Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34332e302f32342d3234203d3e203532383731.roa
File:                     3137372e3133362e34332e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          HUf0u1dG21p8d71otL8f+PY22o4KE/Vue0aoVTXXPmI=
Subject key identifier:   19:DA:AE:14:42:9C:75:21:CD:0F:FA:36:45:C9:1F:AD:78:66:70:76
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       232B7E0A7B9E9BC5DD7D7E1A324A41971ECB1052
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34332e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:24 +0000
ROA not before:           Wed 03 Apr 2024 23:07:24 +0000
ROA not after:            Wed 02 Apr 2025 23:12:24 +0000
asID:                     52871
IP address blocks:        177.136.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 03 Jul 2024 12:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2b:7e:0a:7b:9e:9b:c5:dd:7d:7e:1a:32:4a:41:97:1e:cb:10:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:24 2024 GMT
            Not After : Apr  2 23:12:24 2025 GMT
        Subject: CN=19DAAE14429C7521CD0FFA3645C91FAD78667076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9a:bf:fe:5a:74:7e:9e:de:2f:2e:84:7c:0e:
                    14:25:8d:1b:34:a0:c3:de:a7:fd:fd:bb:70:d6:5f:
                    da:48:e0:75:ed:d5:1f:37:cb:fe:3a:7f:df:33:1f:
                    56:9d:36:cd:d0:65:41:68:a7:de:63:3b:5f:4e:71:
                    d1:f4:6d:f8:33:8e:c1:80:9f:03:2c:58:3f:95:6c:
                    7c:68:75:df:64:84:f2:b7:30:eb:e9:28:68:2e:b1:
                    7a:66:8b:8a:c0:08:1f:50:09:9d:ee:f0:40:7b:41:
                    c7:05:9b:32:b7:02:ef:61:b3:45:1d:24:57:e3:31:
                    33:36:16:39:7c:64:10:13:b6:23:68:b0:22:3b:5b:
                    69:c5:be:06:3b:19:10:91:01:71:ca:76:30:e2:3c:
                    7c:ae:22:9b:2e:7e:fd:35:36:a4:98:1a:c0:1d:50:
                    fd:e3:58:4f:71:fd:62:95:ad:f9:a3:97:91:13:7e:
                    99:4e:e6:73:7d:bf:07:77:b1:9f:58:83:ad:9f:78:
                    07:7f:0a:01:5f:43:da:0d:f0:c5:a7:e1:5d:29:54:
                    97:92:61:72:f9:64:d0:da:55:70:6c:c8:53:5f:c6:
                    eb:14:19:3d:1d:ae:76:eb:5e:42:40:87:57:0d:1c:
                    9a:97:ce:15:d0:a8:c6:4f:4d:8d:1e:67:1f:a4:e6:
                    ff:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DA:AE:14:42:9C:75:21:CD:0F:FA:36:45:C9:1F:AD:78:66:70:76
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34332e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:dc:25:9f:ec:42:af:47:13:e5:5d:25:fd:77:9c:ff:29:91:
         6c:ae:ac:bf:d4:0e:5d:71:45:3a:30:d5:fc:4f:83:ba:43:44:
         97:bd:16:cd:0e:02:04:5a:cd:74:0d:8d:d2:51:21:36:91:b3:
         6e:38:40:81:50:a3:84:57:b4:88:92:72:e4:b5:ac:84:d9:c3:
         35:74:58:65:82:00:0a:b0:74:28:f6:4a:b4:f3:4a:f2:fd:9d:
         9a:bd:85:f1:d8:ea:9e:95:7c:9c:c6:b1:a8:60:66:e3:69:77:
         6c:32:18:8b:5e:4e:02:43:81:d0:76:ee:7f:ac:3c:9c:87:a1:
         2e:de:43:4c:2a:eb:84:1c:60:a2:f3:23:df:09:27:b0:2d:d3:
         ac:7b:31:bc:c4:c9:ac:6a:da:28:26:0c:88:94:70:06:0e:8c:
         09:f1:07:a0:5d:77:79:6b:88:f6:78:67:7b:3b:e7:8d:82:d1:
         38:13:3c:ae:18:e4:94:cc:a4:86:d0:df:8d:52:25:b4:99:67:
         8e:dd:94:8a:2d:e4:e6:9d:05:2c:81:7b:fe:9d:9d:e8:87:3f:
         40:00:ba:eb:6b:cd:82:62:da:0f:9f:7b:22:7c:77:2a:6d:95:
         a8:84:79:31:80:ca:ce:2a:04:bd:f6:e4:d7:aa:59:62:6a:0f:
         f2:50:2f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 14:35:15 2024 by rpki-client on console-ams.rpki-client.org