Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32312d3231203d3e203532383938.roa
File:                     3137372e3138342e36342e302f32312d3231203d3e203532383938.roa (raw, json)
Hash identifier:          iyPEzrnqRL8CYoQOF4DQh0oKk6M+kEYU7gkBmzl2seU=
Subject key identifier:   FC:D8:D3:6E:CE:75:5E:03:6F:AA:1F:41:13:A4:E7:1A:34:E7:4C:C6
Certificate issuer:       /CN=B9282FDD0A2B602C0F1723614F0309733B8C6B71
Certificate serial:       1A24EE476CEE3DC059B3B6199961754665087AD1
Authority key identifier: B9:28:2F:DD:0A:2B:60:2C:0F:17:23:61:4F:03:09:73:3B:8C:6B:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9282FDD0A2B602C0F1723614F0309733B8C6B71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32312d3231203d3e203532383938.roa
Signing time:             Thu 29 Aug 2024 14:51:00 +0000
ROA not before:           Thu 29 Aug 2024 14:46:00 +0000
ROA not after:            Thu 28 Aug 2025 14:51:00 +0000
asID:                     52898
IP address blocks:        177.184.64.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 20:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:24:ee:47:6c:ee:3d:c0:59:b3:b6:19:99:61:75:46:65:08:7a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9282FDD0A2B602C0F1723614F0309733B8C6B71
        Validity
            Not Before: Aug 29 14:46:00 2024 GMT
            Not After : Aug 28 14:51:00 2025 GMT
        Subject: CN=FCD8D36ECE755E036FAA1F4113A4E71A34E74CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1b:1a:2c:a7:43:a7:79:41:98:e5:1a:f0:f1:
                    12:c5:2c:bb:81:08:7f:8a:ea:90:9c:96:c9:70:54:
                    78:c7:44:a1:a8:9a:62:c1:12:e2:8a:ff:11:c1:fa:
                    55:1a:9b:31:4d:2f:bc:45:d0:65:9b:16:96:ec:e8:
                    90:3b:60:a8:32:75:7c:e7:99:3e:1d:62:c1:83:e7:
                    ce:cd:ca:8a:9d:75:67:d9:2b:26:c0:ee:b9:63:e3:
                    eb:75:f8:79:9f:20:b2:eb:ee:b4:61:e6:df:e9:7d:
                    53:10:26:be:b7:c6:db:02:4c:9c:8d:08:bc:72:09:
                    ea:e3:21:62:65:33:a2:6e:21:73:ed:9b:d8:f4:56:
                    1c:32:c1:43:66:29:00:80:84:1c:47:46:84:21:ed:
                    c3:63:80:66:2f:45:4a:12:8a:f8:17:05:28:24:b8:
                    c5:7a:3f:56:f0:61:a6:44:e9:28:8d:68:7c:5b:ee:
                    9a:1b:81:08:d2:36:06:10:65:46:6c:a3:06:be:dd:
                    d6:53:60:81:1b:0c:4b:8b:07:11:ed:c4:80:94:7a:
                    9c:1f:4a:00:89:06:14:2b:c7:90:a9:2b:0e:8a:77:
                    a0:89:1d:a6:a5:25:d3:fd:2a:9f:97:2d:d5:97:a5:
                    fb:56:0d:ad:76:61:25:84:a7:fa:2d:68:e9:f9:c4:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D8:D3:6E:CE:75:5E:03:6F:AA:1F:41:13:A4:E7:1A:34:E7:4C:C6
            X509v3 Authority Key Identifier:
                keyid:B9:28:2F:DD:0A:2B:60:2C:0F:17:23:61:4F:03:09:73:3B:8C:6B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/B9282FDD0A2B602C0F1723614F0309733B8C6B71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9282FDD0A2B602C0F1723614F0309733B8C6B71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32312d3231203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:d1:fc:26:27:9d:8a:4e:f8:11:17:1c:d9:5b:08:08:c6:6d:
         61:16:4d:e0:a2:90:b2:c0:d4:24:b2:da:ae:e3:82:a1:f0:b8:
         81:09:fd:49:9f:3e:d2:44:6a:1a:25:2a:03:a1:45:14:a7:93:
         05:c9:f6:e8:a0:4d:3e:b9:c9:97:d4:58:ec:54:32:fc:f2:74:
         09:73:9a:9a:39:ea:e1:3d:03:57:63:9d:11:48:7f:a5:d2:2e:
         50:6f:9a:d4:76:87:17:a1:13:77:39:95:b0:b1:c2:23:13:c3:
         b2:c3:79:4a:58:a8:c1:bb:3b:c5:ea:75:28:df:89:e4:ee:03:
         d2:08:e4:bd:ee:1e:63:a0:44:d9:7a:d0:c3:1f:6c:b4:48:51:
         f4:87:1b:52:da:8e:fd:f9:34:73:79:4f:17:44:11:75:b6:74:
         41:08:6a:76:27:d6:12:18:0b:58:dd:be:93:53:77:77:df:4a:
         2a:d4:4a:95:3a:30:63:60:6c:68:55:9c:27:20:cc:86:6d:7a:
         9f:14:91:c5:e9:91:23:61:0c:51:5d:b5:b0:d2:b4:2e:e3:73:
         d5:5a:09:68:79:d5:9d:61:4e:5c:08:5b:c7:67:11:01:0a:49:
         3c:8a:fe:18:32:d6:8c:36:97:88:ab:5a:fe:fc:ad:58:da:cc:
         77:d0:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 23:12:46 2024 by rpki-client on console-fra.rpki-client.org