Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3130342e39362e302f32302d3234203d3e20323632393037.roa
File:                     3137372e3130342e39362e302f32302d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          xHssJxVTw7VgUpfnRWCWMRJ1bR61ipN8iEBPa0WkobE=
Subject key identifier:   82:9A:AC:6D:97:13:EC:33:7F:36:38:9C:62:B0:59:94:2B:57:62:D7
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       5329450BBF730DC52C84874ACFBDC1B15B19FFB5
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3130342e39362e302f32302d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:22 +0000
ROA not before:           Sat 03 Feb 2024 12:48:22 +0000
ROA not after:            Sat 01 Feb 2025 12:53:22 +0000
asID:                     262907
IP address blocks:        177.104.96.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:29:45:0b:bf:73:0d:c5:2c:84:87:4a:cf:bd:c1:b1:5b:19:ff:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:22 2024 GMT
            Not After : Feb  1 12:53:22 2025 GMT
        Subject: CN=829AAC6D9713EC337F36389C62B059942B5762D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:85:03:af:1c:31:f7:59:70:e2:d6:d6:8f:d4:
                    47:41:43:bc:fb:ba:eb:25:cc:8b:1c:a3:f7:ac:da:
                    45:69:de:12:1a:91:be:21:9c:c3:50:bd:a5:d1:36:
                    f8:ff:6c:38:a4:5f:f9:5a:10:da:80:f3:dc:54:64:
                    bc:00:c9:59:65:1a:ec:92:47:1f:a1:18:97:38:95:
                    85:db:8e:fa:bc:3b:05:8c:61:0e:9e:0b:43:17:10:
                    cd:b7:7a:3f:2c:6f:24:36:e4:12:c9:d0:9c:bc:31:
                    80:6d:ad:7f:73:3e:4a:cb:1c:28:e4:b6:5e:76:31:
                    24:60:a7:86:f8:10:0f:9e:ec:38:27:0f:bd:08:c4:
                    6e:51:76:cc:1b:43:13:d3:26:5a:2c:8f:55:e0:54:
                    1e:b6:eb:71:d8:06:7b:f3:57:f9:dc:a9:cd:ea:75:
                    32:3f:cc:a7:d2:64:d9:1d:04:7c:36:28:b1:87:a6:
                    6f:c6:33:a1:26:43:98:c8:f2:67:07:8d:da:b5:07:
                    75:62:01:d5:ef:9f:df:e1:e7:34:6e:c2:73:bd:e4:
                    53:cc:81:3e:a5:7d:9f:b1:88:3e:86:db:75:8c:31:
                    b5:bf:96:20:a5:7d:69:19:6f:15:59:ee:4c:90:95:
                    99:10:87:8f:a8:9d:6d:56:23:2b:fc:59:c2:8e:48:
                    54:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9A:AC:6D:97:13:EC:33:7F:36:38:9C:62:B0:59:94:2B:57:62:D7
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3130342e39362e302f32302d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:a3:d1:e5:47:73:36:8d:5e:7f:b6:e2:0b:7a:c4:ca:5f:8c:
         de:7b:d9:b5:92:0a:f4:21:d4:ba:89:ef:47:99:35:34:89:ef:
         ca:65:ae:d8:2f:52:b6:3b:0a:12:79:7b:7d:25:2b:fc:bc:2b:
         c6:81:32:47:6a:99:d4:4d:48:b0:82:ee:aa:a1:cb:5d:cf:53:
         c8:82:f4:2c:4e:7e:1e:cf:8b:1f:55:4c:97:1e:ab:85:24:bd:
         84:f6:74:b7:09:45:1e:69:a1:b3:c1:59:93:1c:cf:02:b8:7f:
         87:ef:a1:23:26:ee:6b:cc:b1:5c:76:d9:66:41:95:2c:1c:b5:
         3b:76:7e:f0:8b:c5:33:76:e8:ec:ba:ed:c4:36:64:d8:5a:c2:
         c6:be:2e:9c:5c:d6:85:73:73:05:4e:a0:2b:78:f1:64:e1:e5:
         8c:71:a4:52:b9:c8:66:c7:f9:4e:c3:14:fd:a5:34:70:c1:de:
         48:03:3d:f6:5e:0f:e1:c6:61:de:19:f6:91:91:8e:0b:2c:c2:
         46:b5:f6:28:b3:4d:ec:3b:bd:f4:78:3d:68:51:0f:48:56:15:
         de:12:13:e4:d3:90:45:e8:39:45:73:71:1e:fb:ad:5e:8b:01:
         b5:1c:48:59:0c:d7:36:62:ba:b0:79:99:a3:ea:81:71:05:a6:
         67:d2:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org