Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137322e302f32322d3332203d3e203631393030.roa
File:                     3137372e37342e3137322e302f32322d3332203d3e203631393030.roa (raw, json)
Hash identifier:          lzl7IcGkKTlp9Ig90Z7wwGjYS4o99WRfmCZXET1Wl9Y=
Subject key identifier:   A9:08:00:3F:B7:CC:8D:FC:45:9C:5B:6B:B9:2E:D3:71:F0:6A:3B:BE
Certificate issuer:       /CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
Certificate serial:       3F17EAE3A9C8E29EFA40C6FBDF0E8BC2CB9C6C7F
Authority key identifier: 00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137322e302f32322d3332203d3e203631393030.roa
Signing time:             Mon 23 Sep 2024 19:31:32 +0000
ROA not before:           Mon 23 Sep 2024 19:26:32 +0000
ROA not after:            Mon 22 Sep 2025 19:31:32 +0000
asID:                     61900
IP address blocks:        177.74.172.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 19:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:17:ea:e3:a9:c8:e2:9e:fa:40:c6:fb:df:0e:8b:c2:cb:9c:6c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
        Validity
            Not Before: Sep 23 19:26:32 2024 GMT
            Not After : Sep 22 19:31:32 2025 GMT
        Subject: CN=A908003FB7CC8DFC459C5B6BB92ED371F06A3BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:10:3a:9a:52:29:33:5b:93:b6:e8:17:eb:69:
                    a5:a8:d2:30:7d:13:2f:d0:9d:d2:f5:03:8d:ab:3b:
                    e3:f6:9d:5a:d6:42:5d:e6:9c:49:4a:b8:bd:cf:47:
                    3e:a0:7f:61:16:ae:06:c0:b3:06:81:fc:7e:69:8a:
                    41:25:21:23:69:3a:22:6c:a1:00:6e:de:0b:f6:ff:
                    c0:28:77:13:2d:e0:bf:29:54:c1:ed:11:6d:96:46:
                    2b:de:2b:d9:86:5b:ea:40:4c:71:07:37:c5:fd:24:
                    e5:b8:6b:f4:7a:8f:cf:78:2e:47:cc:de:60:4d:5c:
                    b7:fd:a6:72:a4:2b:3f:3d:29:6b:dd:a8:b0:33:08:
                    0c:f7:c4:53:92:89:95:2b:27:e4:f1:76:a0:97:3e:
                    2f:7d:5e:f1:6c:c8:c2:db:d7:10:c8:5b:f1:05:84:
                    3e:e4:63:44:ed:3b:1c:50:d6:7c:e5:b2:13:2a:cc:
                    cf:7a:30:d9:38:dd:5f:51:fa:2e:79:53:52:9b:33:
                    cc:c5:54:de:b6:d1:42:2e:df:87:66:ae:57:8d:f3:
                    4a:47:63:37:46:2a:af:d3:5f:79:9b:de:91:d1:6e:
                    49:dc:f6:44:58:a9:7f:9f:76:f5:e5:f3:e1:1e:c2:
                    5c:9f:32:20:ab:50:44:f2:95:b0:78:cf:47:c7:7e:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:08:00:3F:B7:CC:8D:FC:45:9C:5B:6B:B9:2E:D3:71:F0:6A:3B:BE
            X509v3 Authority Key Identifier:
                keyid:00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137322e302f32322d3332203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:3e:f9:a8:ae:28:69:ad:1b:f8:4e:74:dd:86:96:9c:05:15:
         85:88:17:59:ce:58:b5:2a:d9:16:5d:9f:4b:b9:4c:78:ea:2d:
         6c:bd:46:2d:68:a1:ee:83:00:19:0e:5d:c5:36:32:90:51:20:
         8e:d0:6e:b4:20:db:94:30:80:bf:7e:72:1c:af:29:bb:78:e0:
         60:c6:cc:eb:5a:d4:77:08:17:91:5c:28:ea:e3:e5:31:07:42:
         68:34:7c:23:11:66:88:22:94:d6:7a:f3:d4:75:55:e1:b2:66:
         04:02:47:4e:27:e7:12:da:f6:4e:96:13:a9:98:02:57:d8:da:
         3f:8c:a0:ef:59:d9:cb:44:c0:a8:22:69:c0:c7:ff:97:0e:4f:
         f1:89:18:82:31:ff:cd:da:2f:f8:12:9d:01:84:c4:6f:a6:ba:
         37:11:68:12:4f:d9:40:b2:13:0b:15:bf:9c:61:50:5a:d7:eb:
         96:eb:dc:6b:a6:76:6a:29:55:6e:77:b5:cb:06:09:25:bb:4d:
         d4:29:66:ad:66:5d:10:fb:96:6c:d4:da:06:8b:0f:19:d2:b8:
         83:76:29:89:46:2b:22:73:34:32:b9:ce:30:fe:9c:e6:71:07:
         34:95:4c:6a:83:98:25:30:89:c3:ea:3f:9a:8f:b1:b1:d8:8b:
         17:de:6d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 00:11:47 2024 by rpki-client on console-fra.rpki-client.org