Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37302e302f32342d3234203d3e20323632333338.roa
File:                     3137372e3132362e37302e302f32342d3234203d3e20323632333338.roa (raw, json)
Hash identifier:          SgKtZ7UTZ+MzXddyzsk8OKENJcWpePHl96/7DGAykuE=
Subject key identifier:   9C:71:B6:89:2B:0C:C5:76:98:92:D2:55:67:37:0A:45:C8:D5:65:03
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       418DCD788EDC8C7B449612BC790A9285C3FBD46E
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37302e302f32342d3234203d3e20323632333338.roa
Signing time:             Mon 06 May 2024 11:46:52 +0000
ROA not before:           Mon 06 May 2024 11:41:52 +0000
ROA not after:            Mon 05 May 2025 11:46:52 +0000
asID:                     262338
IP address blocks:        177.126.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8d:cd:78:8e:dc:8c:7b:44:96:12:bc:79:0a:92:85:c3:fb:d4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: May  6 11:41:52 2024 GMT
            Not After : May  5 11:46:52 2025 GMT
        Subject: CN=9C71B6892B0CC5769892D25567370A45C8D56503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:68:b6:39:81:f6:32:7c:b1:aa:53:da:3b:
                    e0:22:05:8e:70:5c:fa:f8:9d:01:0a:18:1d:58:3f:
                    93:74:e0:44:0d:34:3e:44:79:64:62:47:28:69:ef:
                    25:78:f0:42:2e:44:5d:34:57:83:e8:f8:0a:f7:2f:
                    ea:f0:84:02:79:97:70:3b:b8:c4:6a:36:40:da:e8:
                    37:bc:dc:78:ed:b9:74:33:64:c3:d0:fe:54:a3:c1:
                    3e:5b:f3:b7:10:3f:8e:8a:17:99:70:81:68:5d:bb:
                    de:d3:7d:9d:c7:b1:b3:d8:8f:1b:2b:af:20:07:52:
                    60:96:67:b2:c6:c2:f7:da:a0:49:ac:50:c2:40:78:
                    15:df:56:79:e7:cf:39:50:0c:74:d9:f6:83:76:04:
                    17:3c:08:29:3e:af:66:51:50:f3:4f:8f:3f:d6:4d:
                    67:cc:02:5c:ce:05:10:b8:f9:23:08:24:dc:3b:ae:
                    aa:d8:fa:96:f1:e1:59:70:47:3c:89:8a:e0:b7:52:
                    23:46:97:02:1a:18:a5:50:22:19:00:af:19:c4:c0:
                    fd:f2:d2:78:a8:40:57:74:4f:47:5a:2b:5d:6d:6a:
                    93:57:c0:cf:5a:51:b2:c1:3c:9b:4c:cf:f7:d6:ed:
                    06:9e:af:97:1b:b5:06:0f:66:92:12:a7:f3:f3:1f:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:71:B6:89:2B:0C:C5:76:98:92:D2:55:67:37:0A:45:C8:D5:65:03
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37302e302f32342d3234203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:a9:e1:dc:db:8b:e1:65:ce:d9:3c:81:9e:02:4b:1b:cb:5e:
         2e:7e:06:ac:8f:92:e5:0c:4e:59:fe:b8:15:51:90:42:7f:45:
         1c:28:e5:84:7d:f0:41:c4:c1:e1:df:7f:5a:99:ea:12:c9:8d:
         b8:8c:98:fa:38:83:b3:22:57:ef:63:5c:e5:4a:5d:f2:26:8e:
         c0:1d:aa:49:1d:75:1a:7d:2d:19:d4:23:c2:66:fb:72:44:9d:
         db:b0:27:f5:9b:5a:97:fc:cf:27:c9:70:7b:98:d8:ee:9c:9c:
         3c:70:e6:48:43:7e:4c:a5:06:93:74:35:b1:20:61:38:c1:4d:
         c5:40:59:e9:0b:06:98:05:b9:0c:c5:10:3e:16:25:4c:6d:8d:
         0f:b5:32:31:de:74:1a:05:b8:44:c4:cd:26:19:d4:b8:33:8f:
         f4:4e:df:25:d1:30:45:fb:ed:8f:8b:9d:2c:ea:fd:fc:46:f8:
         d0:71:6d:4b:51:72:44:2a:84:39:2a:87:c0:c8:8a:70:17:3e:
         41:4b:87:69:86:1f:2c:76:c5:52:58:52:d3:ca:d8:1c:71:52:
         bb:4a:3f:d4:6d:32:40:11:9a:80:6e:cb:52:ae:1a:83:0e:a0:
         57:ac:21:ab:e1:ca:51:e5:3a:12:f3:18:2c:2e:9d:97:9d:b2:
         c9:70:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-ams.rpki-client.org