Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230322e302f32332d3233203d3e203532353837.roa
File:                     3137372e38372e3230322e302f32332d3233203d3e203532353837.roa (raw, json)
Hash identifier:          CMmv1krIc5yH7VUOVmhM+SSDwbiJCubpO4Lvp7/fv4s=
Subject key identifier:   F2:5E:CC:0A:3F:8E:DE:1D:4A:3F:55:FF:A3:00:14:DB:A1:35:DE:63
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       167B6CB3B7E49BE7DA4FDBBE3F69B98000F2FCA5
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230322e302f32332d3233203d3e203532353837.roa
Signing time:             Wed 03 Apr 2024 18:50:45 +0000
ROA not before:           Wed 03 Apr 2024 18:45:45 +0000
ROA not after:            Wed 02 Apr 2025 18:50:45 +0000
asID:                     52587
IP address blocks:        177.87.202.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 24 May 2024 18:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7b:6c:b3:b7:e4:9b:e7:da:4f:db:be:3f:69:b9:80:00:f2:fc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Apr  3 18:45:45 2024 GMT
            Not After : Apr  2 18:50:45 2025 GMT
        Subject: CN=F25ECC0A3F8EDE1D4A3F55FFA30014DBA135DE63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:56:84:a8:91:d6:5e:0a:d3:35:ad:60:1e:09:
                    6e:11:7c:ba:d7:cd:ed:ad:41:99:93:47:1a:63:a5:
                    7c:29:61:0c:73:04:a9:9e:7c:8e:9c:85:41:d2:fb:
                    f3:66:99:69:e4:b3:3c:0e:eb:0d:59:16:1c:eb:5c:
                    92:7e:9b:bf:db:b0:df:ed:5c:92:05:c4:38:87:01:
                    91:ed:a3:7c:94:17:e5:34:00:4d:99:47:46:5e:2c:
                    59:97:a8:9e:f7:6d:35:71:2f:2c:e2:c0:fc:10:31:
                    ed:c2:04:48:ed:d4:a3:0f:dd:80:5f:b4:ac:a7:ca:
                    1b:3d:eb:c4:b5:2f:8c:d5:a4:68:a0:b8:2f:ad:d7:
                    20:86:50:d5:b0:65:16:67:16:fa:22:28:0d:da:9d:
                    4a:58:a5:30:45:f0:59:24:7f:ed:a5:2c:e3:e8:b2:
                    c5:d5:c6:a5:38:26:b7:76:ec:91:ef:3c:23:eb:9a:
                    93:c8:e1:6c:a5:5d:e8:4b:fc:0b:d4:a8:45:e5:ed:
                    ef:9c:3f:73:73:ce:e6:ce:97:53:11:89:33:72:6e:
                    38:d3:3f:05:cc:07:ac:51:07:d6:c0:d9:ad:5b:b9:
                    f4:83:f4:82:c5:c5:b5:ab:ba:d8:23:df:b0:77:aa:
                    3f:4f:9c:f6:ac:f4:74:ed:38:15:33:55:ff:aa:4e:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5E:CC:0A:3F:8E:DE:1D:4A:3F:55:FF:A3:00:14:DB:A1:35:DE:63
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230322e302f32332d3233203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:e7:b0:34:35:a9:bf:aa:a7:2a:26:0b:8d:58:cd:76:2d:2a:
         19:73:dd:9b:2f:8d:29:0c:93:a8:51:20:7b:97:01:10:6d:c2:
         ca:1c:be:42:1a:76:f3:a9:a8:29:da:e7:cd:41:ea:65:35:8b:
         1c:bf:43:8a:b6:98:c9:66:a2:96:30:e0:31:4b:f7:79:dd:a7:
         66:cd:b7:02:45:8a:5e:4d:07:16:11:87:c5:54:75:65:28:74:
         03:4b:b8:cd:1b:e3:9e:81:80:16:3d:88:fb:cc:19:f3:97:68:
         cf:a6:b0:65:1d:76:d6:c2:4c:1c:d7:76:3a:50:3e:69:d4:ee:
         7c:cf:59:4f:f6:4d:32:62:b5:f3:ca:3b:9c:96:ba:5b:46:78:
         94:6a:70:cc:d7:82:fe:39:98:14:a0:02:cb:d5:17:59:b1:4d:
         f9:be:3c:af:2a:81:70:c9:e8:62:02:4b:a4:3f:2c:b5:89:8f:
         e1:2b:e1:df:64:cf:70:bb:50:bc:73:90:33:ef:1d:d8:e3:66:
         7a:1f:e7:67:e5:8b:a6:7c:e1:dd:f0:6b:38:53:64:b1:42:03:
         a9:1f:f6:48:15:a1:6e:d9:ea:d4:36:a5:06:1e:48:14:50:bf:
         d0:e1:37:bc:89:4d:4e:97:5d:2b:97:b8:93:47:7f:42:01:92:
         09:2a:4d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org