Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32372e302f32342d3234203d3e20323633333135.roa
File:                     3137372e3132342e32372e302f32342d3234203d3e20323633333135.roa (raw, json)
Hash identifier:          Z0cmG8ObQ2F65Hyi+TVyqjoZfvOCBnQPhmZ8ptHleXo=
Subject key identifier:   B0:F5:8C:D1:D4:DB:F9:97:77:DD:23:54:CB:7B:BE:C1:5A:4D:EF:D6
Certificate issuer:       /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
Certificate serial:       3D7DBA6ADEE18157F9AD3099A18E64E0C747F7D4
Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32372e302f32342d3234203d3e20323633333135.roa
Signing time:             Wed 03 Apr 2024 21:41:42 +0000
ROA not before:           Wed 03 Apr 2024 21:36:42 +0000
ROA not after:            Wed 02 Apr 2025 21:41:42 +0000
asID:                     263315
IP address blocks:        177.124.27.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 14:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7d:ba:6a:de:e1:81:57:f9:ad:30:99:a1:8e:64:e0:c7:47:f7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
        Validity
            Not Before: Apr  3 21:36:42 2024 GMT
            Not After : Apr  2 21:41:42 2025 GMT
        Subject: CN=B0F58CD1D4DBF99777DD2354CB7BBEC15A4DEFD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:85:5f:94:b3:6f:03:54:4c:30:92:98:c6:
                    c6:d6:44:f8:29:02:c1:5c:f1:c7:0a:fe:91:37:ac:
                    da:5a:3f:31:31:f1:73:f8:60:c6:05:1b:ca:e8:73:
                    f3:b8:de:9d:85:d7:44:9d:6b:52:6b:02:0d:a1:a1:
                    b3:a2:ea:17:69:26:28:63:0e:51:84:e7:2c:12:d0:
                    47:88:b8:61:6a:da:8c:d5:b9:ce:33:b8:6d:c1:e3:
                    a7:5c:6e:44:99:d0:21:70:c1:a6:9c:66:cd:47:1b:
                    f5:80:72:00:e3:d3:60:0d:25:5d:c8:4b:87:e2:16:
                    ef:43:4a:4b:b0:80:f8:15:f1:cd:c5:f3:e7:2b:bb:
                    f1:20:8b:1e:5c:89:b9:e4:57:e0:ee:41:10:c5:91:
                    33:b3:0c:09:be:9e:27:34:9f:a5:a3:9d:dd:fd:40:
                    6e:bc:31:cd:64:12:f2:37:78:b3:3d:e7:08:0b:49:
                    dc:7c:13:0c:98:82:17:cc:ed:2c:1c:5e:15:eb:fe:
                    76:fd:53:f1:40:d0:88:ea:42:b6:54:39:61:4f:8a:
                    21:42:33:84:5f:4d:8e:74:bc:7b:44:28:a7:c9:78:
                    9d:e4:ed:bb:33:3c:e0:31:65:85:33:fa:46:be:29:
                    84:15:94:2d:c5:ca:7e:71:ce:07:66:30:ba:60:00:
                    3c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F5:8C:D1:D4:DB:F9:97:77:DD:23:54:CB:7B:BE:C1:5A:4D:EF:D6
            X509v3 Authority Key Identifier:
                keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32372e302f32342d3234203d3e20323633333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:0a:01:b8:d9:56:dd:b0:99:94:7b:1e:d4:ae:1d:ce:d4:da:
         94:35:de:86:55:e1:32:31:6e:ff:55:08:8e:b2:d8:65:3b:b5:
         cf:f4:17:69:bd:ab:32:c1:7e:5c:08:6b:c0:70:1b:55:6a:0f:
         2f:ca:40:44:9a:e0:fc:40:0a:71:cb:44:eb:83:19:14:a2:37:
         c1:26:74:82:b3:12:45:5f:44:cf:36:48:e5:09:c7:3f:cd:df:
         ee:f8:f4:9b:86:40:18:70:5d:b5:73:43:bb:aa:24:0d:00:48:
         86:7d:9f:10:9c:ac:1e:1a:51:37:49:20:75:21:d7:0d:69:2f:
         ba:b6:b2:a6:33:f0:7d:5e:50:6e:8b:96:32:51:59:f5:2e:bf:
         93:bd:c7:bb:55:99:85:e2:a2:fc:fb:00:02:b0:4f:b0:0a:67:
         55:dc:af:90:da:6c:3e:39:2e:ef:ed:be:5c:33:31:8e:4c:09:
         c4:31:6f:26:ac:49:47:46:50:e9:05:fc:85:af:88:b2:cb:09:
         29:70:20:4c:76:66:ec:90:86:96:65:85:83:22:92:84:e2:29:
         7a:e0:a8:15:ba:50:21:a0:41:ac:a4:c5:d2:0a:42:49:77:84:
         87:38:d7:79:a2:e7:b5:23:c6:8c:85:c8:c3:cc:8f:24:33:31:
         1a:24:17:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org