Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e34382e302f32312d3231203d3e20323633303834.roa
File:                     3137372e32312e34382e302f32312d3231203d3e20323633303834.roa (raw, json)
Hash identifier:          meCBa3yVr8J+Wlx818MDd6FJnujiwhQu/7mBjih+rts=
Subject key identifier:   D7:86:F4:FF:03:A5:CC:5D:4E:50:05:56:3E:F6:78:38:87:1A:D3:12
Certificate issuer:       /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial:       74781D77C9EF3716BE88180F727E7BFF07B6C30C
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e34382e302f32312d3231203d3e20323633303834.roa
Signing time:             Wed 24 Apr 2024 18:21:10 +0000
ROA not before:           Wed 24 Apr 2024 18:16:10 +0000
ROA not after:            Wed 23 Apr 2025 18:21:10 +0000
asID:                     263084
IP address blocks:        177.21.48.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:78:1d:77:c9:ef:37:16:be:88:18:0f:72:7e:7b:ff:07:b6:c3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
        Validity
            Not Before: Apr 24 18:16:10 2024 GMT
            Not After : Apr 23 18:21:10 2025 GMT
        Subject: CN=D786F4FF03A5CC5D4E5005563EF67838871AD312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ae:b1:ea:32:d9:29:c9:42:6c:84:2e:15:ac:
                    64:d8:3b:a0:90:95:d0:bc:e5:dc:ee:9e:c5:33:bf:
                    12:d4:c1:2f:dd:58:0a:10:19:ec:50:22:a8:57:3e:
                    d4:5b:59:ef:28:e8:8f:1e:22:73:43:97:d3:50:68:
                    ba:48:1c:55:d2:3c:a6:c6:01:2e:b2:1a:63:d0:6c:
                    e6:6e:3b:65:65:56:f2:06:35:2f:1e:e1:39:f0:da:
                    61:fd:d3:2f:bd:3d:56:7d:d8:95:81:9a:64:72:c4:
                    71:9f:49:17:b9:24:7f:0e:e5:68:d5:64:02:db:97:
                    61:01:54:d0:28:42:5f:79:f7:54:45:df:3e:f7:40:
                    d4:d1:80:33:f4:09:d3:0d:6c:fb:c1:cd:65:da:03:
                    67:4d:91:a5:d3:c8:47:06:87:08:e1:85:3a:df:6f:
                    ab:55:e3:35:1c:56:93:eb:c3:fc:41:81:d4:22:bf:
                    4b:6a:18:50:25:b9:62:92:98:45:74:a6:27:8d:c6:
                    47:0c:20:bd:20:3d:57:1a:02:45:8e:b5:49:aa:20:
                    d1:d2:93:fb:84:9e:b5:7a:b6:b8:dc:b5:8b:12:8e:
                    96:4e:d3:98:44:c4:57:74:0f:33:76:cd:60:17:bb:
                    0c:86:e7:23:8c:c7:fd:02:cd:0e:2a:c1:13:c1:bb:
                    61:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:86:F4:FF:03:A5:CC:5D:4E:50:05:56:3E:F6:78:38:87:1A:D3:12
            X509v3 Authority Key Identifier:
                keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e34382e302f32312d3231203d3e20323633303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:7c:16:59:f1:d1:85:2d:f6:6a:28:e4:df:19:e3:2c:4b:cb:
         6c:0e:ad:65:10:39:7a:92:07:d3:5f:ea:6f:ae:af:e5:12:29:
         26:e2:dd:a9:1d:a1:c5:53:e2:5c:ab:e6:a6:76:c2:2a:90:aa:
         22:3d:62:a0:de:0f:76:f5:27:23:44:b7:15:4b:22:dc:98:ab:
         cc:00:6b:be:4a:11:3c:e5:2e:a1:ca:fa:cd:8b:e6:19:6b:be:
         cf:ae:cf:6d:bf:ac:98:76:b4:5f:7b:0f:7e:cf:7a:52:b2:9e:
         1a:81:31:b6:fb:a6:95:c2:dc:98:7d:cf:6d:c4:80:74:28:04:
         eb:07:10:b8:1e:ff:ad:0a:44:75:62:44:88:d8:d7:26:dc:4c:
         1c:9c:67:ce:be:13:04:dd:9b:e7:a8:51:bb:46:8f:73:d1:ef:
         bb:69:6a:90:ae:03:2d:dd:bd:16:ad:f0:a3:31:3d:f3:6f:85:
         9f:99:00:e1:3b:7f:87:48:a1:20:ed:f8:a1:58:22:10:20:95:
         9c:28:05:23:bf:32:6e:aa:31:03:6a:4f:99:96:c4:81:93:57:
         75:90:ba:c4:50:75:e8:2d:1c:0f:34:e5:a3:34:ec:db:41:e9:
         b9:61:59:8c:67:14:01:56:a7:60:30:d8:1a:7a:80:a3:46:47:
         23:ea:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org