Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36342e302f32312d3231203d3e20323632333338.roa
File:                     3137372e3132362e36342e302f32312d3231203d3e20323632333338.roa (raw, json)
Hash identifier:          g4z1iorq6nww+qh8/ek8v0FM2H9NfB7XVRTPiFWc+Gs=
Subject key identifier:   49:AD:EB:C0:D6:8A:CE:37:1B:B2:B0:33:FD:35:9A:13:70:85:8C:A9
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       2DF3D5B11D6CEE1753DC77163F7A005F24746015
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36342e302f32312d3231203d3e20323632333338.roa
Signing time:             Mon 06 May 2024 11:45:35 +0000
ROA not before:           Mon 06 May 2024 11:40:35 +0000
ROA not after:            Mon 05 May 2025 11:45:35 +0000
asID:                     262338
IP address blocks:        177.126.64.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f3:d5:b1:1d:6c:ee:17:53:dc:77:16:3f:7a:00:5f:24:74:60:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: May  6 11:40:35 2024 GMT
            Not After : May  5 11:45:35 2025 GMT
        Subject: CN=49ADEBC0D68ACE371BB2B033FD359A1370858CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:ea:84:0d:93:2f:b2:88:55:43:7a:99:23:
                    a7:72:f8:57:b8:c4:5d:94:b8:5a:95:44:24:96:33:
                    2e:d0:b0:25:05:40:5d:9f:e7:71:db:87:41:ed:c1:
                    52:2f:df:e7:9a:b5:be:0a:9d:b9:e8:8e:69:61:80:
                    ca:5d:0f:bb:aa:04:99:ff:3f:34:74:28:83:8f:77:
                    d6:95:38:75:eb:42:fa:bd:4b:bc:e7:20:4b:c7:92:
                    0c:5b:37:18:00:8b:67:27:79:28:0a:cb:c5:2f:61:
                    bf:97:77:d2:cf:81:b6:31:12:61:08:c7:cd:4c:3c:
                    e0:9d:4d:8c:72:18:77:06:6f:bb:cd:9e:b1:3d:fd:
                    87:66:d0:f3:18:f7:67:9f:ff:fb:7b:20:a7:c2:04:
                    0f:b6:7d:ff:91:ad:8e:0f:88:34:e6:14:3f:40:72:
                    54:93:0b:e7:6b:63:27:92:0e:bf:ab:f7:96:74:de:
                    82:f1:14:07:cb:f5:ba:e8:b3:f6:d9:7b:64:ec:a0:
                    8a:fa:36:34:c4:70:7b:9b:e2:72:ae:dc:c4:97:ef:
                    91:2e:7c:75:e8:6d:78:79:93:47:1e:da:50:1b:de:
                    41:ca:73:2e:59:01:28:35:59:cd:08:9e:b5:90:50:
                    4c:45:86:a2:ba:2a:84:7c:57:50:55:ab:69:24:fa:
                    ce:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AD:EB:C0:D6:8A:CE:37:1B:B2:B0:33:FD:35:9A:13:70:85:8C:A9
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36342e302f32312d3231203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:e6:98:0f:67:8b:33:9c:d2:32:fe:23:3d:d1:d4:94:26:
         4d:c8:90:9a:22:f4:ec:e3:e8:26:63:7f:97:ca:82:f6:9f:35:
         af:72:59:50:1f:a0:12:43:d4:09:69:5f:9e:80:eb:1a:e6:82:
         27:4a:69:7f:25:a6:2c:e4:ba:9e:8f:f8:23:c3:f6:65:6f:91:
         23:8d:6e:76:56:5d:46:47:97:6d:1f:8a:c2:91:24:c2:e7:8c:
         fe:42:06:90:43:c3:eb:45:2f:54:67:ac:ba:17:81:ce:25:af:
         98:ba:aa:8f:c9:7b:e3:95:4f:e6:05:52:83:cd:dc:39:54:d3:
         aa:6a:e8:e5:7e:7d:9f:1d:67:11:c2:44:9e:2b:48:1f:c6:8a:
         91:05:45:7a:7c:9a:0e:97:f5:10:45:c9:2b:c8:12:49:0d:21:
         d2:f4:4f:83:73:39:04:28:6a:3e:f1:61:9e:72:9e:8f:6c:c8:
         43:7b:10:dd:6b:4f:02:36:39:a0:c1:1d:77:d9:98:21:7d:0d:
         af:8c:82:e6:ec:48:85:11:db:f7:f6:3c:a4:6e:0f:30:76:ea:
         c3:a5:f1:ec:a2:8b:d4:78:4a:5d:ad:00:5b:36:71:38:99:44:
         b3:c6:44:80:de:22:9e:5d:5f:4a:87:f9:b4:9d:3b:64:7d:e8:
         83:66:58:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org