Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37302e302f32332d3233203d3e20323632333338.roa
File:                     3137372e3132362e37302e302f32332d3233203d3e20323632333338.roa (raw, json)
Hash identifier:          wU99deNchIbVYZ3Y6DElo/w/zuUAkJ9z3Kup+nLfZjw=
Subject key identifier:   37:82:1D:EA:FE:51:43:23:AA:95:64:82:88:7E:BE:AD:3F:99:5C:E1
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       5DCF907DBA6DE2B527B3B8DC4BA1FE18AA63E4EE
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37302e302f32332d3233203d3e20323632333338.roa
Signing time:             Mon 06 May 2024 11:46:39 +0000
ROA not before:           Mon 06 May 2024 11:41:39 +0000
ROA not after:            Mon 05 May 2025 11:46:39 +0000
asID:                     262338
IP address blocks:        177.126.70.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cf:90:7d:ba:6d:e2:b5:27:b3:b8:dc:4b:a1:fe:18:aa:63:e4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: May  6 11:41:39 2024 GMT
            Not After : May  5 11:46:39 2025 GMT
        Subject: CN=37821DEAFE514323AA956482887EBEAD3F995CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:3b:8a:df:aa:2f:b1:31:54:ed:9c:11:16:
                    26:5f:3a:ce:65:ac:a5:cd:d4:ac:27:6d:42:fc:d4:
                    ec:1d:27:98:49:fc:67:e9:ef:a0:50:12:91:e9:b7:
                    e3:ad:71:98:5d:a7:fd:12:65:7a:c7:0b:5d:d9:4f:
                    0e:6d:4c:11:7e:b7:70:e9:a0:03:d8:d4:fd:15:94:
                    4e:b3:38:28:c0:7a:63:3a:67:92:0f:39:98:a8:4d:
                    bc:31:a5:ce:13:12:71:4b:13:92:a9:44:a6:47:fa:
                    74:fe:f5:59:3f:08:b5:f6:b9:51:4d:fc:91:22:dd:
                    da:c0:12:3e:ec:ca:51:d7:c7:9d:7f:d4:80:8c:8e:
                    a4:9d:f4:91:b3:37:4a:3b:2c:c8:37:86:5d:1f:61:
                    ee:11:2c:ca:79:db:51:71:72:2f:0e:f0:cf:92:35:
                    a2:b3:c8:ff:c8:0d:b7:dd:1a:47:9e:8a:d4:2d:9d:
                    14:56:e6:47:f7:15:f4:14:99:73:1c:69:70:78:24:
                    aa:d7:76:f1:30:f5:a0:ac:95:8c:40:b6:ff:b4:44:
                    7c:89:51:b3:d4:a9:f7:4a:05:0f:69:19:a8:54:a9:
                    fb:08:01:c7:23:6e:49:cf:81:55:d4:7c:8c:a3:bd:
                    ad:94:31:f6:3a:4f:1a:88:f2:d1:23:92:17:15:aa:
                    47:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:82:1D:EA:FE:51:43:23:AA:95:64:82:88:7E:BE:AD:3F:99:5C:E1
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37302e302f32332d3233203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:a3:6e:22:77:7d:9a:e0:cc:22:e6:73:74:a5:e5:1a:0f:74:
         73:28:2b:41:13:3a:c2:20:01:41:ff:f4:1b:71:fc:28:9f:80:
         ce:dd:7c:9c:0a:72:34:48:95:33:da:3b:5d:aa:5b:1c:3f:4f:
         c6:d1:0b:ca:8e:a3:ff:6b:96:73:22:14:10:71:20:c6:40:14:
         73:8f:55:f0:86:2d:db:43:2b:2b:e2:c7:bf:7e:96:1c:13:27:
         82:3d:f8:03:eb:52:25:f8:a4:c7:7a:c1:7c:02:d1:1b:e9:39:
         41:b4:37:1c:81:12:86:f1:11:30:c1:26:aa:d5:c5:28:3e:4d:
         5c:50:71:3e:31:e7:0e:57:22:31:f7:0b:19:cd:ac:03:68:06:
         c9:52:56:1f:57:57:1c:57:70:fa:53:bf:44:35:da:18:f8:24:
         86:53:a5:49:45:46:c2:7c:ec:15:a8:bb:1b:2b:4a:7a:b5:5f:
         fc:f8:dd:c5:e2:63:2d:1a:42:58:03:8e:2b:83:01:2f:39:dd:
         8c:bf:d4:6a:15:cb:70:95:8f:e5:e5:b2:fb:5d:6a:f4:d1:e4:
         94:a7:ee:39:50:70:5d:50:ce:25:6f:f0:4e:cc:cb:21:94:a5:
         2f:2d:04:f5:b5:5e:68:9b:38:0a:ff:ad:75:8c:95:74:ff:8b:
         46:e5:2e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org