Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32342e302f32332d3233203d3e20323632333135.roa
File:                     3137372e3132342e32342e302f32332d3233203d3e20323632333135.roa (raw, json)
Hash identifier:          AI5GYEyU4BTvOhFlY7+CP3XEoAibzNujJIHWj0lU0Dg=
Subject key identifier:   D6:92:FB:8D:00:86:B6:93:52:D1:58:2B:8D:20:5E:76:6F:D7:D1:97
Certificate issuer:       /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
Certificate serial:       637B8CE3D4860F4FF32173C7E703EF871485849D
Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32342e302f32332d3233203d3e20323632333135.roa
Signing time:             Wed 03 Apr 2024 21:41:42 +0000
ROA not before:           Wed 03 Apr 2024 21:36:42 +0000
ROA not after:            Wed 02 Apr 2025 21:41:42 +0000
asID:                     262315
IP address blocks:        177.124.24.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7b:8c:e3:d4:86:0f:4f:f3:21:73:c7:e7:03:ef:87:14:85:84:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
        Validity
            Not Before: Apr  3 21:36:42 2024 GMT
            Not After : Apr  2 21:41:42 2025 GMT
        Subject: CN=D692FB8D0086B69352D1582B8D205E766FD7D197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:80:a6:07:d2:73:f9:63:3a:30:0a:a7:5c:
                    fc:91:4b:62:3f:18:b5:c8:27:fb:f6:6e:65:27:55:
                    0b:9f:54:25:98:61:0f:82:4d:48:d9:2a:78:ee:7f:
                    68:5e:7a:7e:43:41:2e:78:a2:37:74:d5:e8:ef:8b:
                    04:61:69:ba:19:ce:50:93:db:5a:c4:69:90:fe:63:
                    e2:f6:b0:9d:a1:03:3c:51:92:56:b3:1e:92:20:96:
                    e6:ab:70:ee:63:21:19:ce:8a:f4:47:63:41:2c:68:
                    e5:21:ca:d7:c1:65:24:9a:fe:82:72:59:7a:bc:04:
                    a6:4a:75:7d:15:c2:7e:72:6f:9f:d4:c8:73:d9:ef:
                    b4:b7:61:d7:10:b5:62:79:91:25:35:c7:40:65:62:
                    c9:6f:d3:f6:d5:e7:e2:04:9b:3f:66:bc:1b:51:a0:
                    61:20:b8:83:c3:5b:d9:8a:88:4c:ac:7f:02:16:ab:
                    fe:82:63:b2:55:de:74:05:a2:64:95:26:e0:14:45:
                    43:c4:72:e3:31:d5:f2:09:f7:25:47:da:54:38:48:
                    8b:b5:84:46:27:ff:a5:e0:a8:a1:0e:ca:3e:e5:a7:
                    38:da:98:17:16:57:74:33:87:a2:cc:5e:27:7a:f6:
                    4e:5f:aa:36:5b:1b:09:81:73:5f:39:4f:16:d5:1d:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:92:FB:8D:00:86:B6:93:52:D1:58:2B:8D:20:5E:76:6F:D7:D1:97
            X509v3 Authority Key Identifier:
                keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32342e302f32332d3233203d3e20323632333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:8e:ac:f2:7a:c6:4c:d4:1e:29:20:df:bf:5a:43:29:33:79:
         54:ab:ed:ea:91:d8:1d:fa:b4:03:a3:18:16:29:c1:6e:97:b0:
         7c:44:b5:07:5e:a6:ab:b6:1d:2d:75:33:6a:42:75:6f:06:69:
         b6:11:c4:e4:a8:33:9f:65:6d:b4:bd:79:59:8d:8c:20:0b:f2:
         6f:eb:0b:cf:b8:22:25:2c:69:a2:f8:f4:b0:70:b2:ba:05:70:
         5a:f2:33:74:6e:81:cb:0a:f5:94:0e:22:1c:68:a1:55:40:a9:
         15:10:ad:47:4c:c4:10:fa:43:78:20:8e:d8:e7:f5:c7:7e:ad:
         df:be:85:65:17:db:fa:cd:4e:bb:40:ab:46:fc:30:43:ac:a2:
         ba:1a:e6:c2:3a:3b:9b:8f:3a:04:08:5f:43:89:9d:f5:63:08:
         1f:f0:04:5b:71:83:73:ee:a9:1f:e0:69:68:fc:19:e9:a1:ea:
         83:38:dd:23:b5:0e:ef:53:73:2d:d6:f5:c5:49:a8:a0:0e:dc:
         ec:f6:99:1f:bd:b0:3c:c3:6d:75:29:57:2c:eb:6a:18:21:19:
         d8:93:3f:b7:62:f8:d2:38:01:62:49:f9:01:ca:c4:60:a2:e6:
         7a:2c:99:1d:62:cd:b9:52:90:03:c8:0a:bb:71:ab:e7:95:82:
         c6:09:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org