Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e35322e302f32322d3232203d3e20323633303834.roa
File:                     3137372e32312e35322e302f32322d3232203d3e20323633303834.roa (raw, json)
Hash identifier:          B4QVqtz0Lbd2QN+WoCpo7xPNIfT9hkYdoww+V3/6blk=
Subject key identifier:   AF:37:2D:91:5E:BE:3B:B9:FC:8D:5A:CE:60:3E:6F:96:99:BA:14:61
Certificate issuer:       /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial:       24C4E4BA074D996B974B7CF88662E9D7DA11D8AD
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e35322e302f32322d3232203d3e20323633303834.roa
Signing time:             Wed 24 Apr 2024 17:24:00 +0000
ROA not before:           Wed 24 Apr 2024 17:19:00 +0000
ROA not after:            Wed 23 Apr 2025 17:24:00 +0000
asID:                     263084
IP address blocks:        177.21.52.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c4:e4:ba:07:4d:99:6b:97:4b:7c:f8:86:62:e9:d7:da:11:d8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
        Validity
            Not Before: Apr 24 17:19:00 2024 GMT
            Not After : Apr 23 17:24:00 2025 GMT
        Subject: CN=AF372D915EBE3BB9FC8D5ACE603E6F9699BA1461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e0:bb:0b:4a:d2:30:4d:ae:cd:bc:13:4d:33:
                    63:84:e7:32:1b:49:4a:27:42:e9:78:98:ec:2d:69:
                    83:fb:a8:e5:80:f7:94:13:36:55:8e:1b:9a:87:98:
                    0e:06:cf:36:61:c7:1a:3f:36:1c:6a:38:71:22:68:
                    98:85:58:f9:85:62:c3:49:55:5f:6e:a3:6d:0e:46:
                    0d:06:01:5c:a4:cd:11:df:35:10:fd:3d:82:e5:0d:
                    9d:d0:c4:bd:3b:ce:ea:14:e3:3d:13:ce:06:9e:55:
                    86:bf:81:43:4e:42:dd:b2:92:3a:d6:a2:54:ca:fe:
                    ea:1f:b1:c5:25:77:92:e7:39:2c:a9:42:ad:40:0e:
                    8b:d1:0f:ff:04:4f:75:54:32:ad:74:9a:26:9c:bc:
                    72:5f:60:76:26:df:59:9c:bc:1d:90:88:a9:1d:8b:
                    b2:24:32:dc:63:2e:dc:91:f1:bc:57:aa:60:40:33:
                    a7:f6:e4:2d:60:30:29:85:20:5e:05:7d:32:4a:07:
                    3b:9d:78:6b:29:6d:9a:3c:e2:92:9e:27:6f:05:e7:
                    72:bd:c9:90:fe:9a:81:a9:83:6a:f0:9d:47:7f:5e:
                    82:bd:d8:d9:23:9d:00:dc:f0:c8:94:7f:ac:4c:d0:
                    df:24:2e:0a:ea:14:38:b7:e4:f1:24:fb:e6:67:eb:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:37:2D:91:5E:BE:3B:B9:FC:8D:5A:CE:60:3E:6F:96:99:BA:14:61
            X509v3 Authority Key Identifier:
                keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e35322e302f32322d3232203d3e20323633303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:6a:1b:8d:e4:83:ae:00:ff:eb:af:bf:e4:20:5f:31:69:62:
         4e:22:3a:eb:60:e6:df:7d:05:99:a1:67:a9:9d:dc:f0:7b:d0:
         c6:bc:85:12:95:1e:95:ae:bc:3b:32:63:4a:4f:de:d3:32:0d:
         e0:72:a8:20:c3:e2:cb:97:0d:83:36:1f:9e:8c:6b:2b:f7:ef:
         ea:51:14:b1:67:be:f8:cc:9a:22:7a:90:c2:55:9c:48:67:da:
         7b:6c:1d:75:14:9a:8e:fd:6f:fe:79:3f:dd:79:8e:b9:66:cd:
         f1:3f:48:5c:69:82:dd:5e:e3:5d:2b:45:b9:99:20:2d:3a:c8:
         c4:ed:6e:aa:14:43:92:61:db:7c:7e:12:7d:9c:83:a9:92:79:
         33:c1:a2:57:62:a1:31:4b:6f:82:57:11:96:b0:13:52:fb:09:
         e2:8c:17:e6:b3:6d:11:ed:c9:0d:65:62:ee:cf:b5:bb:05:85:
         02:22:8d:01:ed:83:cb:39:0d:db:0c:36:d4:21:1a:c6:3d:cc:
         2a:8d:7a:4b:3c:9c:65:0c:96:41:5f:99:d8:98:7f:08:1c:ff:
         17:26:39:91:9e:6c:e2:13:9c:3d:14:8f:91:6e:1d:03:7c:dc:
         b3:9d:9a:5b:8d:b3:48:7a:61:9b:8b:c1:e4:81:b8:01:de:73:
         56:e0:27:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org