Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36342e302f32302d3230203d3e20323632333338.roa
File:                     3137372e3132362e36342e302f32302d3230203d3e20323632333338.roa (raw, json)
Hash identifier:          mji4Jlz8LaEppZw5u/PUpM83Xl+/5kRe4d6R24qof4Y=
Subject key identifier:   33:63:E5:84:F0:A6:90:1C:C6:D4:5A:28:6E:9E:10:27:B8:BF:A0:7C
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       536A11B11F06F365A353B357276FACA1D496C909
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36342e302f32302d3230203d3e20323632333338.roa
Signing time:             Wed 24 Apr 2024 12:45:21 +0000
ROA not before:           Wed 24 Apr 2024 12:40:21 +0000
ROA not after:            Wed 23 Apr 2025 12:45:21 +0000
asID:                     262338
IP address blocks:        177.126.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6a:11:b1:1f:06:f3:65:a3:53:b3:57:27:6f:ac:a1:d4:96:c9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Apr 24 12:40:21 2024 GMT
            Not After : Apr 23 12:45:21 2025 GMT
        Subject: CN=3363E584F0A6901CC6D45A286E9E1027B8BFA07C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:28:fc:23:0c:1a:2e:86:a9:b0:25:76:cf:6c:
                    b8:b3:c5:56:c7:9b:7b:13:6d:81:15:64:76:47:0f:
                    83:29:f5:cd:88:96:5e:fa:65:a2:e8:fd:ed:95:36:
                    ca:2c:92:25:4d:ff:14:d2:20:78:3e:ab:29:ce:5d:
                    2f:cc:a0:79:44:87:9b:73:f7:06:c2:66:1c:ee:82:
                    10:4e:c9:44:69:62:2f:b2:c7:8b:1f:8d:84:49:63:
                    ef:3c:c1:34:48:80:30:b3:ae:4b:65:6c:17:72:f7:
                    49:23:9f:ee:33:92:40:c0:7b:d1:ee:85:67:ac:50:
                    a4:58:3a:cb:f0:25:74:13:6b:29:c7:29:a1:97:33:
                    76:95:a5:cf:7f:7c:04:b0:e1:2b:52:22:86:7f:94:
                    47:27:8b:28:bb:2c:1d:cd:0a:2b:6a:fa:b0:49:ca:
                    9f:89:a1:a7:fa:6a:dc:36:4e:57:67:f7:40:57:bd:
                    80:05:31:71:ad:ae:cf:af:34:0b:be:6f:7d:e6:fa:
                    42:4f:c9:36:b5:33:2c:81:96:e8:84:0a:8d:23:ca:
                    63:fb:d1:d7:49:5b:2f:6d:4e:bc:67:4f:56:3a:d7:
                    58:13:5e:24:4e:61:d2:af:dc:3c:c5:71:04:2e:35:
                    02:7b:0e:f0:22:43:23:81:24:28:26:0d:ce:a9:38:
                    b5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:63:E5:84:F0:A6:90:1C:C6:D4:5A:28:6E:9E:10:27:B8:BF:A0:7C
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36342e302f32302d3230203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:bf:50:8e:c9:5c:b0:75:bc:d1:34:c7:42:e5:e2:f1:28:77:
         03:14:31:29:94:2e:ff:13:fe:1e:99:e4:67:69:9e:3c:90:5a:
         a5:8c:fe:fd:30:fd:d2:63:36:6e:71:05:d5:fc:80:10:d3:0b:
         30:c3:fc:25:5c:30:3b:91:b4:b9:4a:47:97:5c:ea:28:d6:5e:
         11:1e:75:3e:ac:3a:55:ad:c6:ce:47:c2:93:bb:4b:df:c7:41:
         30:ea:f7:37:c7:95:b5:c3:b3:ef:0b:e0:26:04:16:1a:92:eb:
         5c:db:41:cb:f2:da:4d:e3:a0:4c:64:2b:fd:59:2d:3a:a0:f6:
         1c:a6:22:71:85:a3:34:75:a7:c9:79:c3:5e:67:3e:a9:53:bd:
         f6:07:03:44:9a:1d:b2:e6:c6:2d:02:4d:41:2a:af:a6:93:40:
         d0:a1:e9:92:67:bb:8a:5d:35:66:32:7e:ce:d7:a2:6b:27:e9:
         b4:62:af:23:02:83:66:fa:ca:b4:09:a7:2d:cb:09:ae:8f:25:
         75:a5:48:51:a3:92:e7:3b:07:02:9c:70:86:cb:5b:3f:0c:a6:
         46:49:0c:07:56:d6:d4:b7:b8:6a:90:56:f6:0e:0c:a0:25:a0:
         26:f4:2e:37:e9:33:e3:4d:5c:e8:f7:e7:8f:e6:d7:8a:e8:6e:
         ae:25:02:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-ams.rpki-client.org