Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32342d3332203d3e20323632393737.roa
File:                     3137372e3139302e39342e302f32342d3332203d3e20323632393737.roa (raw, json)
Hash identifier:          rxY0pTm5uM1OEQ+f+uW+PHinH/GQcS67dW0FeWLliBw=
Subject key identifier:   22:66:A6:7B:3A:44:90:E0:C2:53:75:49:7D:74:A0:81:27:03:37:BC
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       0681D5BD3BC9DF0A02C9F811F0B6DD70CC8D8B34
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32342d3332203d3e20323632393737.roa
Signing time:             Wed 22 May 2024 17:43:28 +0000
ROA not before:           Wed 22 May 2024 17:38:28 +0000
ROA not after:            Wed 21 May 2025 17:43:28 +0000
asID:                     262977
IP address blocks:        177.190.94.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 19:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:81:d5:bd:3b:c9:df:0a:02:c9:f8:11:f0:b6:dd:70:cc:8d:8b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: May 22 17:38:28 2024 GMT
            Not After : May 21 17:43:28 2025 GMT
        Subject: CN=2266A67B3A4490E0C25375497D74A081270337BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:db:a2:a1:14:07:5c:4c:69:39:38:d7:ae:
                    b0:4c:bd:41:2e:aa:85:8f:1e:30:d6:c7:bf:1b:6f:
                    06:d7:d9:ae:a9:8c:ec:02:00:44:0f:ad:5c:20:ac:
                    51:6d:df:0a:d8:86:f2:32:43:ef:bd:99:94:1a:e1:
                    1f:80:a3:61:0e:19:5f:3a:f7:b1:ba:31:57:ff:bd:
                    f1:7a:a3:ab:0b:63:ec:f0:f9:e7:ac:be:b5:20:5d:
                    18:27:ad:c8:d3:a4:a5:a0:e9:a9:6a:2d:cf:ca:35:
                    b3:48:5a:9a:0a:78:d2:c4:78:00:6f:4c:fd:39:4e:
                    dc:1d:43:ce:a6:5c:76:52:7e:93:73:b1:01:00:90:
                    b9:7d:81:fb:bc:41:7a:cb:63:b2:2e:21:e4:43:38:
                    37:2c:0b:7d:4d:11:09:26:24:1d:05:4d:61:4a:d8:
                    44:8c:2e:0b:74:8f:8b:ad:87:43:67:1a:07:20:7c:
                    bf:9b:6a:e9:1b:42:19:24:0e:b2:3f:10:86:c8:7a:
                    fe:9c:31:e4:b3:e1:b7:9e:71:e2:9c:9b:f5:9f:78:
                    ec:27:f1:2d:29:5c:ea:05:e9:c8:74:73:95:d0:90:
                    cf:7f:89:29:09:ea:b2:2e:47:40:2e:f8:d4:57:f5:
                    1f:8f:f5:7b:78:bf:47:35:b0:bb:a7:6d:13:fe:76:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:66:A6:7B:3A:44:90:E0:C2:53:75:49:7D:74:A0:81:27:03:37:BC
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32342d3332203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:19:40:95:bd:c4:0a:17:5f:5b:da:f5:30:d8:91:6e:97:84:
         11:97:c3:c8:34:98:3a:eb:ec:18:9a:bd:b0:26:af:6f:e4:61:
         97:cc:85:ef:f5:20:3f:34:79:01:1a:93:40:4e:4f:cd:2f:eb:
         70:9a:f8:8b:c7:c3:57:b3:1d:0f:ac:fb:b4:6b:ef:6d:f4:e0:
         48:06:f5:3f:10:e8:ab:b6:ab:0b:98:b5:76:15:14:82:fa:c5:
         8c:52:49:24:5e:a4:2c:a7:25:37:99:86:cf:25:2d:6d:3d:b5:
         47:d7:2d:c0:f3:d8:3d:7b:c1:8e:aa:bc:8b:2e:b5:99:8d:96:
         de:39:79:89:e7:c4:ee:b8:d8:0c:20:b0:9e:07:91:58:78:1f:
         bb:73:f3:f5:46:38:4b:e3:1c:91:59:5c:cf:c3:69:b0:32:05:
         16:a9:06:26:22:b8:32:12:bf:1d:df:79:a0:35:46:8f:f8:78:
         85:96:1a:fa:da:87:af:ad:84:b4:c8:e6:11:9c:e9:1a:b2:3e:
         c4:25:d2:ab:88:de:bb:1f:6a:d0:ab:1f:8e:3e:be:31:89:3f:
         91:08:ba:a2:99:0c:55:77:24:d3:c0:d4:6a:48:e1:30:b3:0d:
         72:0f:6e:c1:e3:b5:aa:d2:28:55:6f:e7:1e:17:37:d5:6c:89:
         49:d2:17:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 22:47:10 2024 by rpki-client on console-ams.rpki-client.org