Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3135352e3130342e302f32322d3234203d3e20323632393037.roa
File:                     3137372e3135352e3130342e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          e4KRu6Cbt4Of/MD6+0WuUx7YHj+bUwe5N5wSptC+Tjc=
Subject key identifier:   01:BA:92:CA:07:32:B7:50:D2:E3:08:44:5A:63:BB:9B:2D:90:49:A7
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       118CA91858BEAA17B7163737BDB219FAAACB4807
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3135352e3130342e302f32322d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:22 +0000
ROA not before:           Sat 03 Feb 2024 12:48:22 +0000
ROA not after:            Sat 01 Feb 2025 12:53:22 +0000
asID:                     262907
IP address blocks:        177.155.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8c:a9:18:58:be:aa:17:b7:16:37:37:bd:b2:19:fa:aa:cb:48:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:22 2024 GMT
            Not After : Feb  1 12:53:22 2025 GMT
        Subject: CN=01BA92CA0732B750D2E308445A63BB9B2D9049A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:7c:25:45:11:46:48:f9:31:e0:19:1f:b4:
                    b5:3c:d3:e9:e2:7b:02:da:a1:d2:06:67:60:b6:52:
                    ba:3f:ae:47:c2:13:96:67:98:f1:53:3f:cd:9a:43:
                    b9:e2:76:8f:63:b7:ee:f7:a2:fc:c1:53:b6:5f:91:
                    f8:32:70:9e:12:48:f6:a4:74:72:36:03:2f:2a:9c:
                    36:5c:1b:47:b9:b6:03:33:c9:a1:39:c4:be:0b:f0:
                    33:ec:46:67:3c:2a:87:63:44:0c:d7:ea:3e:af:0e:
                    d4:d5:c4:45:34:b9:33:b3:2f:f7:a3:8f:5d:1f:dd:
                    11:65:18:13:5e:db:8c:55:cf:e9:0e:3f:a8:89:62:
                    d4:b7:4a:77:23:fb:f2:1e:cd:4d:5f:37:74:41:f1:
                    8a:c4:bd:77:82:9c:79:40:5a:8d:ae:ed:5e:77:62:
                    c7:ee:ce:9c:f6:dc:1c:79:9f:da:58:85:77:16:fe:
                    19:41:50:81:86:ae:79:c1:78:a5:e2:8c:bc:75:d5:
                    b7:83:f1:78:a7:05:a8:9c:94:b1:56:19:fb:c2:64:
                    11:6f:2b:5b:58:73:ff:84:78:c1:78:b0:0a:26:70:
                    23:78:f1:90:af:58:61:d5:8a:e2:d5:55:6d:fb:3f:
                    34:b8:63:b9:f3:81:97:01:ab:40:66:9a:41:5d:6f:
                    df:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BA:92:CA:07:32:B7:50:D2:E3:08:44:5A:63:BB:9B:2D:90:49:A7
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3135352e3130342e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:7a:bb:97:1d:71:4c:f7:1f:df:df:67:6c:a0:3f:2e:e2:7d:
         15:c3:ec:c6:4a:48:23:aa:3a:e7:ed:2e:9d:b0:6a:49:49:3b:
         58:06:b7:b3:09:00:e3:7e:d5:41:e5:a9:3e:41:3d:db:3a:ff:
         d2:6e:ea:a9:3c:13:99:d7:96:40:e0:9b:da:1b:53:88:9e:52:
         17:82:47:e6:12:69:36:41:50:59:47:77:b0:67:ad:37:6c:40:
         2a:59:6e:5a:0d:2c:8a:d5:5a:08:8a:e3:90:82:35:d4:7d:eb:
         f8:66:26:c3:59:26:b4:2a:e9:4e:1f:65:b9:32:89:f1:ff:c2:
         af:e7:6b:d7:ba:0f:80:83:e3:d7:db:0f:cb:e5:23:52:74:97:
         0e:bb:e0:5c:28:00:33:70:c5:3c:20:01:2d:4b:be:50:d5:89:
         46:9c:ad:a1:84:07:28:48:cc:4c:25:3e:2f:d7:85:f5:c2:98:
         e7:6b:fa:42:87:e8:8b:32:b8:0d:35:89:32:f7:53:3e:c0:5a:
         78:1d:e6:0b:e2:4d:ba:3c:2d:77:bc:06:a8:68:98:0d:81:53:
         1c:16:12:f3:fa:21:8a:7b:b2:da:ce:7c:af:21:0b:be:f6:1d:
         25:cd:4d:e4:4f:4c:f3:35:b4:04:4f:0c:b0:20:0a:4b:8d:79:
         63:18:59:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 23:29:25 2024 by rpki-client on console-ams.rpki-client.org