Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37322e302f32332d3233203d3e20323632333338.roa
File:                     3137372e3132362e37322e302f32332d3233203d3e20323632333338.roa (raw, json)
Hash identifier:          pZAfDCmRzG94lKwrpNwx3+tG1OnuGs2UFyPJ9mNV4/I=
Subject key identifier:   4A:2E:2C:79:C1:EB:B4:9A:D1:53:FA:89:F0:24:B6:36:A5:89:F8:24
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       4E8807715E764C09C2D19DEF6B5D620BF560DE05
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37322e302f32332d3233203d3e20323632333338.roa
Signing time:             Wed 24 Apr 2024 12:46:12 +0000
ROA not before:           Wed 24 Apr 2024 12:41:12 +0000
ROA not after:            Wed 23 Apr 2025 12:46:12 +0000
asID:                     262338
IP address blocks:        177.126.72.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:88:07:71:5e:76:4c:09:c2:d1:9d:ef:6b:5d:62:0b:f5:60:de:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Apr 24 12:41:12 2024 GMT
            Not After : Apr 23 12:46:12 2025 GMT
        Subject: CN=4A2E2C79C1EBB49AD153FA89F024B636A589F824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:1d:3f:de:ee:75:e7:96:70:81:a3:04:68:
                    ed:05:8c:16:78:97:00:f3:e5:b5:fe:ed:97:7c:8d:
                    e0:82:8d:09:7d:61:04:0e:60:a7:42:0d:fa:df:67:
                    92:c8:a4:bc:bc:f2:1a:e4:1b:0a:cb:4a:00:b0:85:
                    77:57:8a:35:52:40:ec:88:f4:ac:eb:a9:e0:e3:28:
                    29:05:62:cb:bd:b4:68:9a:32:9e:5e:a3:a4:d6:f1:
                    a4:d4:9a:6c:a4:97:11:72:26:67:2d:e6:4b:ba:cc:
                    71:33:88:33:45:f7:51:24:d0:27:c4:32:e0:4b:9e:
                    c7:a0:b0:6f:b5:59:21:53:a5:b3:e0:fd:b4:b7:de:
                    16:3d:1a:d2:34:40:92:2e:b2:0b:b4:ec:c0:7a:a0:
                    b1:9b:e3:85:13:52:f4:02:5f:a4:5f:77:35:fa:ca:
                    ea:2c:b0:c2:3b:f2:cd:5b:79:28:59:1a:15:21:8f:
                    d8:93:e5:27:08:60:12:ca:c2:a3:86:4b:3b:05:50:
                    4d:72:0f:25:3e:b5:44:d8:72:50:a4:19:82:08:ab:
                    67:7d:78:cb:6d:65:c7:28:79:55:19:b3:f7:6b:ef:
                    10:af:fe:76:bb:36:f6:60:23:06:52:78:7d:9c:90:
                    f7:1b:eb:3d:e6:18:11:a6:07:14:22:59:09:f2:2c:
                    d4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2E:2C:79:C1:EB:B4:9A:D1:53:FA:89:F0:24:B6:36:A5:89:F8:24
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37322e302f32332d3233203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:41:31:96:d1:69:88:5c:57:95:cf:05:ba:f1:cb:cb:6b:0b:
         f2:16:ed:60:d6:d5:80:b2:9c:9a:d3:58:94:5e:66:64:a2:dc:
         f9:57:c4:7b:f8:71:93:c3:3d:0f:30:8e:37:9b:ac:f9:aa:3b:
         aa:80:c7:74:b7:69:ec:e8:7a:36:cc:b0:4b:56:f5:be:c8:33:
         51:36:72:f4:55:3a:d0:52:f7:3a:8a:5d:7f:9a:90:d2:6b:e4:
         da:a3:31:b0:86:35:0a:96:74:c9:24:f7:bb:aa:e0:ea:6b:eb:
         1c:0b:13:cf:ac:cc:f8:a3:b3:48:09:41:44:9f:de:9e:60:ed:
         fd:f9:99:d1:cb:cb:03:7d:54:61:c1:e5:7c:b8:a8:fd:32:c8:
         b9:a5:e6:7c:24:e7:99:81:1c:bf:24:6a:87:15:b5:9d:f6:15:
         9f:27:54:61:3b:c2:bf:54:f1:72:fc:df:6f:26:1c:fd:8e:39:
         13:58:44:53:83:a2:04:f2:03:da:97:bd:76:13:24:aa:21:e5:
         3d:df:d5:61:02:2a:ba:0e:06:b9:c5:83:ac:7b:1b:a8:fb:35:
         3c:dd:6a:11:74:b9:50:9f:74:a8:d5:98:28:d2:c1:b3:db:cd:
         ff:3f:a6:95:41:32:6b:bd:eb:1e:de:47:d4:e9:67:ca:7d:ff:
         8d:dc:b4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:17:11 2025 by rpki-client