Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3132362e382e302f32342d3234203d3e20323635333033.roa
File:                     3137372e3132362e382e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          EDsRdsMxCB+kR+hBi2cBg68MrBf4g1GK/kqnRyKQIQ0=
Subject key identifier:   75:E8:D3:B0:EB:1B:61:E9:40:30:93:CA:F7:84:AA:40:6B:CC:2E:C9
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       038C53C60E5ADE7110069A74FE4123FDDC90539E
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3132362e382e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:07:12 +0000
ROA not before:           Mon 08 Apr 2024 14:02:12 +0000
ROA not after:            Mon 07 Apr 2025 14:07:12 +0000
asID:                     265303
IP address blocks:        177.126.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8c:53:c6:0e:5a:de:71:10:06:9a:74:fe:41:23:fd:dc:90:53:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 14:02:12 2024 GMT
            Not After : Apr  7 14:07:12 2025 GMT
        Subject: CN=75E8D3B0EB1B61E9403093CAF784AA406BCC2EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:5c:1c:e4:40:62:62:7d:3a:90:ce:a1:0f:
                    55:a1:58:58:1c:8d:a0:8c:ae:90:9c:11:36:01:d6:
                    10:3e:65:22:09:31:9c:4f:3c:91:45:07:f3:4f:20:
                    ad:11:69:a2:62:8d:13:ae:71:62:e7:ea:dd:88:3b:
                    81:f5:d7:38:43:c2:67:3d:e3:56:3e:75:68:92:16:
                    25:06:83:04:6a:82:d9:5c:74:43:c9:7f:f0:f9:bd:
                    34:e1:64:d7:c2:33:00:05:fb:bc:32:3d:7d:95:a9:
                    f9:ab:6e:cd:5c:cc:c2:3b:5d:4c:b1:9c:8f:15:af:
                    0d:58:ca:62:bb:18:5b:04:a2:bb:f9:99:bd:55:cc:
                    d3:a3:02:62:4e:5f:1a:80:fd:0c:c4:c3:e7:b9:13:
                    66:67:f4:93:1a:4e:0b:b7:67:c3:0b:ac:0e:03:03:
                    ba:e8:cc:17:e2:8e:59:ed:f2:4d:42:0e:b1:b8:5e:
                    02:79:e9:2a:d8:e2:a8:33:87:d5:09:9b:18:c3:e6:
                    ee:b5:82:bf:59:bd:9f:cc:f3:63:d7:3d:18:45:72:
                    77:ab:5e:15:68:36:71:1d:d1:2a:1d:dd:12:b5:11:
                    bb:77:8d:3f:5d:e5:7e:5f:f1:6f:3d:44:99:30:4b:
                    3a:21:80:bf:1f:92:a4:bf:aa:b3:f5:67:4a:bd:46:
                    4b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E8:D3:B0:EB:1B:61:E9:40:30:93:CA:F7:84:AA:40:6B:CC:2E:C9
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3132362e382e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:4a:1d:c9:4c:c2:bd:98:ac:be:c3:1c:3d:5e:0c:aa:7f:44:
         24:f9:6e:a5:41:49:27:8b:62:15:38:2e:cc:5c:2a:95:2b:7c:
         d4:84:ec:4d:35:03:e6:e4:35:a6:56:50:ee:01:e7:77:69:86:
         de:91:18:0b:7e:54:5f:72:24:36:0d:06:ed:e1:b4:1c:86:f9:
         71:4d:47:3d:52:ae:22:d6:dc:c4:06:8d:0d:6b:a3:b0:8f:40:
         78:64:6d:6d:b9:33:82:32:e4:4a:aa:34:cb:10:2b:9d:91:75:
         bf:80:cd:68:c8:75:b1:80:13:4f:df:14:83:83:16:3e:04:e4:
         13:34:e0:93:24:3f:9a:15:22:56:56:02:d9:86:e2:30:ac:1f:
         78:6d:a3:92:f7:c2:fd:2a:aa:2a:ab:65:74:e9:bc:b2:88:ff:
         8f:45:08:aa:fc:61:26:59:df:9f:65:4c:03:2d:29:f6:e9:25:
         f3:8b:84:8f:66:b7:12:38:50:02:36:39:05:bb:65:d5:86:fa:
         69:3a:e0:ca:6d:38:25:27:8f:08:22:bf:9c:69:a1:5f:4a:73:
         2f:75:c0:c1:aa:95:73:3a:3e:a8:1b:cf:83:ff:86:10:e5:b7:
         ac:5c:79:27:84:44:30:1d:f3:78:4e:21:f6:7c:cc:6c:bd:30:
         48:dd:7f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 22:55:04 2024 by rpki-client on console-fra.rpki-client.org