Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32352e302f32342d3234203d3e20323633333135.roa
File:                     3137372e3132342e32352e302f32342d3234203d3e20323633333135.roa (raw, json)
Hash identifier:          gtkXeBWptmdzk3VsXtFdr7UeMMU/dGZb8n15gFygEsY=
Subject key identifier:   09:74:94:17:EF:3E:5E:DC:F9:24:79:D2:BD:12:D4:50:2D:75:22:42
Certificate issuer:       /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
Certificate serial:       2C65374ECA6D5706BA72A1FD0DC867566DF5D96B
Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32352e302f32342d3234203d3e20323633333135.roa
Signing time:             Wed 03 Apr 2024 21:41:44 +0000
ROA not before:           Wed 03 Apr 2024 21:36:44 +0000
ROA not after:            Wed 02 Apr 2025 21:41:44 +0000
asID:                     263315
IP address blocks:        177.124.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 14:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:65:37:4e:ca:6d:57:06:ba:72:a1:fd:0d:c8:67:56:6d:f5:d9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
        Validity
            Not Before: Apr  3 21:36:44 2024 GMT
            Not After : Apr  2 21:41:44 2025 GMT
        Subject: CN=09749417EF3E5EDCF92479D2BD12D4502D752242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:20:e8:fc:06:46:0f:0c:4f:58:36:fc:7a:df:
                    31:c8:48:6f:0c:3e:74:16:28:65:b5:ac:f1:96:d2:
                    21:b6:3f:0b:e9:18:9f:d4:f9:ac:94:b4:76:6a:ec:
                    1d:37:04:65:9d:31:de:3b:e4:9d:ae:ff:63:3a:89:
                    97:db:0c:ad:cb:6e:6a:4e:76:e0:19:d8:47:66:6a:
                    6c:06:65:ff:47:4a:87:a4:9f:47:69:91:74:ba:91:
                    0e:75:8c:3a:3a:db:db:cc:48:25:6f:95:93:53:95:
                    bc:b1:ad:e5:f3:b6:15:cc:57:9b:76:9e:dd:4f:8c:
                    6f:4b:ec:07:36:eb:94:da:a4:3e:d1:05:dc:92:d1:
                    b0:ec:ac:3a:b3:42:45:09:69:e0:09:93:2f:fe:d8:
                    cf:c1:95:c0:fd:15:0b:f3:70:ab:f2:fd:7f:f6:12:
                    90:38:89:56:fe:0d:f5:6a:68:d4:c5:64:88:17:f0:
                    4f:f7:d5:6e:da:b9:cf:d7:fd:6d:5d:b1:4b:15:05:
                    9f:be:7c:6e:58:8b:81:00:2b:e7:38:86:08:f4:39:
                    23:aa:ef:74:4d:47:37:4d:b4:70:3c:df:dc:13:2d:
                    fd:14:ce:5f:32:7e:46:8f:4a:3a:01:fa:ab:bd:d6:
                    dd:96:97:a2:39:a0:fd:5c:48:4d:97:a9:12:a0:1b:
                    bc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:74:94:17:EF:3E:5E:DC:F9:24:79:D2:BD:12:D4:50:2D:75:22:42
            X509v3 Authority Key Identifier:
                keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32352e302f32342d3234203d3e20323633333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:2f:b0:c5:55:bd:67:19:89:78:dd:69:da:07:a8:9c:f2:8a:
         1f:25:9d:ef:db:72:bc:14:61:80:52:f3:ac:ec:cd:33:46:3b:
         50:c2:a1:26:97:9a:c9:66:57:bc:32:5b:7c:1b:8f:66:c3:68:
         ce:48:4f:2b:ac:9f:85:c3:62:88:4b:9b:08:8c:93:a1:ea:b3:
         c4:0b:55:b1:e6:09:4b:9e:7d:21:36:31:78:14:eb:4e:a2:95:
         6f:87:d4:c8:84:fd:cd:c4:ae:cc:10:77:36:17:c0:76:85:de:
         70:fa:40:26:f6:f5:48:a7:68:16:4d:ea:bf:e5:af:c5:3a:8a:
         00:46:f4:9f:9d:59:15:9a:bc:b3:c2:58:b5:aa:bd:ca:2a:76:
         db:66:dc:d9:43:61:a7:61:88:e3:3d:d1:02:71:b2:01:ab:81:
         32:88:0d:18:0c:9d:5a:a4:8a:c5:66:61:34:f0:d4:fc:6f:2c:
         4f:3c:1d:c5:07:70:f5:be:87:6f:ff:69:93:b3:6e:6e:b4:ed:
         32:0d:92:1b:26:dd:52:63:4e:9f:d7:48:65:7c:cc:4b:0a:a7:
         4e:03:ce:45:bf:58:91:ce:6f:80:95:c4:08:98:b5:de:3a:c7:
         9d:b6:af:f5:39:68:19:f1:5f:76:01:58:28:cb:05:64:c8:b4:
         64:4c:41:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org