Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38392e302f32342d3234203d3e20323633353731.roa
File:                     3137372e35352e38392e302f32342d3234203d3e20323633353731.roa (raw, json)
Hash identifier:          uGmb1kSLxpVFPtKUpVNdkBpWSmok0rIM9tw2L0qRl2I=
Subject key identifier:   30:79:A0:B0:AB:9F:D8:BF:2E:98:A4:20:57:4C:B3:B9:74:BD:09:86
Certificate issuer:       /CN=45E77B80E717DC2AF79EA5C03072487CF2DFF790
Certificate serial:       62D6B538745E18858F470618253BE5447BE7824B
Authority key identifier: 45:E7:7B:80:E7:17:DC:2A:F7:9E:A5:C0:30:72:48:7C:F2:DF:F7:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E77B80E717DC2AF79EA5C03072487CF2DFF790.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38392e302f32342d3234203d3e20323633353731.roa
Signing time:             Thu 17 Oct 2024 17:32:54 +0000
ROA not before:           Thu 17 Oct 2024 17:27:54 +0000
ROA not after:            Thu 16 Oct 2025 17:32:54 +0000
asID:                     263571
IP address blocks:        177.55.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 16 Nov 2024 14:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d6:b5:38:74:5e:18:85:8f:47:06:18:25:3b:e5:44:7b:e7:82:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E77B80E717DC2AF79EA5C03072487CF2DFF790
        Validity
            Not Before: Oct 17 17:27:54 2024 GMT
            Not After : Oct 16 17:32:54 2025 GMT
        Subject: CN=3079A0B0AB9FD8BF2E98A420574CB3B974BD0986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1d:d2:c2:16:01:4c:9e:c1:bb:ac:29:d8:38:
                    a3:20:5f:c6:01:22:a8:ff:60:83:8e:1f:0d:ea:ec:
                    18:ff:4e:12:e9:a4:32:6d:dd:01:60:1b:0d:8c:e5:
                    9a:e7:ad:ec:05:4f:90:47:ae:ac:a0:10:19:9d:7e:
                    1a:8f:34:83:d8:28:f1:05:c3:5e:54:81:1d:0a:a5:
                    c8:71:9d:38:b0:2a:ed:01:49:59:96:20:ee:f4:63:
                    25:bc:7a:a5:2b:20:53:f1:bb:4a:7e:3b:76:a3:0b:
                    08:3a:0b:6d:79:2b:e8:f5:4c:5d:9e:6c:04:c7:e6:
                    3f:6e:e0:4f:79:9e:ff:64:f5:17:f0:d3:cf:95:2c:
                    93:24:95:85:b5:ed:f0:d9:9f:c5:c5:f3:c4:29:05:
                    d1:09:62:c2:4b:48:bd:99:36:df:cf:aa:e3:16:ce:
                    4d:d4:fc:1d:fe:92:95:fe:63:39:69:02:fe:2c:9b:
                    3e:8b:10:2d:10:b8:24:38:51:60:19:4e:74:d3:bd:
                    9b:4d:39:a5:cf:91:7b:64:53:db:db:32:14:f6:c6:
                    6d:da:35:bf:76:42:24:f4:72:a3:a7:ed:b4:21:5b:
                    25:2c:31:bc:20:b2:c7:f7:95:07:22:c5:c7:48:a5:
                    7b:82:61:fb:8b:38:f3:00:be:91:06:d7:5c:82:15:
                    a1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:79:A0:B0:AB:9F:D8:BF:2E:98:A4:20:57:4C:B3:B9:74:BD:09:86
            X509v3 Authority Key Identifier:
                keyid:45:E7:7B:80:E7:17:DC:2A:F7:9E:A5:C0:30:72:48:7C:F2:DF:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/45E77B80E717DC2AF79EA5C03072487CF2DFF790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E77B80E717DC2AF79EA5C03072487CF2DFF790.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38392e302f32342d3234203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:73:80:5c:e0:7f:26:87:d9:bf:f4:22:ef:33:ee:2e:cf:9f:
         9d:ae:ce:22:5a:ff:a8:10:6e:63:37:12:2b:fd:f0:ae:d7:30:
         02:6e:2b:d6:ca:db:d4:17:c8:ae:5b:40:24:66:ad:21:8b:4f:
         ee:f6:cd:14:18:6f:03:fa:b8:75:18:0e:db:d1:f1:94:48:d0:
         58:ab:24:81:61:4c:da:cf:bc:a6:b5:28:8d:0e:c2:dd:19:d8:
         73:b0:d4:b4:30:b6:d8:73:71:77:07:42:40:20:ca:69:db:68:
         cb:f8:2b:0e:69:5a:3c:9f:9d:e3:73:55:a5:3a:58:a6:62:04:
         0b:7c:b9:ab:58:6b:70:81:24:38:42:37:4f:04:58:73:b9:a9:
         f9:92:85:49:aa:35:b4:9a:25:bd:62:4f:5b:84:1f:45:8b:df:
         4b:37:ae:49:52:9a:fe:71:3b:c9:a7:dd:27:38:2f:94:e6:28:
         3b:4b:45:63:77:15:fc:12:e3:d9:16:43:93:19:12:c2:d0:c9:
         24:15:ad:40:f5:8c:3e:67:50:15:9f:55:7b:e6:17:60:d8:a8:
         0c:b9:aa:5d:a1:c0:b1:8a:21:28:55:3c:21:7c:33:2f:14:d7:
         ca:97:eb:18:d2:bb:f1:89:3c:64:7c:8f:d3:09:c4:13:54:f4:
         9c:02:6d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 17:07:30 2024 by rpki-client on console-fra.rpki-client.org