Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3133302e33322e302f32302d3234203d3e20323632393037.roa
File:                     3137372e3133302e33322e302f32302d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          FDyKUfmieyq27BlVGkXNn7xQpLfDZgvRhMxbaCAUU6M=
Subject key identifier:   CC:66:1B:24:24:26:F7:58:4A:4D:5B:53:AC:A6:CC:DE:A4:7B:5B:2F
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       3C765994003741906602960300072BFE9F7EE004
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3133302e33322e302f32302d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:22 +0000
ROA not before:           Sat 03 Feb 2024 12:48:22 +0000
ROA not after:            Sat 01 Feb 2025 12:53:22 +0000
asID:                     262907
IP address blocks:        177.130.32.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:76:59:94:00:37:41:90:66:02:96:03:00:07:2b:fe:9f:7e:e0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:22 2024 GMT
            Not After : Feb  1 12:53:22 2025 GMT
        Subject: CN=CC661B242426F7584A4D5B53ACA6CCDEA47B5B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4f:fa:56:19:06:82:15:15:45:25:db:6a:28:
                    18:3c:11:95:03:57:26:fb:fc:ff:ef:62:8c:76:e9:
                    8f:30:30:84:5e:86:2e:4b:3c:3d:13:ff:ea:75:06:
                    7e:c8:3e:15:eb:d6:8f:f3:db:40:ca:97:54:fa:bb:
                    5b:53:68:86:3a:1e:40:9d:ef:86:45:01:60:7b:3e:
                    35:63:55:78:c9:f1:3e:73:29:8e:f1:79:0a:7a:5c:
                    0b:7d:18:46:fa:8e:97:a3:f9:81:21:ef:59:07:ee:
                    33:e6:f4:98:c7:a5:b0:bc:b9:31:d1:be:56:a4:d6:
                    37:e1:9e:0d:58:47:49:00:00:92:40:94:73:08:c3:
                    70:5f:98:f0:c1:d4:b9:19:77:95:b6:54:ff:de:88:
                    d4:67:59:8b:b9:58:e3:56:53:15:b9:99:e5:33:ae:
                    47:13:a2:f9:ad:14:7e:4c:3b:83:ff:e1:aa:72:55:
                    76:4f:ec:f7:9c:14:58:ea:f1:2d:c9:2b:9a:8b:cd:
                    6d:5a:05:58:46:4f:82:e0:13:ca:7a:8c:b3:a4:74:
                    aa:00:ab:2e:6d:ee:fd:05:88:63:b9:d9:28:dc:ac:
                    34:e1:03:d2:51:f3:d0:73:c8:66:2b:98:8c:30:95:
                    8e:06:59:3c:d0:34:43:9c:22:ba:f2:23:2c:c7:fd:
                    75:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:66:1B:24:24:26:F7:58:4A:4D:5B:53:AC:A6:CC:DE:A4:7B:5B:2F
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3133302e33322e302f32302d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:3d:4e:23:08:93:90:82:d0:54:86:71:fb:5a:be:10:3f:94:
         8a:fc:51:10:6d:23:2d:d9:dc:a5:d3:85:c6:9a:cf:f4:ef:03:
         01:78:02:8b:3c:b4:1c:c5:93:63:44:15:71:14:af:fd:c6:ef:
         b8:0a:f8:2f:4e:b7:8f:11:2d:f2:7d:80:50:80:46:3e:ec:2d:
         19:d9:27:e2:8d:11:af:38:cb:03:68:44:a4:37:4b:8b:3e:85:
         96:cc:a5:ac:36:d4:c7:6f:4d:cd:1d:f0:76:5c:ee:e5:02:95:
         ab:1c:6d:1a:c1:59:b8:82:64:17:9e:8f:cc:d9:d3:1e:91:4b:
         c2:9a:cf:80:89:08:d9:c2:7e:27:14:57:6e:06:03:73:95:b3:
         46:88:f1:dc:28:26:db:f9:83:ed:49:a1:d3:60:a9:ae:2d:07:
         52:8f:ec:50:40:e6:7b:1e:95:a5:d4:cc:d9:b8:43:08:fe:49:
         59:b2:f8:db:a9:9b:16:b3:a8:41:c2:07:63:c8:aa:aa:fe:7d:
         76:7b:65:ad:e6:e4:9f:c3:a4:b6:34:7c:ad:f6:f1:fc:da:fe:
         64:9b:e5:db:1d:33:0d:b4:e0:51:f7:08:66:af:a9:bc:9a:95:
         20:15:b8:57:b4:10:53:0b:2f:e2:d8:6e:1a:20:bf:28:26:8b:
         c7:ba:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 23:29:25 2024 by rpki-client on console-ams.rpki-client.org