Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e35352e3134342e302f32312d3231203d3e20323632353035.roa
File:                     3137372e35352e3134342e302f32312d3231203d3e20323632353035.roa (raw, json)
Hash identifier:          lyzRmASjxI4Q6Pf1vFC35CCBfmy8+Iw/92O2uUqPJHQ=
Subject key identifier:   79:4E:40:EE:1A:D7:14:16:0D:33:F6:29:FD:B4:C5:19:33:D0:55:51
Certificate issuer:       /CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
Certificate serial:       7CC6E3F34EF3E41CBBAD771968F55F82AB6EB4C9
Authority key identifier: CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e35352e3134342e302f32312d3231203d3e20323632353035.roa
Signing time:             Wed 03 Apr 2024 22:42:19 +0000
ROA not before:           Wed 03 Apr 2024 22:37:19 +0000
ROA not after:            Wed 02 Apr 2025 22:42:19 +0000
asID:                     262505
IP address blocks:        177.55.144.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 18:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c6:e3:f3:4e:f3:e4:1c:bb:ad:77:19:68:f5:5f:82:ab:6e:b4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
        Validity
            Not Before: Apr  3 22:37:19 2024 GMT
            Not After : Apr  2 22:42:19 2025 GMT
        Subject: CN=794E40EE1AD714160D33F629FDB4C51933D05551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:b2:27:06:ad:3b:ba:9e:e7:34:45:55:dc:
                    01:19:5f:7a:fe:fd:cc:58:91:81:48:ff:a8:65:3e:
                    06:87:36:21:bc:1e:b7:f4:50:e4:b3:f2:9d:5f:91:
                    e6:e8:b4:9a:3f:2f:3c:5b:0a:3a:4c:81:71:01:31:
                    d4:14:f5:00:73:0f:1b:80:11:0a:ec:98:31:d4:fa:
                    92:82:5b:fa:be:08:fa:1c:e4:92:9b:37:2a:c2:84:
                    72:aa:16:63:85:38:87:79:f1:2b:93:87:9d:c7:80:
                    c8:2a:5d:6f:8e:32:4e:82:9e:00:38:9f:6c:bd:7e:
                    cf:a4:53:a3:58:8b:b5:3a:1f:d7:95:d0:7d:73:13:
                    46:3f:5c:de:a4:e6:61:93:84:c7:7e:55:8d:44:c2:
                    b6:9d:d9:10:b9:ca:4a:29:b3:5d:e1:cb:39:50:fa:
                    c8:34:e9:ff:82:ce:16:5e:91:a8:aa:0a:05:3c:f2:
                    93:c3:0a:32:11:67:ab:ef:db:41:fe:6f:80:b9:62:
                    a4:f5:d4:cf:89:c4:15:74:13:4b:15:6c:c7:1d:4f:
                    5a:1b:b2:9b:36:b8:62:49:dc:20:c0:96:bf:35:10:
                    de:2f:48:cc:4f:f3:12:53:a3:2e:2e:22:2d:d3:d4:
                    fa:48:ea:82:b4:60:e6:78:31:75:c1:30:89:29:c7:
                    24:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4E:40:EE:1A:D7:14:16:0D:33:F6:29:FD:B4:C5:19:33:D0:55:51
            X509v3 Authority Key Identifier:
                keyid:CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e35352e3134342e302f32312d3231203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:20:26:89:0e:66:0a:25:9f:12:64:81:27:d6:97:1b:59:79:
         e6:c9:d2:e6:ce:56:76:a3:1a:71:c1:00:d2:84:96:d9:a0:d8:
         13:39:2e:57:68:4e:f9:3e:05:dd:c5:12:40:ee:ce:97:9b:b5:
         d3:f3:14:02:b1:2e:b6:e6:85:0a:53:05:8f:96:22:84:68:11:
         a3:70:bb:39:09:14:59:49:50:70:8e:1f:24:28:34:bb:b7:f8:
         c2:8c:54:41:b9:2b:e2:90:0a:00:a3:74:f3:2a:48:5f:db:79:
         ae:18:da:56:94:04:a8:36:6b:03:66:19:0d:3c:7a:88:af:ab:
         60:e9:3c:35:33:40:98:0d:08:b6:e0:bc:20:ab:27:76:ae:48:
         03:1b:ad:e3:fe:db:65:c2:17:c4:92:1c:89:da:17:a1:90:2c:
         da:db:bb:0c:2b:30:3b:45:25:df:9b:93:e5:9b:c8:06:2b:2d:
         93:42:5a:99:72:34:11:68:b5:cc:c2:50:cb:0a:90:4f:29:05:
         eb:f7:9c:b0:8b:80:84:99:fe:05:e4:9c:ea:4a:49:23:9f:17:
         25:21:91:6b:6e:8b:18:99:dd:c6:3b:b8:2c:b6:e4:08:bf:57:
         27:2e:e4:c6:d4:d4:92:95:dc:38:42:26:05:45:8e:9e:fd:03:
         c2:b4:50:b8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfMbj807z5By7rXcZaPVfgqtutMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y4OUVDRjE5MDY5MzRCODg2ODc0OUZFMTA3MDNFQ0JC
NDM0RDNCOTAeFw0yNDA0MDMyMjM3MTlaFw0yNTA0MDIyMjQyMTlaMDMxMTAvBgNV
BAMTKDc5NEU0MEVFMUFENzE0MTYwRDMzRjYyOUZEQjRDNTE5MzNEMDU1NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2P7InBq07up7nNEVV3AEZX3r+
/cxYkYFI/6hlPgaHNiG8Hrf0UOSz8p1fkebotJo/LzxbCjpMgXEBMdQU9QBzDxuA
EQrsmDHU+pKCW/q+CPoc5JKbNyrChHKqFmOFOId58SuTh53HgMgqXW+OMk6CngA4
n2y9fs+kU6NYi7U6H9eV0H1zE0Y/XN6k5mGThMd+VY1Ewrad2RC5ykops13hyzlQ
+sg06f+CzhZekaiqCgU88pPDCjIRZ6vv20H+b4C5YqT11M+JxBV0E0sVbMcdT1ob
sps2uGJJ3CDAlr81EN4vSMxP8xJToy4uIi3T1PpI6oK0YOZ4MXXBMIkpxySLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeU5A7hrXFBYNM/Yp/bTFGTPQVVEwHwYDVR0j
BBgwFoAUz4ns8ZBpNLiGh0n+EHA+y7Q007kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZKemdkSkNqNXZHdjZXQXFXTGsyTG9naVRQVFl6ZERkODJmcTZMTTdp
NUMvMS9DRjg5RUNGMTkwNjkzNEI4ODY4NzQ5RkUxMDcwM0VDQkI0MzREM0I5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGODlFQ0YxOTA2OTM0Qjg4
Njg3NDlGRTEwNzAzRUNCQjQzNEQzQjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWSnpnZEpDajV2R3Y2V0FxV0xrMkxvZ2lUUFRZemREZDgyZnE2TE03aTVDLzEv
MzEzNzM3MmUzNTM1MmUzMTM0MzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzNTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxN5AwDQYJKoZIhvcNAQELBQADggEBADggJokO
ZgolnxJkgSfWlxtZeebJ0ubOVnajGnHBANKEltmg2BM5LldoTvk+Bd3FEkDuzpeb
tdPzFAKxLrbmhQpTBY+WIoRoEaNwuzkJFFlJUHCOHyQoNLu3+MKMVEG5K+KQCgCj
dPMqSF/bea4Y2laUBKg2awNmGQ08eoivq2DpPDUzQJgNCLbgvCCrJ3auSAMbreP+
22XCF8SSHInaF6GQLNrbuwwrMDtFJd+bk+WbyAYrLZNCWplyNBFotczCUMsKkE8p
Bev3nLCLgISZ/gXknOpKSSOfFyUhkWtuixiZ3cY7uCy25Ai/Vycu5MbU1JKV3DhC
JgVFjp79A8K0ULg=
-----END CERTIFICATE-----
Generated at Mon Jul 15 21:32:10 2024 by rpki-client on console-ams.rpki-client.org