Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/3137372e37312e31362e302f32312d3332203d3e203238323534.roa
File:                     3137372e37312e31362e302f32312d3332203d3e203238323534.roa (raw, json)
Hash identifier:          3p7rlo5Vop/P9teG5zZQUQPe+tNRHOk0UPOBdR71Gqw=
Subject key identifier:   E7:F2:91:AF:D5:80:EC:A8:1F:44:26:D4:A6:14:E7:AD:51:7D:2C:2D
Certificate issuer:       /CN=9151E1075CB8CA7782315512A362C4E53B9BDB13
Certificate serial:       3E9F105DDD17A308142F0688E34B58B426864387
Authority key identifier: 91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/3137372e37312e31362e302f32312d3332203d3e203238323534.roa
Signing time:             Tue 14 May 2024 13:07:00 +0000
ROA not before:           Tue 14 May 2024 13:02:00 +0000
ROA not after:            Tue 13 May 2025 13:07:00 +0000
asID:                     28254
IP address blocks:        177.71.16.0/21 maxlen: 32

Validation:               Failed, certificate revoked on Thu 16 May 2024 18:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9f:10:5d:dd:17:a3:08:14:2f:06:88:e3:4b:58:b4:26:86:43:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9151E1075CB8CA7782315512A362C4E53B9BDB13
        Validity
            Not Before: May 14 13:02:00 2024 GMT
            Not After : May 13 13:07:00 2025 GMT
        Subject: CN=E7F291AFD580ECA81F4426D4A614E7AD517D2C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:23:54:47:b4:52:aa:c6:67:dc:4f:48:9d:
                    52:c6:8d:79:1e:e8:a2:76:63:44:f0:e8:10:cd:67:
                    ba:53:3b:93:73:cf:a5:ed:b7:45:a3:ad:e8:f9:09:
                    6e:39:4c:a5:57:e2:87:20:04:3e:be:e7:21:bc:05:
                    50:b7:2f:aa:e8:dc:bb:cf:00:a8:00:fe:48:d5:5f:
                    05:76:7d:7a:a5:27:e9:39:d0:f7:4c:ae:cf:69:d8:
                    9c:e0:74:46:bc:07:3e:23:1f:56:fa:67:1d:2d:71:
                    69:52:b8:0b:95:64:9e:81:3a:c8:9c:a1:4a:68:17:
                    9a:f1:e7:93:af:b8:fa:4e:76:b7:ab:8a:e1:eb:16:
                    42:42:77:f8:1a:a2:a5:8f:75:21:53:36:aa:90:3e:
                    59:2e:29:44:8b:02:7c:4c:f6:67:ac:77:4c:b9:c9:
                    05:17:df:df:c7:cf:ab:3b:15:41:f5:dd:43:8f:fe:
                    f9:50:65:e0:3f:37:c7:b5:1c:45:e7:94:23:d7:52:
                    ab:ba:50:2a:21:76:e1:1f:a5:53:4b:90:3c:72:2d:
                    82:9a:18:88:fe:da:a2:28:10:25:39:cc:18:c7:1b:
                    9a:b9:1a:a5:90:6b:86:a0:bc:12:78:56:e6:7e:73:
                    7d:59:43:cc:ec:a2:20:a3:43:de:bd:10:7a:3d:d6:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F2:91:AF:D5:80:EC:A8:1F:44:26:D4:A6:14:E7:AD:51:7D:2C:2D
            X509v3 Authority Key Identifier:
                keyid:91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/3137372e37312e31362e302f32312d3332203d3e203238323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:44:18:3b:4f:38:60:ed:0b:89:2d:59:bc:59:32:54:a9:96:
         4d:1d:2b:71:f0:41:79:d6:5d:04:91:60:6f:b8:dc:ed:77:6e:
         fb:20:c9:5d:51:be:36:28:1f:35:4e:fe:22:fa:ee:62:a6:09:
         c0:83:b7:76:4a:8b:31:f3:fa:8a:47:4a:b2:83:07:5f:89:6e:
         9d:df:f3:ef:34:68:7b:42:2b:30:c1:40:aa:2f:70:17:e0:a7:
         44:a0:8f:63:c6:ad:d5:25:37:d5:d4:b5:a3:16:9c:19:77:d9:
         41:ff:68:fd:fa:aa:e3:2d:de:1a:7b:42:39:d5:75:32:fd:19:
         98:70:af:d5:82:95:e1:02:ca:06:de:57:77:09:93:12:63:e4:
         8d:8e:fe:4d:12:73:32:48:d4:89:84:d6:49:81:32:fa:7f:52:
         32:2b:05:19:2a:64:23:e4:1a:e5:67:f1:fe:cf:bd:80:c8:ce:
         9b:a1:22:4d:0c:c5:a1:4f:4a:cc:48:7a:7e:e2:5e:0f:90:fc:
         f9:c8:fc:f4:90:1f:f9:19:b2:12:58:12:6f:3f:7b:56:27:d9:
         44:3f:e3:35:0d:57:3f:d8:fd:4f:14:c4:b4:d1:21:c4:eb:75:
         04:00:69:2b:4f:e1:cf:58:0a:7c:1c:d5:82:7f:02:f4:f7:79:
         12:bf:ca:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org