Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37362e302f32322d3232203d3e20323632333338.roa
File:                     3137372e3132362e37362e302f32322d3232203d3e20323632333338.roa (raw, json)
Hash identifier:          D/y6fikPM7OZVFjrp1rR63KOYI94A035+jisOIJVn+s=
Subject key identifier:   D9:7D:37:8A:10:10:66:37:5D:C8:B6:93:A8:21:C3:79:3C:79:3D:A9
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       7CFD462A84535061AE30607E7A4D6B762DDD2221
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37362e302f32322d3232203d3e20323632333338.roa
Signing time:             Wed 24 Apr 2024 12:46:39 +0000
ROA not before:           Wed 24 Apr 2024 12:41:39 +0000
ROA not after:            Wed 23 Apr 2025 12:46:39 +0000
asID:                     262338
IP address blocks:        177.126.76.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fd:46:2a:84:53:50:61:ae:30:60:7e:7a:4d:6b:76:2d:dd:22:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Apr 24 12:41:39 2024 GMT
            Not After : Apr 23 12:46:39 2025 GMT
        Subject: CN=D97D378A101066375DC8B693A821C3793C793DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:f3:f2:19:a8:3c:08:25:39:91:b0:34:86:
                    5b:e7:4e:f5:3c:28:04:a7:13:9d:20:e6:26:46:42:
                    23:93:0e:09:6a:f6:bb:0e:77:d8:a2:25:6a:b3:57:
                    1a:4c:ed:21:46:ed:6c:26:dc:05:48:2b:81:a8:7e:
                    de:96:f4:4b:ba:dd:2d:3d:cf:fb:c6:70:ac:96:19:
                    46:80:d9:cc:f4:6b:e1:a7:bf:02:fa:39:4a:69:55:
                    45:d7:e7:8f:ed:90:99:93:f9:a3:7c:cf:a3:7a:62:
                    47:19:cc:13:c2:49:91:03:7e:c5:25:27:b1:41:43:
                    35:5d:06:80:2b:ee:4f:92:53:51:66:9b:96:d5:a1:
                    73:8a:34:e6:b9:04:f4:5b:8c:68:4b:b8:71:f9:45:
                    0d:16:09:82:18:39:af:e0:a5:60:e1:b3:99:ef:f9:
                    21:62:72:9d:5d:32:41:0a:0d:06:d1:c0:ff:1c:65:
                    62:ff:5c:39:21:39:09:07:aa:18:d6:43:e8:50:4e:
                    45:f0:f8:43:4e:fa:49:e0:80:73:fd:ab:f2:3b:bc:
                    8f:d4:1c:b9:dc:f3:4e:0d:14:6e:7a:a1:70:de:2f:
                    b0:72:03:a5:c8:05:e2:a4:95:cf:10:ee:94:4e:82:
                    e5:e6:92:64:ca:43:4b:bc:e9:f8:91:14:5e:58:ee:
                    86:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7D:37:8A:10:10:66:37:5D:C8:B6:93:A8:21:C3:79:3C:79:3D:A9
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37362e302f32322d3232203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:40:a0:31:08:28:97:f4:63:3b:d9:3d:8a:7d:18:fc:e5:97:
         45:55:76:ea:a1:b7:54:72:be:f7:ca:7f:4a:4c:87:5f:8e:c9:
         69:ff:65:f2:61:9c:7e:69:1c:51:22:a6:1e:37:23:c6:10:65:
         8a:e1:cf:9b:2e:0c:fc:35:b7:19:c2:ae:98:eb:9d:87:ee:29:
         04:1c:24:a8:f5:7c:4d:d0:20:21:63:ea:35:4c:29:ab:90:a6:
         c5:9b:de:77:4a:f8:b8:c9:97:be:77:20:3b:9b:23:ca:65:b2:
         5b:1c:f0:94:fe:88:7b:ad:1e:62:b5:58:1d:ca:ed:59:f1:c2:
         65:2c:64:ee:d9:ab:32:b5:df:d7:0e:3d:01:bf:14:5d:91:b7:
         f6:7f:d1:d7:11:77:b4:d3:c5:fa:e4:5b:76:f9:20:d0:3b:4f:
         0e:33:0b:5f:dd:1e:8d:69:dc:bc:3d:43:11:67:31:11:ee:08:
         e3:7e:42:58:cf:98:07:31:e0:d3:32:2a:3e:38:c9:c6:42:27:
         0b:82:a2:5d:ad:b4:3e:d9:ab:49:d6:91:bb:02:a3:df:f6:0c:
         df:09:92:86:ad:fa:f6:40:50:88:2c:b0:30:d8:e2:9b:b1:95:
         e0:44:35:36:09:ef:53:2a:66:c5:6d:23:6e:f6:fc:d8:80:0e:
         4d:7c:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org