifier: 22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3139312e302f32342d3234203d3e203238353837.roa
Signing time:             Mon 15 Jul 2024 00:15:44 +0000
ROA not before:           Mon 15 Jul 2024 00:10:44 +0000
ROA not after:            Mon 14 Jul 2025 00:15:44 +0000
asID:                     28587
IP address blocks:        177.128.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 15:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:61:eb:69:03:cf:3b:62:4a:4e:97:ef:b7:48:21:40:cf:0d:f2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
        Validity
            Not Before: Jul 15 00:10:44 2024 GMT
            Not After : Jul 14 00:15:44 2025 GMT
        Subject: CN=D16D333AF24C68B9DE42420C771023D73C5E7137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:72:4a:16:8d:be:f2:bf:22:e3:2b:d1:41:
                    80:2d:7b:e2:23:e7:fb:ee:75:b7:f9:17:6a:8b:ce:
                    b8:17:27:c2:21:5c:0d:96:af:dc:12:4c:76:02:0c:
                    c0:96:17:3e:97:c4:85:5e:ad:32:5a:3c:83:6c:a8:
                    3d:de:be:e5:44:4e:8d:3a:cf:a0:53:4d:13:71:72:
                    45:08:5e:c8:4f:0d:8a:9a:56:75:7f:0f:2b:cd:46:
                    58:03:37:bd:8c:e0:82:a9:e0:ec:35:5f:cb:35:9d:
                    6c:05:40:35:64:93:30:6e:d4:e6:a7:77:ae:ce:c8:
                    73:4c:14:61:d6:a4:60:7e:f2:29:fa:db:ed:57:33:
                    3a:88:eb:51:9a:55:2a:57:87:40:ae:a8:48:60:3b:
                    74:d9:5c:12:fe:a8:0f:a0:66:a1:9b:2c:27:83:4f:
                    cb:91:be:63:78:af:38:b0:1d:04:37:be:97:5f:30:
                    57:ac:22:1f:36:df:f4:fd:11:af:89:ea:c8:cd:bf:
                    79:ff:fd:0f:ab:98:2e:0c:90:85:2b:bd:a9:f9:11:
                    53:cc:e9:a6:04:15:07:2f:d7:ae:c7:84:81:0b:90:
                    e5:71:83:4a:29:58:fa:81:83:09:1c:12:da:94:85:
                    52:2d:0e:10:77:83:ed:ba:d2:24:a1:47:48:d1:eb:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6D:33:3A:F2:4C:68:B9:DE:42:42:0C:77:10:23:D7:3C:5E:71:37
            X509v3 Authority Key Identifier:
                keyid:22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3139312e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f6:40:23:49:d3:49:f0:92:48:70:52:df:be:b8:9e:3f:1c:
         f5:e1:a9:7d:44:4b:fe:cf:1b:50:be:68:ae:79:3c:48:3e:cb:
         b3:e9:f7:97:98:f1:d9:0f:3e:3d:21:b8:41:a4:ef:23:f2:cd:
         9d:66:fa:5f:8f:1b:9a:99:22:be:bc:d9:b1:0b:32:7d:3e:6e:
         b2:a0:3d:d1:2e:01:62:ee:18:68:f5:3a:f6:53:9b:fd:87:79:
         db:4c:1c:9e:97:dd:93:7c:91:37:14:8c:1a:95:98:ef:1e:36:
         62:bf:b0:8b:6a:32:4c:ef:10:d1:02:e1:96:92:81:26:99:bc:
         1b:cb:7b:d6:89:87:c2:0e:b3:3b:1d:5d:62:51:c8:d3:52:e8:
         9d:0f:e4:6c:0a:8d:27:a9:fc:5f:0d:98:ba:2d:52:92:ad:b0:
         c2:65:47:89:3b:83:51:f2:d5:01:b0:51:04:e0:45:eb:43:0c:
         75:64:f5:3d:5c:b9:af:99:ca:27:46:f6:76:c4:bb:1a:22:2b:
         04:59:5b:27:20:b0:8e:3f:a3:5b:19:11:e4:2c:94:59:44:4e:
         50:a6:76:7b:47:e1:ff:37:f8:8f:7c:a3:8e:eb:72:bd:9b:bb:
         7a:17:8b:6f:f6:65:e0:22:b6:96:73:32:e8:61:b5:94:ba:57:
         fc:08:a2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 18:31:50 2024 by rpki-client on console-ams.rpki-client.org