Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e36362e3232342e302f32312d3231203d3e20323632353035.roa
File:                     3137372e36362e3232342e302f32312d3231203d3e20323632353035.roa (raw, json)
Hash identifier:          12Ab4qrRz1wszmpC1Trco+5+15qnkSmVAKlQMCv7qSI=
Subject key identifier:   4F:8D:4A:5E:EB:73:5F:DF:71:A3:60:54:03:2F:AD:07:EF:F4:23:49
Certificate issuer:       /CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
Certificate serial:       61AE7514CACA7D230BF0FC6FC52346037D9DC45F
Authority key identifier: CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e36362e3232342e302f32312d3231203d3e20323632353035.roa
Signing time:             Wed 03 Apr 2024 22:42:19 +0000
ROA not before:           Wed 03 Apr 2024 22:37:19 +0000
ROA not after:            Wed 02 Apr 2025 22:42:19 +0000
asID:                     262505
IP address blocks:        177.66.224.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 18:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ae:75:14:ca:ca:7d:23:0b:f0:fc:6f:c5:23:46:03:7d:9d:c4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
        Validity
            Not Before: Apr  3 22:37:19 2024 GMT
            Not After : Apr  2 22:42:19 2025 GMT
        Subject: CN=4F8D4A5EEB735FDF71A36054032FAD07EFF42349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9d:b8:6a:85:48:70:fa:50:67:8c:84:e8:33:
                    14:45:c7:ba:b5:52:26:d3:cf:64:94:27:f1:30:a3:
                    33:8b:4a:50:25:56:96:c1:f6:5c:0b:dc:9c:98:c2:
                    ab:74:b4:d0:14:0a:3d:cc:ff:9c:83:6f:00:ba:44:
                    d7:27:31:f2:a6:e1:d7:91:8f:85:86:35:13:40:b0:
                    c8:36:5f:b2:64:cf:47:3c:fa:29:b8:e8:8a:34:c1:
                    de:43:12:94:47:09:4e:9a:85:dd:7a:d5:4d:45:13:
                    54:9d:d0:59:e2:da:b2:ef:39:78:e5:82:37:84:5f:
                    2f:ab:49:c2:33:f4:db:a5:5e:74:9f:04:b8:59:0f:
                    0b:b7:89:24:15:56:3f:ac:32:26:04:57:e1:fc:25:
                    36:91:8f:cf:0e:d2:62:cc:e7:62:de:32:61:de:87:
                    db:30:c4:7c:53:7b:01:ff:f0:6a:8e:02:9d:e2:84:
                    88:73:7a:37:6f:21:f2:a7:8a:56:bb:8e:15:44:7b:
                    c4:f8:91:03:02:8e:5e:1f:3e:14:7f:80:37:ac:ea:
                    1d:e2:f8:d1:24:42:87:e8:df:5c:82:2f:51:08:60:
                    76:33:40:46:19:c9:79:93:50:f0:b3:25:90:15:9b:
                    5b:fc:ab:9f:44:3e:26:0f:c9:5f:d3:3c:ab:b4:4a:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8D:4A:5E:EB:73:5F:DF:71:A3:60:54:03:2F:AD:07:EF:F4:23:49
            X509v3 Authority Key Identifier:
                keyid:CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e36362e3232342e302f32312d3231203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:fc:d0:bc:b3:84:dc:fc:f1:c6:d3:a5:2a:5f:13:ea:e7:cd:
         63:c3:30:44:ef:6d:d6:30:65:29:b8:c8:a6:14:36:07:41:75:
         09:6a:b1:50:4e:63:d5:ca:5f:c4:3d:aa:10:6e:e4:0c:56:9b:
         a4:1e:6b:ee:4e:d5:10:45:e7:30:0b:14:cc:5f:08:cc:44:26:
         08:cf:97:04:e3:25:16:40:8b:82:62:be:b6:6d:57:32:c4:0e:
         04:5e:50:7d:a0:7a:e7:0e:eb:55:16:8e:17:fe:b9:6d:b1:03:
         c5:42:ba:70:b4:3b:dc:9c:7e:18:01:35:c2:45:06:d0:6e:de:
         22:38:28:b1:99:e1:b4:98:5d:a2:b0:54:29:94:98:fa:ac:8e:
         d1:6d:89:d6:b1:0c:cb:1f:fd:79:12:b4:c7:0a:17:67:48:82:
         7f:e9:1c:c9:f9:39:25:f6:bc:63:5a:d3:bb:51:61:eb:7e:20:
         a2:d3:84:ff:8d:36:cc:81:41:e0:23:e0:7a:38:7b:6d:4f:66:
         95:93:98:3a:41:2f:58:48:8f:b1:9a:79:ab:75:bd:de:99:58:
         27:cd:fe:7a:d5:ce:0b:76:21:1b:07:54:ee:93:4b:66:bb:e4:
         19:5e:b5:ed:67:fa:50:11:b7:d4:a9:88:f0:a1:af:e3:ec:21:
         94:92:0d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 21:32:10 2024 by rpki-client on console-ams.rpki-client.org