Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/3137372e34372e3232342e302f32302d3230203d3e203532393935.roa
File:                     3137372e34372e3232342e302f32302d3230203d3e203532393935.roa (raw, json)
Hash identifier:          7QodhRV5nQJ2WrqXiFyLeSiOGEtn2nlWpOMF0jU/OGg=
Subject key identifier:   86:2C:7D:FA:E2:73:75:89:F0:D8:80:B4:10:52:EA:28:83:84:E4:BF
Certificate issuer:       /CN=25F750CC8B097F02421DA84CAA0417DC66A794EE
Certificate serial:       1DE9A5177E0C73D2DA11731CC204C6BCDDE1DD23
Authority key identifier: 25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/3137372e34372e3232342e302f32302d3230203d3e203532393935.roa
Signing time:             Wed 03 Apr 2024 18:32:32 +0000
ROA not before:           Wed 03 Apr 2024 18:27:32 +0000
ROA not after:            Wed 02 Apr 2025 18:32:32 +0000
asID:                     52995
IP address blocks:        177.47.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e9:a5:17:7e:0c:73:d2:da:11:73:1c:c2:04:c6:bc:dd:e1:dd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F750CC8B097F02421DA84CAA0417DC66A794EE
        Validity
            Not Before: Apr  3 18:27:32 2024 GMT
            Not After : Apr  2 18:32:32 2025 GMT
        Subject: CN=862C7DFAE2737589F0D880B41052EA288384E4BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:78:38:91:e4:fd:6f:c7:37:83:a1:9c:93:de:
                    a8:91:0d:2d:e9:97:fb:f7:fc:8f:2f:2f:b9:08:2e:
                    ca:92:99:de:69:30:b0:b6:57:a9:70:16:59:a8:e0:
                    6f:e9:cf:cb:16:90:61:91:49:2b:f7:2c:28:13:20:
                    26:eb:7c:aa:de:7f:1c:94:bf:ff:5b:99:49:4e:85:
                    03:de:6b:37:8e:83:01:6b:2c:64:4b:92:59:e3:30:
                    0a:28:80:6a:e5:57:3d:ae:9b:13:cf:c3:b1:21:22:
                    6b:28:99:0b:f9:32:57:ee:22:66:5f:e6:c7:cf:53:
                    5d:41:b4:7b:84:b7:ad:0f:a2:b1:ea:e9:c3:0f:f4:
                    f0:40:e2:16:5b:5e:54:cc:05:2b:8d:96:09:0b:82:
                    22:97:b0:4e:4c:f0:2a:e9:6f:cd:d2:db:09:ff:11:
                    e8:b0:7c:52:55:cb:ea:d4:70:db:d2:05:bb:00:2a:
                    57:c3:f6:aa:b1:99:b8:9a:84:39:ab:4c:f7:85:69:
                    49:34:a2:6e:f2:d5:9d:bd:03:ef:76:d1:5b:8d:77:
                    c9:04:06:00:59:7b:14:49:28:ac:b9:21:a1:55:0c:
                    95:d6:28:fa:80:48:1e:50:bc:31:87:51:a6:33:e1:
                    95:98:e5:2b:8d:cb:b2:f2:32:76:b3:a8:44:4f:26:
                    5a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2C:7D:FA:E2:73:75:89:F0:D8:80:B4:10:52:EA:28:83:84:E4:BF
            X509v3 Authority Key Identifier:
                keyid:25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/3137372e34372e3232342e302f32302d3230203d3e203532393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bb:76:11:8e:ae:6a:f9:b3:74:7b:d1:77:e9:4b:df:f8:ac:7a:
         43:80:d7:a9:6a:77:59:65:4a:83:bc:e7:5a:68:9f:12:a7:ca:
         31:95:31:58:81:8c:02:c3:7f:20:0a:6d:81:51:1c:98:ed:12:
         76:95:57:eb:3a:63:ea:97:6a:a4:78:21:f0:82:a6:b7:2b:87:
         46:e1:b7:bd:6f:c1:42:05:c3:de:e5:22:7b:0a:2b:19:98:bf:
         4b:21:b6:bb:5a:a8:0f:7a:6a:8d:f4:18:f1:4e:e1:8b:be:7e:
         41:bf:9d:44:11:61:81:1a:05:37:ae:28:89:8e:08:06:4e:85:
         7e:4b:74:0b:3c:2f:ef:f1:39:2e:84:4f:88:9a:13:77:77:9a:
         ed:89:19:27:ce:7c:24:7d:89:28:96:7b:b5:ad:3b:ef:f1:8e:
         ce:46:2f:6a:53:52:fe:3c:1d:15:03:22:fe:14:b0:36:bb:06:
         a8:92:a4:c0:1f:21:4f:fd:d8:17:91:83:d6:08:28:e3:2d:87:
         06:e7:61:09:f5:67:83:a4:be:e7:fe:79:a0:4a:4c:4e:d8:89:
         9e:0f:f3:78:4e:00:9a:03:bc:03:5a:89:1a:72:2b:ff:7b:5e:
         5a:50:05:e5:d2:aa:90:af:49:6f:c3:cb:45:a2:7a:3d:3c:c5:
         37:17:e6:b6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHemlF34Mc9LaEXMcwgTGvN3h3SMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVGNzUwQ0M4QjA5N0YwMjQyMURBODRDQUEwNDE3REM2
NkE3OTRFRTAeFw0yNDA0MDMxODI3MzJaFw0yNTA0MDIxODMyMzJaMDMxMTAvBgNV
BAMTKDg2MkM3REZBRTI3Mzc1ODlGMEQ4ODBCNDEwNTJFQTI4ODM4NEU0QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDseDiR5P1vxzeDoZyT3qiRDS3p
l/v3/I8vL7kILsqSmd5pMLC2V6lwFlmo4G/pz8sWkGGRSSv3LCgTICbrfKrefxyU
v/9bmUlOhQPeazeOgwFrLGRLklnjMAoogGrlVz2umxPPw7EhImsomQv5MlfuImZf
5sfPU11BtHuEt60PorHq6cMP9PBA4hZbXlTMBSuNlgkLgiKXsE5M8Crpb83S2wn/
EeiwfFJVy+rUcNvSBbsAKlfD9qqxmbiahDmrTPeFaUk0om7y1Z29A+920VuNd8kE
BgBZexRJKKy5IaFVDJXWKPqASB5QvDGHUaYz4ZWY5SuNy7LyMnazqERPJlrFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhix9+uJzdYnw2IC0EFLqKIOE5L8wHwYDVR0j
BBgwFoAUJfdQzIsJfwJCHahMqgQX3GanlO4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3VwUDlGUTU4YUc4QjExd01kS1IyZmVIUXdVMkNiUWVyZnZoUFdDYmJo
dTMvMS8yNUY3NTBDQzhCMDk3RjAyNDIxREE4NENBQTA0MTdEQzY2QTc5NEVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1Rjc1MENDOEIwOTdGMDI0
MjFEQTg0Q0FBMDQxN0RDNjZBNzk0RUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN1cFA5RlE1OGFHOEIxMXdNZEtSMmZlSFF3VTJDYlFlcmZ2aFBXQ2JiaHUzLzEv
MzEzNzM3MmUzNDM3MmUzMjMyMzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNTMy
MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsS/gMA0GCSqGSIb3DQEBCwUAA4IBAQC7dhGOrmr5
s3R70XfpS9/4rHpDgNepandZZUqDvOdaaJ8Sp8oxlTFYgYwCw38gCm2BURyY7RJ2
lVfrOmPql2qkeCHwgqa3K4dG4be9b8FCBcPe5SJ7CisZmL9LIba7WqgPemqN9Bjx
TuGLvn5Bv51EEWGBGgU3riiJjggGToV+S3QLPC/v8TkuhE+ImhN3d5rtiRknznwk
fYkolnu1rTvv8Y7ORi9qU1L+PB0VAyL+FLA2uwaokqTAHyFP/dgXkYPWCCjjLYcG
52EJ9WeDpL7n/nmgSkxO2ImeD/N4TgCaA7wDWokaciv/e15aUAXl0qqQr0lvw8tF
ono9PMU3F+a2
-----END CERTIFICATE-----
Generated at Tue Jun 11 01:33:34 2024 by rpki-client on console-ams.rpki-client.org