Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32302d3230203d3e203532383938.roa
File:                     3137372e3138342e36342e302f32302d3230203d3e203532383938.roa (raw, json)
Hash identifier:          eWSa/rEW0O3zu+c9QX5WnXgyA4rXs/fLP2EDrCdQfP0=
Subject key identifier:   75:FD:06:A1:3E:40:9F:FC:69:55:AF:AF:B4:36:51:FA:3C:FB:16:56
Certificate issuer:       /CN=B9282FDD0A2B602C0F1723614F0309733B8C6B71
Certificate serial:       08FA0ACC1B38A10D0E4D0319413667D1B6E7ABA9
Authority key identifier: B9:28:2F:DD:0A:2B:60:2C:0F:17:23:61:4F:03:09:73:3B:8C:6B:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9282FDD0A2B602C0F1723614F0309733B8C6B71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32302d3230203d3e203532383938.roa
Signing time:             Thu 29 Aug 2024 14:51:00 +0000
ROA not before:           Thu 29 Aug 2024 14:46:00 +0000
ROA not after:            Thu 28 Aug 2025 14:51:00 +0000
asID:                     52898
IP address blocks:        177.184.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 20:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fa:0a:cc:1b:38:a1:0d:0e:4d:03:19:41:36:67:d1:b6:e7:ab:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9282FDD0A2B602C0F1723614F0309733B8C6B71
        Validity
            Not Before: Aug 29 14:46:00 2024 GMT
            Not After : Aug 28 14:51:00 2025 GMT
        Subject: CN=75FD06A13E409FFC6955AFAFB43651FA3CFB1656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:ec:88:ad:a3:63:49:ad:ea:8a:e2:72:f0:
                    8c:bd:11:b4:aa:29:0d:e9:1c:31:93:3e:62:c9:e2:
                    04:d7:4e:59:ab:02:70:78:a2:f9:d9:9f:89:28:2b:
                    9f:3c:3d:ca:76:37:45:ca:86:35:30:ab:39:fa:57:
                    ec:7a:a6:8a:2e:0e:d2:10:96:6c:0c:b5:ab:d9:b6:
                    cd:b0:fc:65:60:d5:17:7a:28:22:46:05:ec:f4:56:
                    99:57:27:9e:57:65:91:55:fa:a1:92:78:78:9f:6a:
                    b4:b3:1e:c7:53:c7:b9:16:93:e9:9d:8c:6d:4e:ac:
                    a2:05:9e:c3:7d:7a:05:2b:0c:67:c6:8e:e6:eb:4a:
                    88:74:b3:a7:34:2a:e3:b1:aa:dc:8c:9b:0f:d7:e4:
                    56:d9:b6:eb:5d:c8:ac:7d:21:8a:cc:40:c7:77:7e:
                    03:96:c6:14:2b:3a:1e:8d:55:88:25:36:bf:9b:16:
                    69:4e:d8:d1:d7:ac:88:5c:54:18:da:2b:ed:e2:b9:
                    74:b2:ab:9c:1c:ea:83:32:63:82:2a:d7:46:8c:b9:
                    0d:af:90:31:9d:68:50:fa:18:1c:14:43:db:f3:aa:
                    39:d5:2a:86:c4:55:71:b5:91:cf:95:97:1b:b1:11:
                    2d:2f:ab:d8:fd:ad:1f:da:1f:23:e0:f9:4b:f4:f0:
                    ab:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FD:06:A1:3E:40:9F:FC:69:55:AF:AF:B4:36:51:FA:3C:FB:16:56
            X509v3 Authority Key Identifier:
                keyid:B9:28:2F:DD:0A:2B:60:2C:0F:17:23:61:4F:03:09:73:3B:8C:6B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/B9282FDD0A2B602C0F1723614F0309733B8C6B71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9282FDD0A2B602C0F1723614F0309733B8C6B71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32302d3230203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:f2:f5:20:82:51:75:d3:b3:29:97:18:b4:b1:e9:41:5c:df:
         26:00:c5:79:f4:b0:44:f7:f4:ab:51:9a:c4:7b:e0:61:50:74:
         84:e4:aa:d8:86:e3:02:90:9f:02:a4:24:de:1d:df:92:f8:15:
         d5:04:24:ad:57:95:9c:57:6d:49:4f:62:9a:09:4b:21:c9:ad:
         cc:ce:8b:4f:c7:a4:89:39:06:9e:d8:fd:7a:6e:bc:bf:c4:54:
         40:f9:08:24:d4:ce:66:57:66:72:36:c5:fb:eb:e7:b4:ff:7b:
         c7:45:f5:4e:16:5e:45:06:d5:b8:c1:40:7d:15:20:a3:72:11:
         15:f0:06:25:9d:ff:e9:8a:00:a9:0c:10:23:e1:9b:b7:99:90:
         c2:f1:26:2e:27:61:85:05:12:b6:54:e8:bc:e4:08:31:35:86:
         1c:42:b2:d9:8e:7d:00:1d:f4:69:a6:4a:fc:f1:f0:97:44:f5:
         69:c4:97:6a:64:a0:1a:c8:46:78:97:95:39:e1:1e:3d:13:85:
         d0:7f:7b:28:d9:f0:68:d9:3d:fe:4f:15:bf:8a:64:9c:89:44:
         d5:3e:ee:8d:69:17:fb:ec:b7:77:09:7d:22:ee:78:de:25:0a:
         70:fb:ef:89:cb:85:37:64:a8:7f:47:0b:ce:33:37:01:cb:9a:
         be:b9:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 23:12:46 2024 by rpki-client on console-fra.rpki-client.org