Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36382e302f32332d3233203d3e20323632333338.roa
File:                     3137372e3132362e36382e302f32332d3233203d3e20323632333338.roa (raw, json)
Hash identifier:          ILjsDofBB09r1YTVYDl9l5C9Q47wJmuqylEfCSUQN9c=
Subject key identifier:   A3:CC:33:69:2F:0B:8C:33:44:EE:61:0D:7A:FF:C3:55:CA:EC:06:37
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       1D62C5A0F8E5601C46587D8D4821DC64468042D0
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36382e302f32332d3233203d3e20323632333338.roa
Signing time:             Mon 06 May 2024 11:46:21 +0000
ROA not before:           Mon 06 May 2024 11:41:21 +0000
ROA not after:            Mon 05 May 2025 11:46:21 +0000
asID:                     262338
IP address blocks:        177.126.68.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:62:c5:a0:f8:e5:60:1c:46:58:7d:8d:48:21:dc:64:46:80:42:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: May  6 11:41:21 2024 GMT
            Not After : May  5 11:46:21 2025 GMT
        Subject: CN=A3CC33692F0B8C3344EE610D7AFFC355CAEC0637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1f:6a:5b:52:f5:9a:e1:46:80:c9:6e:2c:86:
                    49:f0:d2:7c:6e:08:4f:df:c8:10:b2:84:df:3e:8a:
                    97:81:57:6e:34:5a:e6:de:81:c0:d0:21:76:17:3b:
                    02:6c:f9:14:4e:ea:06:0f:cf:77:e0:1d:33:98:9a:
                    cf:4a:d1:b6:68:98:dc:1f:f9:f1:c2:d1:e1:4f:06:
                    7d:76:60:22:ba:5a:69:53:30:85:8b:3b:29:f6:98:
                    d2:c4:46:cb:85:85:3f:d8:cc:bf:d0:3f:17:95:06:
                    f9:71:fa:22:6d:34:cc:cf:1e:d8:bc:dd:85:26:a1:
                    ae:0d:ab:2c:65:0e:67:2f:d4:f8:aa:30:22:14:b9:
                    44:f4:42:fd:cb:48:2d:3a:9b:9e:72:8a:62:85:15:
                    b4:17:7b:31:54:73:aa:15:c7:4e:33:cb:6d:79:78:
                    37:ac:79:19:4c:b2:50:2b:21:9e:24:28:6c:a1:b3:
                    8d:9e:1d:07:e5:bf:eb:2d:36:67:ad:ff:47:e7:f0:
                    7e:e8:d7:52:e3:3e:99:09:75:ba:82:30:c4:a6:11:
                    27:f4:62:3f:ed:b1:a8:17:e2:0f:da:01:80:11:2a:
                    22:54:ea:98:45:64:d0:0a:f9:3f:3b:75:bc:05:f0:
                    9b:fd:c8:d9:3b:c7:a5:47:28:43:27:01:0d:af:1d:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CC:33:69:2F:0B:8C:33:44:EE:61:0D:7A:FF:C3:55:CA:EC:06:37
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36382e302f32332d3233203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:77:fa:74:9c:e1:d4:9a:5c:e5:94:c5:d0:bf:8f:43:36:
         3a:90:0b:5f:bb:5f:25:ab:c3:c1:18:e2:88:f0:cc:3a:74:21:
         85:9a:77:78:6a:e2:59:ad:6a:a8:41:61:ac:a8:d6:63:e5:b2:
         07:c7:12:1a:e5:e1:f1:ee:1b:3c:e7:05:35:14:86:94:66:44:
         58:99:dc:83:db:02:2c:f8:6a:6f:7d:6a:a6:fa:48:82:78:86:
         dd:27:83:08:ad:be:f6:74:5b:73:17:b3:e0:6b:de:91:0c:c8:
         58:1b:35:9f:d1:9a:d8:47:a2:2e:7c:4a:be:6c:b4:19:af:76:
         22:01:d1:87:db:4c:f9:8c:f5:23:a3:c1:7e:99:92:5c:5d:3b:
         23:2c:76:c2:af:a8:d5:f6:96:4d:a8:10:b6:eb:5f:e0:55:97:
         30:db:09:ae:0a:51:d8:06:95:b6:7b:51:46:6e:2b:75:97:7a:
         e3:2b:82:10:01:e9:4d:82:40:31:38:6f:bb:01:5d:11:fc:a4:
         22:1d:0b:72:7c:1c:15:a3:cf:5b:0d:91:c4:be:18:d2:b2:75:
         c2:e5:e6:39:4d:04:26:d5:f2:b9:f0:c8:97:55:a3:00:d5:f7:
         21:b8:a4:40:7a:4b:1c:62:0e:7a:7a:d2:95:a1:78:ed:be:4d:
         e5:0d:0e:fe
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHWLFoPjlYBxGWH2NSCHcZEaAQtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxQTEyMEQ3MjgxMjVGNjBGRjREQ0JGMUVDN0RBNTRG
MERCRUQwMzAeFw0yNDA1MDYxMTQxMjFaFw0yNTA1MDUxMTQ2MjFaMDMxMTAvBgNV
BAMTKEEzQ0MzMzY5MkYwQjhDMzM0NEVFNjEwRDdBRkZDMzU1Q0FFQzA2MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqH2pbUvWa4UaAyW4shknw0nxu
CE/fyBCyhN8+ipeBV240WubegcDQIXYXOwJs+RRO6gYPz3fgHTOYms9K0bZomNwf
+fHC0eFPBn12YCK6WmlTMIWLOyn2mNLERsuFhT/YzL/QPxeVBvlx+iJtNMzPHti8
3YUmoa4NqyxlDmcv1PiqMCIUuUT0Qv3LSC06m55yimKFFbQXezFUc6oVx04zy215
eDeseRlMslArIZ4kKGyhs42eHQflv+stNmet/0fn8H7o11LjPpkJdbqCMMSmESf0
Yj/tsagX4g/aAYARKiJU6phFZNAK+T87dbwF8Jv9yNk7x6VHKEMnAQ2vHRypAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUo8wzaS8LjDNE7mENev/DVcrsBjcwHwYDVR0j
BBgwFoAUXRoSDXKBJfYP9Ny/HsfaVPDb7QMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW9rc2Yzc0x4bmJxZ3hQZUNQaENNYXM5dDdqUkFrVjgydm44VGtMUnhH
c3YvMC81RDFBMTIwRDcyODEyNUY2MEZGNERDQkYxRUM3REE1NEYwREJFRDAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEMUExMjBENzI4MTI1RjYw
RkY0RENCRjFFQzdEQTU0RjBEQkVEMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzlva3NmM3NMeG5icWd4UGVDUGhDTWFzOXQ3alJBa1Y4MnZuOFRrTFJ4R3N2LzAv
MzEzNzM3MmUzMTMyMzYyZTM2MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxfkQwDQYJKoZIhvcNAQELBQADggEBAHrdd/p0
nOHUmlzllMXQv49DNjqQC1+7XyWrw8EY4ojwzDp0IYWad3hq4lmtaqhBYayo1mPl
sgfHEhrl4fHuGzznBTUUhpRmRFiZ3IPbAiz4am99aqb6SIJ4ht0ngwitvvZ0W3MX
s+Br3pEMyFgbNZ/RmthHoi58Sr5stBmvdiIB0YfbTPmM9SOjwX6ZklxdOyMsdsKv
qNX2lk2oELbrX+BVlzDbCa4KUdgGlbZ7UUZuK3WXeuMrghAB6U2CQDE4b7sBXRH8
pCIdC3J8HBWjz1sNkcS+GNKydcLl5jlNBCbV8rnwyJdVowDV9yG4pEB6SxxiDnp6
0pWheO2+TeUNDv4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-ams.rpki-client.org