Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e35352e3134342e302f32302d3230203d3e20323632353035.roa
File:                     3137372e35352e3134342e302f32302d3230203d3e20323632353035.roa (raw, json)
Hash identifier:          c8T6pDe5Y4RugOEKsdxZ4ty9OBY+RozD5heMbGoPwZ4=
Subject key identifier:   3F:8C:D0:15:1F:86:DE:47:30:B1:56:08:CE:D9:B4:3E:07:3C:31:A7
Certificate issuer:       /CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
Certificate serial:       5E7341F0970D04683DB00931C5B0D9C31B2CC76D
Authority key identifier: CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e35352e3134342e302f32302d3230203d3e20323632353035.roa
Signing time:             Wed 03 Apr 2024 22:42:18 +0000
ROA not before:           Wed 03 Apr 2024 22:37:18 +0000
ROA not after:            Wed 02 Apr 2025 22:42:18 +0000
asID:                     262505
IP address blocks:        177.55.144.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 18:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:73:41:f0:97:0d:04:68:3d:b0:09:31:c5:b0:d9:c3:1b:2c:c7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
        Validity
            Not Before: Apr  3 22:37:18 2024 GMT
            Not After : Apr  2 22:42:18 2025 GMT
        Subject: CN=3F8CD0151F86DE4730B15608CED9B43E073C31A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:1a:8c:80:de:ef:22:a1:35:f9:98:4c:5b:
                    38:1b:e4:5c:e5:3c:81:f7:06:54:4d:2c:08:3c:27:
                    c1:54:2b:23:8d:5e:1f:6b:95:06:20:b0:89:78:c1:
                    af:c0:d3:e4:97:3c:1c:38:31:8f:82:9d:31:a6:db:
                    85:7c:31:f9:10:03:a3:d3:cf:2f:d3:0e:0a:e9:bf:
                    55:94:38:39:99:86:94:33:9a:ca:18:97:77:76:b1:
                    fc:ab:70:e3:3d:4d:e4:9e:0a:cc:cb:55:2c:eb:02:
                    b6:e1:ea:e5:34:10:5e:68:e0:96:8b:55:68:c7:e3:
                    91:50:76:a3:8d:e2:be:88:0b:43:f8:0e:3d:8b:98:
                    da:31:07:73:ab:6f:7d:2b:65:5f:77:f4:08:9b:4a:
                    0f:ed:05:98:8a:d6:ee:a2:40:36:4e:52:8b:59:d0:
                    be:a9:df:87:57:3c:03:b9:fa:64:16:09:f5:40:72:
                    12:f1:81:7e:33:9f:b4:b5:3e:9d:22:be:ad:10:ce:
                    f9:47:e3:7c:54:8d:b5:5c:00:5e:4d:bd:a1:08:12:
                    4e:dc:76:fb:2d:11:16:ea:29:0f:55:0f:e5:c2:41:
                    70:27:36:a5:fc:74:f9:37:b6:3c:b8:f9:70:29:c6:
                    18:a0:2f:65:b9:97:85:be:0b:3a:c9:6e:46:cc:e0:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8C:D0:15:1F:86:DE:47:30:B1:56:08:CE:D9:B4:3E:07:3C:31:A7
            X509v3 Authority Key Identifier:
                keyid:CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e35352e3134342e302f32302d3230203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:0b:e7:6f:e7:14:1b:2c:f7:78:6c:3a:9e:d4:2f:e4:77:bb:
         4d:bf:4f:23:b2:29:67:fe:94:fc:8d:b7:f9:a2:70:68:1a:fc:
         58:42:e8:4c:e4:75:9e:73:7d:e0:ec:8a:17:21:f3:91:00:9b:
         1a:87:a8:85:70:27:9f:d1:2f:84:74:5b:f3:3e:f9:51:e7:2f:
         72:13:3c:ef:11:98:96:25:3e:eb:78:f1:58:94:16:cf:30:68:
         e3:2d:e7:75:a3:0b:77:b9:a2:a5:07:e9:d9:08:2a:60:a3:49:
         5b:e8:80:22:78:cd:63:86:01:8c:b9:d1:ec:66:30:9c:67:2e:
         61:78:a9:b8:87:0f:b5:ed:d4:e4:4f:4f:f3:8e:2a:3d:e3:2c:
         b2:58:c8:bb:56:ba:dd:48:77:e6:57:f7:87:cd:a2:e2:fd:69:
         78:56:9c:72:ba:2d:0f:86:73:a7:fb:e2:15:da:f4:b0:b0:c2:
         c1:68:ee:3b:fe:d7:64:1c:46:47:c0:02:d5:0a:d7:c3:8f:b8:
         80:82:ee:ae:ff:6f:e6:5d:a5:e1:80:b9:85:75:70:ac:7d:cf:
         a3:28:84:d2:6a:89:6b:62:4f:eb:f6:36:48:5e:61:30:8c:a0:
         63:bb:b6:f4:78:d4:e3:63:1a:d0:e5:c5:28:5c:41:48:e1:99:
         b0:56:d8:aa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXnNB8JcNBGg9sAkxxbDZwxssx20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y4OUVDRjE5MDY5MzRCODg2ODc0OUZFMTA3MDNFQ0JC
NDM0RDNCOTAeFw0yNDA0MDMyMjM3MThaFw0yNTA0MDIyMjQyMThaMDMxMTAvBgNV
BAMTKDNGOENEMDE1MUY4NkRFNDczMEIxNTYwOENFRDlCNDNFMDczQzMxQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxhqMgN7vIqE1+ZhMWzgb5Fzl
PIH3BlRNLAg8J8FUKyONXh9rlQYgsIl4wa/A0+SXPBw4MY+CnTGm24V8MfkQA6PT
zy/TDgrpv1WUODmZhpQzmsoYl3d2sfyrcOM9TeSeCszLVSzrArbh6uU0EF5o4JaL
VWjH45FQdqON4r6IC0P4Dj2LmNoxB3Orb30rZV939AibSg/tBZiK1u6iQDZOUotZ
0L6p34dXPAO5+mQWCfVAchLxgX4zn7S1Pp0ivq0QzvlH43xUjbVcAF5NvaEIEk7c
dvstERbqKQ9VD+XCQXAnNqX8dPk3tjy4+XApxhigL2W5l4W+CzrJbkbM4DtNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUP4zQFR+G3kcwsVYIztm0Pgc8MacwHwYDVR0j
BBgwFoAUz4ns8ZBpNLiGh0n+EHA+y7Q007kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZKemdkSkNqNXZHdjZXQXFXTGsyTG9naVRQVFl6ZERkODJmcTZMTTdp
NUMvMS9DRjg5RUNGMTkwNjkzNEI4ODY4NzQ5RkUxMDcwM0VDQkI0MzREM0I5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGODlFQ0YxOTA2OTM0Qjg4
Njg3NDlGRTEwNzAzRUNCQjQzNEQzQjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWSnpnZEpDajV2R3Y2V0FxV0xrMkxvZ2lUUFRZemREZDgyZnE2TE03aTVDLzEv
MzEzNzM3MmUzNTM1MmUzMTM0MzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2
MzIzNTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxN5AwDQYJKoZIhvcNAQELBQADggEBAJ0L52/n
FBss93hsOp7UL+R3u02/TyOyKWf+lPyNt/micGga/FhC6EzkdZ5zfeDsihch85EA
mxqHqIVwJ5/RL4R0W/M++VHnL3ITPO8RmJYlPut48ViUFs8waOMt53WjC3e5oqUH
6dkIKmCjSVvogCJ4zWOGAYy50exmMJxnLmF4qbiHD7Xt1ORPT/OOKj3jLLJYyLtW
ut1Id+ZX94fNouL9aXhWnHK6LQ+Gc6f74hXa9LCwwsFo7jv+12QcRkfAAtUK18OP
uICC7q7/b+ZdpeGAuYV1cKx9z6MohNJqiWtiT+v2NkheYTCMoGO7tvR41ONjGtDl
xShcQUjhmbBW2Ko=
-----END CERTIFICATE-----
Generated at Mon Jul 15 21:32:10 2024 by rpki-client on console-ams.rpki-client.org