Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32342e302f32322d3232203d3e20323632333135.roa
File:                     3137372e3132342e32342e302f32322d3232203d3e20323632333135.roa (raw, json)
Hash identifier:          HOExKqUpw+BEyaOPbhf1NbVFYrmFw/r9xPAOgvDrYTE=
Subject key identifier:   AC:90:D3:F4:E7:A8:93:9C:8D:59:51:2C:F1:5C:45:08:5A:8F:1A:30
Certificate issuer:       /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
Certificate serial:       740DB8D092E5CA6FDC8D2A915190F0F3B366B69F
Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32342e302f32322d3232203d3e20323632333135.roa
Signing time:             Wed 03 Apr 2024 21:41:41 +0000
ROA not before:           Wed 03 Apr 2024 21:36:41 +0000
ROA not after:            Wed 02 Apr 2025 21:41:41 +0000
asID:                     262315
IP address blocks:        177.124.24.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 13:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0d:b8:d0:92:e5:ca:6f:dc:8d:2a:91:51:90:f0:f3:b3:66:b6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
        Validity
            Not Before: Apr  3 21:36:41 2024 GMT
            Not After : Apr  2 21:41:41 2025 GMT
        Subject: CN=AC90D3F4E7A8939C8D59512CF15C45085A8F1A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:79:61:14:0b:09:7b:24:1d:13:cb:3a:a1:
                    ab:51:f2:c1:f8:ca:2c:95:d1:05:61:48:12:6b:d0:
                    58:c9:3d:43:3e:0c:a4:37:bb:b3:27:60:d6:f2:c7:
                    b0:44:48:ab:11:d9:84:50:f4:97:86:92:d4:4e:a9:
                    a3:86:a5:cb:60:6b:59:dd:f2:fe:aa:f4:35:26:b3:
                    b8:65:2d:cc:a5:e0:c2:f8:03:d4:72:e2:45:e5:fd:
                    20:c6:75:c6:67:4e:ec:8b:45:5e:58:d6:93:27:c3:
                    24:c2:85:82:f5:4c:e1:cf:1a:e1:5a:63:62:05:b2:
                    91:67:ca:9f:07:ac:3d:b8:4a:e2:0e:f8:53:95:d7:
                    ac:2d:a1:5f:dd:58:0a:17:b9:83:25:46:78:fa:8f:
                    6d:b3:9d:19:a0:78:fb:fc:92:b5:79:fe:9b:f9:d9:
                    a4:86:ce:21:14:5a:f0:d1:d2:cb:fe:22:db:27:4b:
                    a1:62:70:52:e7:a1:99:a6:67:3f:33:fd:ee:f7:d3:
                    eb:d4:1c:0e:50:07:e8:dc:64:27:b0:4e:11:9d:60:
                    11:a8:94:f5:93:cc:9b:6b:7b:9f:5c:4d:66:88:5d:
                    51:af:53:bd:6b:43:fe:4f:3a:31:80:ee:2a:87:c7:
                    1d:55:cc:8d:b2:6b:12:f1:a0:63:5b:9d:65:8b:19:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:90:D3:F4:E7:A8:93:9C:8D:59:51:2C:F1:5C:45:08:5A:8F:1A:30
            X509v3 Authority Key Identifier:
                keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32342e302f32322d3232203d3e20323632333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:ed:99:1f:2f:8c:a4:c7:eb:14:40:3a:0a:4c:88:15:d1:c9:
         1d:8f:ee:f6:1a:fa:b3:2b:9f:6a:dd:cf:b9:5f:11:cb:c4:dc:
         12:67:b0:f7:89:bc:f0:81:bf:a4:e5:93:2c:aa:ac:e8:67:5d:
         dd:b4:ec:36:90:a3:14:12:a9:92:e7:da:cd:0e:8e:cf:c0:0f:
         d9:0a:52:2f:ab:70:26:8d:32:b7:cd:16:aa:bc:67:77:aa:93:
         30:57:01:af:aa:5b:6e:6e:31:3c:b4:df:68:3b:11:1e:18:55:
         61:d7:a6:99:57:42:6e:28:e7:34:c8:49:f6:b5:aa:95:87:cb:
         54:53:f0:3f:d2:59:43:75:3a:b9:c6:92:56:a6:0c:ce:6f:f2:
         51:7e:b3:8c:72:f5:db:ee:c4:7e:ad:cb:bd:4d:c0:67:34:3e:
         56:e7:fe:38:d7:7b:ad:a7:02:92:95:6e:6c:81:e3:b7:2a:8e:
         f5:6f:39:a4:26:da:09:92:f3:b5:71:7a:8d:46:6e:3e:57:f6:
         cf:2c:0c:57:dc:50:75:7b:5b:70:e9:00:fe:fc:16:28:81:ee:
         fe:b4:5f:2d:4a:e3:48:db:f6:08:53:24:8f:87:09:0b:97:05:
         0f:40:07:a6:fa:e9:c1:eb:d6:67:89:c7:fc:fd:90:3a:47:aa:
         94:ad:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org