Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32342d3234203d3e20323633353731.roa
File:                     3137372e35352e38382e302f32342d3234203d3e20323633353731.roa (raw, json)
Hash identifier:          AH4JzrGPPnOaasAMWTpwa8H9/alyguOXwemQQ31Tm4I=
Subject key identifier:   92:CA:3A:42:E2:4C:9F:22:52:DE:87:F5:29:AD:80:A5:1A:F4:F7:79
Certificate issuer:       /CN=45E77B80E717DC2AF79EA5C03072487CF2DFF790
Certificate serial:       71FD46BDD411BF12DCC518A5755E91C723C2DE46
Authority key identifier: 45:E7:7B:80:E7:17:DC:2A:F7:9E:A5:C0:30:72:48:7C:F2:DF:F7:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E77B80E717DC2AF79EA5C03072487CF2DFF790.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32342d3234203d3e20323633353731.roa
Signing time:             Thu 17 Oct 2024 17:32:17 +0000
ROA not before:           Thu 17 Oct 2024 17:27:17 +0000
ROA not after:            Thu 16 Oct 2025 17:32:17 +0000
asID:                     263571
IP address blocks:        177.55.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 16 Nov 2024 14:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fd:46:bd:d4:11:bf:12:dc:c5:18:a5:75:5e:91:c7:23:c2:de:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E77B80E717DC2AF79EA5C03072487CF2DFF790
        Validity
            Not Before: Oct 17 17:27:17 2024 GMT
            Not After : Oct 16 17:32:17 2025 GMT
        Subject: CN=92CA3A42E24C9F2252DE87F529AD80A51AF4F779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:75:85:4a:c9:b7:35:ae:4b:77:28:65:82:
                    ba:e1:00:48:a2:e0:b0:22:a2:2e:8e:53:f6:a3:d5:
                    48:14:03:1b:53:ed:6c:c2:9d:6b:6a:ca:25:3f:31:
                    69:63:46:8b:af:9f:ff:e8:8c:69:17:a9:2f:3c:cb:
                    98:ae:f9:d5:4d:53:41:17:8f:1c:9d:8a:a5:86:fc:
                    37:91:56:3d:5f:6d:52:78:f4:d9:02:eb:1e:ea:dd:
                    35:18:4b:a6:39:15:03:43:90:80:1c:9d:38:07:d4:
                    b0:fe:d7:db:bb:e1:c4:c1:d8:ca:85:f7:f3:c5:c6:
                    1b:99:17:97:77:d7:27:18:14:27:90:fc:fb:e4:0b:
                    95:3d:2b:40:97:f7:07:84:a4:ef:ea:0f:9b:83:fb:
                    30:71:38:59:fd:8f:33:11:22:c7:22:72:0b:71:88:
                    40:bb:97:85:07:0b:e6:c0:71:8f:bb:c5:14:eb:f0:
                    4c:71:79:a8:60:22:bb:4c:12:07:d3:b6:61:e2:b0:
                    d9:fb:cf:d0:1c:cb:10:32:5f:b7:30:80:d1:cb:ff:
                    50:cb:7a:b1:18:41:d5:76:66:fa:db:7e:e7:97:53:
                    41:2e:af:9d:dc:91:58:86:51:e5:99:99:4d:67:76:
                    49:0e:94:e0:60:ee:f0:76:8a:ec:6e:ca:3e:15:32:
                    47:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CA:3A:42:E2:4C:9F:22:52:DE:87:F5:29:AD:80:A5:1A:F4:F7:79
            X509v3 Authority Key Identifier:
                keyid:45:E7:7B:80:E7:17:DC:2A:F7:9E:A5:C0:30:72:48:7C:F2:DF:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/45E77B80E717DC2AF79EA5C03072487CF2DFF790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E77B80E717DC2AF79EA5C03072487CF2DFF790.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32342d3234203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:d2:61:41:f9:3f:65:0c:94:c6:b6:b8:d5:00:ad:25:e8:e4:
         90:83:47:5b:3d:51:d1:f5:6e:f0:c9:f1:d1:0d:85:e6:82:5a:
         a7:a4:09:27:ad:1a:88:cc:a7:a2:c7:e1:90:1d:04:4a:39:8a:
         54:1d:9b:b3:18:21:29:03:9a:ea:d6:d5:bd:90:2a:0d:6d:05:
         c3:35:c9:fb:3a:98:65:99:93:a9:5a:38:c9:bb:09:1f:db:bb:
         cd:5e:b8:0a:20:fc:4b:66:30:a1:8e:2b:d4:50:a7:9e:c1:be:
         1f:e4:ae:64:4a:3c:2d:ae:80:7c:a2:c3:c3:a3:d6:39:85:16:
         e6:b4:ee:71:06:18:32:15:e4:e8:4e:cf:02:a3:5f:cc:de:70:
         66:ab:f6:2a:ed:7f:6d:8c:ce:90:d1:78:48:98:5a:cf:39:42:
         55:c4:3b:86:dd:3c:79:f4:f9:af:88:8e:dc:51:19:94:d8:d5:
         68:66:0d:d3:93:f6:18:c8:29:42:ef:63:fc:62:cb:c7:95:32:
         bd:2c:d2:f4:15:b0:f6:48:ad:22:b3:be:35:58:1b:9c:a6:32:
         53:6f:5f:ef:2c:af:bf:ad:69:80:f3:e1:10:31:fd:b3:90:c5:
         17:5a:c2:40:00:86:68:c2:d0:63:1b:60:a2:65:df:52:d4:bb:
         e7:93:e4:1c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcf1GvdQRvxLcxRildV6RxyPC3kYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVFNzdCODBFNzE3REMyQUY3OUVBNUMwMzA3MjQ4N0NG
MkRGRjc5MDAeFw0yNDEwMTcxNzI3MTdaFw0yNTEwMTYxNzMyMTdaMDMxMTAvBgNV
BAMTKDkyQ0EzQTQyRTI0QzlGMjI1MkRFODdGNTI5QUQ4MEE1MUFGNEY3NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97nWFSsm3Na5LdyhlgrrhAEii
4LAioi6OU/aj1UgUAxtT7WzCnWtqyiU/MWljRouvn//ojGkXqS88y5iu+dVNU0EX
jxydiqWG/DeRVj1fbVJ49NkC6x7q3TUYS6Y5FQNDkIAcnTgH1LD+19u74cTB2MqF
9/PFxhuZF5d31ycYFCeQ/PvkC5U9K0CX9weEpO/qD5uD+zBxOFn9jzMRIscicgtx
iEC7l4UHC+bAcY+7xRTr8ExxeahgIrtMEgfTtmHisNn7z9AcyxAyX7cwgNHL/1DL
erEYQdV2ZvrbfueXU0Eur53ckViGUeWZmU1ndkkOlOBg7vB2iuxuyj4VMkfbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkso6QuJMnyJS3of1Ka2ApRr093kwHwYDVR0j
BBgwFoAURed7gOcX3Cr3nqXAMHJIfPLf95AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXI2UGJ5d0tVWDZ4U2txN3ZSZTlHWkNhNzFLMUtKakpjR25CVWlzM3J5
SEEvMC80NUU3N0I4MEU3MTdEQzJBRjc5RUE1QzAzMDcyNDg3Q0YyREZGNzkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RTc3QjgwRTcxN0RDMkFG
NzlFQTVDMDMwNzI0ODdDRjJERkY3OTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVyNlBieXdLVVg2eFNrcTd2UmU5R1pDYTcxSzFLSmpKY0duQlVpczNyeUhBLzAv
MzEzNzM3MmUzNTM1MmUzODM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzUzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTdYMA0GCSqGSIb3DQEBCwUAA4IBAQAp0mFB+T9l
DJTGtrjVAK0l6OSQg0dbPVHR9W7wyfHRDYXmglqnpAknrRqIzKeix+GQHQRKOYpU
HZuzGCEpA5rq1tW9kCoNbQXDNcn7OphlmZOpWjjJuwkf27vNXrgKIPxLZjChjivU
UKeewb4f5K5kSjwtroB8osPDo9Y5hRbmtO5xBhgyFeToTs8Co1/M3nBmq/Yq7X9t
jM6Q0XhImFrPOUJVxDuG3Tx59PmviI7cURmU2NVoZg3Tk/YYyClC72P8YsvHlTK9
LNL0FbD2SK0is741WBucpjJTb1/vLK+/rWmA8+EQMf2zkMUXWsJAAIZowtBjG2Ci
Zd9S1Lvnk+Qc
-----END CERTIFICATE-----
Generated at Sat Nov 16 17:07:30 2024 by rpki-client on console-fra.rpki-client.org