Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3137372e3132382e3137342e302f32342d3332203d3e20323731343239.roa
File:                     3137372e3132382e3137342e302f32342d3332203d3e20323731343239.roa (raw, json)
Hash identifier:          oysY9R/KmuClm2dTTU8i49sA2wY8NeL/9s+rU+nLK6g=
Subject key identifier:   BB:38:C3:2F:CF:BE:B8:2B:5E:34:CB:C7:F3:9F:E1:2F:9B:1B:1C:51
Certificate issuer:       /CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
Certificate serial:       76B8B19F7ABA6F17A8CDE73475D4A168F8DAF06A
Authority key identifier: FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3137372e3132382e3137342e302f32342d3332203d3e20323731343239.roa
Signing time:             Fri 03 May 2024 11:34:14 +0000
ROA not before:           Fri 03 May 2024 11:29:14 +0000
ROA not after:            Fri 02 May 2025 11:34:14 +0000
asID:                     271429
IP address blocks:        177.128.174.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 12:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b8:b1:9f:7a:ba:6f:17:a8:cd:e7:34:75:d4:a1:68:f8:da:f0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
        Validity
            Not Before: May  3 11:29:14 2024 GMT
            Not After : May  2 11:34:14 2025 GMT
        Subject: CN=BB38C32FCFBEB82B5E34CBC7F39FE12F9B1B1C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3b:e9:cb:1e:0c:a9:57:f6:aa:bb:c5:fa:59:
                    01:cb:e3:36:39:37:fe:dc:7a:1f:86:f5:6f:21:72:
                    63:b7:c3:ca:03:51:04:74:ad:ba:68:72:76:7a:40:
                    47:eb:f3:4a:0d:63:6d:45:9b:fc:c9:1b:2e:14:89:
                    44:be:27:54:f2:f2:00:f2:3d:1a:eb:4a:01:2f:62:
                    de:51:4f:a2:fe:09:2a:d2:04:db:e0:cc:49:43:8d:
                    17:1d:63:46:dd:c5:13:33:2f:79:b1:ca:9c:32:f4:
                    a4:41:8c:41:16:4f:c5:a7:ee:6f:36:1b:da:f0:20:
                    18:14:f4:2c:66:b4:70:33:58:4b:2f:0e:c8:49:3b:
                    0d:59:3f:7e:91:99:2b:da:cd:13:00:f3:02:33:68:
                    a4:b1:ac:12:91:7a:7f:21:19:f1:73:e6:6b:75:b0:
                    d2:ae:25:17:02:22:d5:b7:28:a5:12:57:fc:a3:83:
                    08:9f:45:1f:e7:9c:3b:71:2f:b4:e3:6a:ed:5e:b2:
                    1e:a8:31:58:1b:0c:1e:81:d6:7f:e6:43:e1:81:64:
                    ef:4c:a5:d8:4d:f7:0a:3e:16:b0:02:70:c4:7e:6c:
                    af:a2:47:9d:61:bb:2d:41:90:21:db:43:d9:e6:52:
                    01:db:7e:e3:ca:e9:a2:73:fe:4f:21:d4:ae:aa:6b:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:38:C3:2F:CF:BE:B8:2B:5E:34:CB:C7:F3:9F:E1:2F:9B:1B:1C:51
            X509v3 Authority Key Identifier:
                keyid:FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3137372e3132382e3137342e302f32342d3332203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:21:fa:38:5b:f0:56:b8:82:3a:43:72:46:5e:ce:a2:ad:e9:
         6a:22:7e:23:4a:ca:15:b6:3d:84:75:d8:d9:82:ce:21:25:c4:
         6d:43:38:1d:b4:74:08:4b:1c:48:a8:92:0c:46:82:c6:67:03:
         68:42:1a:71:a1:0e:8c:3a:3a:88:bf:47:75:7c:70:09:15:75:
         22:e2:dd:31:f9:ca:55:68:1f:00:21:b5:8e:22:f1:95:c2:2a:
         0d:87:a1:9c:db:9b:43:eb:e4:4c:86:a0:6c:a7:3e:3a:85:d8:
         60:6a:cb:fd:e4:65:1e:c0:78:75:de:1d:71:f3:ce:d2:eb:2e:
         9f:7f:87:d4:fe:76:59:8b:b7:c8:00:63:e4:3c:51:c1:9f:9c:
         5d:ee:c0:bd:ca:61:60:3f:d0:88:7e:b3:bc:bb:7f:c3:b6:2c:
         ae:3e:b9:7d:fd:a9:ed:65:2a:c6:b3:ff:95:2e:6b:07:b6:c6:
         69:62:6e:95:32:78:e6:1f:9b:4c:6e:c5:c3:d4:88:aa:01:a2:
         d6:73:f1:ce:df:d8:39:91:62:a8:ff:9a:b1:a0:60:0e:69:96:
         7b:f4:5b:4b:7a:0f:0b:d1:e3:cf:35:e5:7d:85:06:a0:52:14:
         6f:d1:65:eb:7e:d4:f0:b7:cf:d0:63:9e:b9:e0:49:a0:1b:0d:
         fb:84:76:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 14:04:14 2024 by rpki-client on console-ams.rpki-client.org