Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36342e302f32322d3232203d3e20323632333338.roa
File:                     3137372e3132362e36342e302f32322d3232203d3e20323632333338.roa (raw, json)
Hash identifier:          FsqEOJ6F2NDDDJAzjpc/YGJv0mt/ArY9Tb8Orw5ifp0=
Subject key identifier:   AC:7C:17:01:3A:E4:1F:D4:25:B2:EE:72:3D:C9:69:B4:54:ED:3A:5C
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       74756DB852AACF40C18742996E30978603B51E9A
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36342e302f32322d3232203d3e20323632333338.roa
Signing time:             Mon 06 May 2024 11:45:39 +0000
ROA not before:           Mon 06 May 2024 11:40:39 +0000
ROA not after:            Mon 05 May 2025 11:45:39 +0000
asID:                     262338
IP address blocks:        177.126.64.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:75:6d:b8:52:aa:cf:40:c1:87:42:99:6e:30:97:86:03:b5:1e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: May  6 11:40:39 2024 GMT
            Not After : May  5 11:45:39 2025 GMT
        Subject: CN=AC7C17013AE41FD425B2EE723DC969B454ED3A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:95:96:74:fa:ad:a5:ed:5c:54:58:0b:8e:
                    72:d7:1e:ac:59:d0:e1:56:b3:b6:4e:b2:c5:e1:a2:
                    f1:7b:75:d1:90:80:c9:f9:c5:d1:71:b5:e6:ec:37:
                    c4:3d:a8:4c:60:2c:0c:88:12:c3:fb:77:95:43:8f:
                    b7:ad:22:71:13:e8:a6:c1:f3:33:aa:04:9f:ce:11:
                    a1:e7:4c:7e:ea:1d:a2:02:ba:6c:77:f6:74:05:5c:
                    39:26:1a:01:a5:1d:7d:64:e5:81:be:15:c3:e6:79:
                    00:f1:70:c3:7f:cd:31:2c:e6:51:0f:71:70:c2:24:
                    72:80:ad:6e:19:a2:5e:23:98:fc:f8:9b:f4:5c:96:
                    24:28:3f:4e:b0:e1:3b:0d:3f:ad:69:54:35:9b:61:
                    f0:1e:b3:f9:60:f3:e4:2d:c4:1f:af:0a:92:81:4f:
                    ef:46:c1:21:f3:1f:82:35:de:93:9a:01:7c:15:ff:
                    df:10:76:e9:d9:9f:6f:51:25:ee:f7:0c:da:88:b7:
                    22:92:95:9d:16:74:19:d8:82:56:50:2d:d6:d9:91:
                    d8:b7:d6:f4:41:c4:6c:8a:0e:41:92:50:72:da:41:
                    1c:79:4c:67:98:80:ce:d5:6f:42:89:6f:7a:90:e7:
                    ed:85:95:fb:27:6e:d6:ec:46:75:87:ca:47:73:55:
                    b5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7C:17:01:3A:E4:1F:D4:25:B2:EE:72:3D:C9:69:B4:54:ED:3A:5C
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36342e302f32322d3232203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:ce:f6:18:41:aa:67:91:f5:62:38:cc:fc:88:98:a1:f7:0e:
         e7:38:fb:3b:2c:59:d1:2a:33:dd:5b:e1:3e:1d:33:48:ff:dd:
         2b:cf:be:79:28:96:c7:81:0b:ee:d0:9c:63:bc:0d:58:fe:51:
         71:9d:c4:d2:34:4e:ca:d0:1d:58:42:3a:0c:55:b7:1d:db:f0:
         79:37:96:00:83:0d:7f:03:65:16:24:2b:c3:ac:78:67:a5:a9:
         cc:84:10:1e:b0:60:65:09:c6:c0:85:5a:22:1a:db:22:96:96:
         99:7a:33:29:19:86:e4:2d:e1:1e:66:f3:6f:e2:95:71:83:d2:
         36:21:26:aa:9b:5b:74:a1:5e:ce:35:fc:b0:b3:d2:0a:dd:41:
         f8:07:3e:20:12:2b:34:df:9a:51:0d:c2:0c:e0:2c:ac:fc:68:
         dc:29:de:39:0a:51:8c:7f:43:2e:64:f4:22:ab:65:60:ea:0f:
         89:53:03:e6:83:36:c0:96:6e:bf:62:0e:59:db:ef:74:e0:89:
         29:d2:ce:d6:62:e7:d1:f8:ae:c9:f1:52:a3:00:45:b1:bf:29:
         3a:55:20:f1:d1:f3:79:f8:9d:31:5b:60:31:72:5d:ff:cd:cd:
         8b:8a:94:64:a2:7c:f9:f0:a8:72:0b:78:ea:08:fd:ae:1a:19:
         13:72:eb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-ams.rpki-client.org