Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32362e302f32342d3234203d3e20323632333135.roa
File:                     3137372e3132342e32362e302f32342d3234203d3e20323632333135.roa (raw, json)
Hash identifier:          SQAC4QxIBNQbPyrWryBW1MsYZv7uL7BOgf26Bw5wf1Q=
Subject key identifier:   0F:F0:E7:DF:34:DE:4B:4B:EC:B0:B8:76:19:84:F9:7B:BA:03:F5:DE
Certificate issuer:       /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
Certificate serial:       4CD7839A5DFEFF19A0F12DA5D2B7DA460F8D029D
Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32362e302f32342d3234203d3e20323632333135.roa
Signing time:             Wed 03 Apr 2024 21:41:41 +0000
ROA not before:           Wed 03 Apr 2024 21:36:41 +0000
ROA not after:            Wed 02 Apr 2025 21:41:41 +0000
asID:                     262315
IP address blocks:        177.124.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d7:83:9a:5d:fe:ff:19:a0:f1:2d:a5:d2:b7:da:46:0f:8d:02:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
        Validity
            Not Before: Apr  3 21:36:41 2024 GMT
            Not After : Apr  2 21:41:41 2025 GMT
        Subject: CN=0FF0E7DF34DE4B4BECB0B8761984F97BBA03F5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:61:1f:6a:f4:ad:b8:cb:7e:5a:db:c5:85:
                    de:2a:4c:f0:85:60:44:25:e0:e4:b1:1e:0c:85:63:
                    4c:90:e3:65:bf:8d:a0:3b:98:80:70:57:df:b0:0c:
                    42:23:62:03:10:e1:e3:9e:6c:09:6b:51:13:73:d0:
                    c6:03:f1:91:62:10:d9:e9:6e:00:b4:b2:88:cd:ac:
                    a7:6b:54:08:e3:71:f5:99:5a:f2:9f:59:22:f1:7b:
                    4d:94:10:fd:16:89:ac:0f:ac:7e:9b:0f:b3:02:7f:
                    79:6b:51:97:ae:6b:19:40:d2:14:b6:e2:5c:78:45:
                    4f:8f:47:4b:39:4c:3d:8f:98:34:4e:8f:8b:ff:1b:
                    04:6c:2a:75:1c:95:71:89:71:62:18:23:62:73:77:
                    63:d8:73:93:f5:70:e6:58:7c:08:43:b0:80:a0:f5:
                    6f:08:f0:e6:3d:21:f3:43:d4:13:cc:7c:82:d8:2d:
                    f4:5c:b1:1c:bb:63:d4:ac:cd:b1:7a:f8:d5:f4:60:
                    d3:df:48:9e:bc:cb:28:27:a4:00:54:26:ea:14:b4:
                    e0:52:10:5c:dd:ae:e3:11:5c:e6:86:62:eb:e5:8a:
                    1a:ec:97:95:a4:14:75:11:2e:a6:3f:97:20:31:14:
                    c7:33:db:14:2b:df:c0:7a:86:09:64:a3:df:b6:63:
                    0c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F0:E7:DF:34:DE:4B:4B:EC:B0:B8:76:19:84:F9:7B:BA:03:F5:DE
            X509v3 Authority Key Identifier:
                keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32362e302f32342d3234203d3e20323632333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:47:a5:2b:f6:30:f1:01:ce:81:ff:a1:b2:42:0d:a2:d6:f1:
         15:77:f4:2c:74:08:bc:dd:a2:bb:0c:9d:7e:86:17:ab:c5:dc:
         bb:07:1f:72:35:9a:d7:43:8e:a0:bb:c4:52:03:d7:c5:2b:18:
         91:10:0b:df:43:72:50:76:4a:a5:a1:f0:83:5e:3a:53:08:c0:
         67:44:df:cb:71:0a:ea:2e:18:5d:40:52:3d:26:0b:c0:f5:48:
         70:93:6a:68:7a:64:c7:ae:00:0d:7b:ce:95:f8:90:c6:19:cd:
         fc:00:a6:31:66:6b:b0:58:4f:62:47:72:00:9e:03:d2:f9:e5:
         2d:89:4b:02:9e:aa:03:2f:6b:9c:e6:65:20:ee:0c:8f:21:f7:
         da:69:dc:62:aa:fc:1d:c6:89:24:a6:4c:8b:0d:f9:7d:d1:35:
         15:b7:e6:39:08:6d:58:38:dd:60:7f:6d:65:1e:44:16:0f:d3:
         04:b9:9d:89:4d:20:b0:51:d3:6e:35:47:25:ef:9f:06:ee:98:
         30:8f:07:99:9c:d1:ac:81:1d:16:07:6a:d5:e0:4c:c5:1a:d3:
         27:94:d7:b1:f9:c5:73:76:36:bc:aa:12:7b:08:69:0d:57:19:
         79:b0:18:d3:fb:38:22:2c:f4:08:cc:39:fe:e6:a0:87:44:f4:
         1c:fa:57:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org