Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e33392e3234302e302f32312d3234203d3e203533313335.roa
File:                     3137372e33392e3234302e302f32312d3234203d3e203533313335.roa (raw, json)
Hash identifier:          X13HiXquicEPV6uPKjnIyX6GaAeev+9DZWDKPX1cgiI=
Subject key identifier:   FC:13:DA:74:BC:AF:91:62:D4:2E:DE:C5:56:5C:16:83:F6:B5:B3:9F
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       2C7B7B1E7E39A8D60D5054E840768F6872534AD2
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e33392e3234302e302f32312d3234203d3e203533313335.roa
Signing time:             Sat 03 Feb 2024 12:53:18 +0000
ROA not before:           Sat 03 Feb 2024 12:48:18 +0000
ROA not after:            Sat 01 Feb 2025 12:53:18 +0000
asID:                     53135
IP address blocks:        177.39.240.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7b:7b:1e:7e:39:a8:d6:0d:50:54:e8:40:76:8f:68:72:53:4a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:18 2024 GMT
            Not After : Feb  1 12:53:18 2025 GMT
        Subject: CN=FC13DA74BCAF9162D42EDEC5565C1683F6B5B39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:03:55:f5:3b:d6:2d:a2:ff:b7:2d:65:12:
                    77:2b:06:6d:ab:46:f8:76:87:ab:db:1f:d4:12:15:
                    43:01:cb:be:62:5c:89:c5:9f:11:6b:ff:d1:46:c5:
                    a6:99:ce:d9:6e:a2:ca:fb:63:a5:52:bb:87:00:51:
                    34:e2:2d:3d:a5:9c:b2:75:f0:78:84:6b:7c:05:d4:
                    48:d8:7f:ac:2a:a4:62:28:93:5b:0e:49:91:26:50:
                    8d:c1:bd:66:bc:8a:ff:f8:2e:6b:a2:e5:16:d6:db:
                    88:6b:42:e9:7f:6d:af:b1:92:1e:b2:19:6b:cd:0b:
                    3b:48:e0:ad:1c:89:41:28:bf:4b:3c:03:db:7b:69:
                    8f:c3:81:6a:67:ef:4d:69:52:c5:0a:cf:55:ee:84:
                    99:a7:db:61:58:1d:a4:6a:f2:5d:35:eb:14:fe:fe:
                    74:c7:cb:a0:56:9c:43:77:8f:b4:d1:15:12:f0:88:
                    5f:ee:42:c1:04:76:c6:21:13:25:87:1e:8f:e5:59:
                    db:de:81:a7:fb:be:a4:bd:96:b9:8b:e5:11:ce:3b:
                    21:ff:71:66:0a:ed:91:91:7e:bd:4b:76:ed:ab:60:
                    8d:06:b4:78:d3:ad:50:c6:c1:95:c3:5a:ff:de:31:
                    3f:ff:94:fa:58:36:36:be:ab:80:73:cb:59:cc:e2:
                    fc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:13:DA:74:BC:AF:91:62:D4:2E:DE:C5:56:5C:16:83:F6:B5:B3:9F
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e33392e3234302e302f32312d3234203d3e203533313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:ad:cc:6b:0e:19:6c:25:f5:92:1b:83:f5:7e:9a:4a:b3:98:
         a8:f6:d3:cf:14:db:87:c4:6b:a6:51:1d:17:e7:a9:72:66:43:
         7c:dc:a0:42:6a:55:e4:60:8f:e7:5c:3c:bd:31:28:e6:87:2c:
         87:3e:4f:bb:94:8b:d0:3a:8c:cf:fc:d8:ab:4c:db:7a:30:84:
         29:bc:e5:87:b3:c4:3a:21:1b:68:dd:9e:06:a0:78:e9:be:5b:
         17:40:05:31:e1:49:ce:3e:3e:35:9c:d1:45:da:0a:61:0a:d2:
         37:49:cd:be:ca:c0:d3:74:ae:54:be:ab:19:e3:d0:72:ea:2c:
         d7:f1:31:d4:18:ac:4b:9f:7a:33:d7:28:c2:e3:c1:dd:75:c0:
         52:6b:63:68:43:4a:4f:37:56:69:39:17:5c:03:70:cd:c4:88:
         3e:2e:92:da:e0:b4:ed:53:cd:93:4a:fe:9a:52:bf:60:e7:2d:
         13:a7:1d:67:06:fe:79:29:68:09:05:99:34:69:bd:4f:50:55:
         13:80:e2:cf:8f:8e:d3:af:53:82:8f:6f:a7:33:7e:04:a9:fd:
         21:10:18:19:ab:db:b9:c2:07:a4:eb:4b:f7:f3:0d:6d:15:10:
         7f:e2:5b:6c:94:3e:47:5b:93:02:ce:8e:84:3b:84:68:0e:87:
         33:a9:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 23:29:25 2024 by rpki-client on console-ams.rpki-client.org