Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/3137372e31312e3134362e302f32342d3234203d3e20323632383738.roa
File:                     3137372e31312e3134362e302f32342d3234203d3e20323632383738.roa (raw, json)
Hash identifier:          AtK/k38SOgOnhD+O4Y50yjAiCmkKLMIoLHo0n29Fomg=
Subject key identifier:   C8:D5:49:7A:5C:A9:E6:00:3F:C3:93:8A:2A:E9:02:B7:25:FC:CE:A8
Certificate issuer:       /CN=6ACC269E9B94AD6A283D6B25E6F2D37F036A2740
Certificate serial:       44E86D14667E7896F2411C3269CC45AB30C5A86D
Authority key identifier: 6A:CC:26:9E:9B:94:AD:6A:28:3D:6B:25:E6:F2:D3:7F:03:6A:27:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/3137372e31312e3134362e302f32342d3234203d3e20323632383738.roa
Signing time:             Thu 25 Jul 2024 14:16:05 +0000
ROA not before:           Thu 25 Jul 2024 14:11:05 +0000
ROA not after:            Thu 24 Jul 2025 14:16:05 +0000
asID:                     262878
IP address blocks:        177.11.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 16:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e8:6d:14:66:7e:78:96:f2:41:1c:32:69:cc:45:ab:30:c5:a8:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ACC269E9B94AD6A283D6B25E6F2D37F036A2740
        Validity
            Not Before: Jul 25 14:11:05 2024 GMT
            Not After : Jul 24 14:16:05 2025 GMT
        Subject: CN=C8D5497A5CA9E6003FC3938A2AE902B725FCCEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:6c:c3:d1:f7:de:5b:4d:e0:25:77:3c:f9:
                    30:d9:72:0b:7e:5d:2a:84:e4:f3:47:8e:c3:0c:e5:
                    3f:c1:5a:26:63:1b:24:f9:6d:bf:54:a5:da:4f:d7:
                    98:d5:65:3b:dc:0a:ea:5d:84:d4:9c:0d:b6:34:30:
                    8d:a0:10:a1:71:ba:36:97:3d:13:fb:ea:3c:a8:c2:
                    e0:fe:4f:43:1f:9f:f8:44:b5:3f:61:58:4d:ff:af:
                    9a:a1:eb:e3:ae:7c:21:50:33:e7:c8:df:46:ba:54:
                    80:4c:d8:9d:fe:de:77:d9:4e:ef:ba:ce:85:78:ff:
                    c3:d7:64:8c:c7:d7:20:d0:7a:62:91:08:d5:93:1e:
                    1c:5b:ec:5b:5b:60:29:d9:30:4d:92:05:1d:ef:08:
                    c3:ab:3b:83:d1:d2:cf:b0:a8:dd:ee:a5:27:c9:3b:
                    8a:b3:9e:8c:ee:32:a1:5b:c0:b7:f5:a7:bc:a0:c0:
                    69:5a:40:c4:51:98:a8:68:c2:bd:db:6e:d8:b2:09:
                    df:14:1f:c3:1d:c4:34:5f:b8:6f:93:b7:e6:98:04:
                    97:8e:73:b3:4f:2f:59:ab:3d:06:ca:ab:a6:2c:78:
                    ed:55:19:1b:b7:61:c6:bd:93:68:d6:ae:7f:91:22:
                    9e:c7:d2:a0:ef:7d:b5:0f:97:d3:fe:81:6b:05:ea:
                    1f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D5:49:7A:5C:A9:E6:00:3F:C3:93:8A:2A:E9:02:B7:25:FC:CE:A8
            X509v3 Authority Key Identifier:
                keyid:6A:CC:26:9E:9B:94:AD:6A:28:3D:6B:25:E6:F2:D3:7F:03:6A:27:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/3137372e31312e3134362e302f32342d3234203d3e20323632383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:8d:e1:c2:de:de:de:6e:64:59:0c:69:3b:4d:eb:fa:dd:36:
         1c:e1:ce:75:02:61:17:e5:44:cd:2b:6c:9b:48:61:e0:b4:26:
         a6:19:40:b9:e6:b5:24:3f:97:3b:11:b5:47:cc:9e:ca:04:2f:
         a9:97:55:7a:d2:f0:20:c2:4e:d7:04:83:65:78:73:2b:f7:95:
         60:78:0a:f8:1f:29:93:1c:9b:54:27:8a:50:b4:5e:f1:f5:91:
         a7:5d:10:53:51:c6:56:39:fb:eb:f1:e2:fd:ab:f0:27:44:a8:
         3f:c1:7c:46:2a:6c:3b:a5:a9:d5:84:c6:81:f0:0c:2a:31:a8:
         56:b4:11:a0:35:2e:77:2d:02:3e:07:f2:c1:75:dc:54:b1:4b:
         d0:6a:fa:70:8c:92:11:7a:43:6d:db:58:12:7d:7d:e0:69:95:
         6c:28:b7:54:d0:c2:f7:b2:52:97:d3:a9:ea:72:94:d9:52:91:
         a8:bc:66:39:b2:29:1b:df:78:64:89:e9:b4:8d:1c:e6:39:8d:
         16:03:cf:48:18:3d:25:cf:0a:a9:c1:1f:7b:cf:79:62:19:06:
         5e:fd:83:27:aa:66:7a:b0:2b:94:0f:b8:08:fa:4c:e0:95:38:
         bb:bc:a4:78:da:7c:db:a8:22:3f:d9:a0:ef:5a:86:ef:09:18:
         33:3f:dd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 19:10:19 2024 by rpki-client on console-fra.rpki-client.org