Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32342d3234203d3e203533323039.roa
File:                     3137372e31312e3133362e302f32342d3234203d3e203533323039.roa (raw, json)
Hash identifier:          fp9+OCxcLWVRgRkiWfOdudwUl7d5ca/v+lKwkYVZ7mU=
Subject key identifier:   17:8E:52:D5:C7:5B:B9:86:CF:C5:05:42:0C:DC:88:19:8B:9B:1F:90
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       1352195BFCE9CDF16A00985138D62E406EED5547
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32342d3234203d3e203533323039.roa
Signing time:             Tue 27 Aug 2024 12:55:41 +0000
ROA not before:           Tue 27 Aug 2024 12:50:41 +0000
ROA not after:            Tue 26 Aug 2025 12:55:41 +0000
asID:                     53209
IP address blocks:        177.11.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:52:19:5b:fc:e9:cd:f1:6a:00:98:51:38:d6:2e:40:6e:ed:55:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug 27 12:50:41 2024 GMT
            Not After : Aug 26 12:55:41 2025 GMT
        Subject: CN=178E52D5C75BB986CFC505420CDC88198B9B1F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:84:8a:81:33:19:35:f6:9d:1d:89:af:f4:
                    85:f7:88:8e:01:bf:55:c5:4f:92:b7:48:c9:d7:99:
                    c6:86:69:d8:99:33:ac:5a:1d:44:21:96:97:6c:8f:
                    dd:f9:cd:61:aa:e1:27:a1:c6:69:8d:2f:78:48:9e:
                    7b:a2:35:d1:64:e8:fb:16:97:e1:7b:ff:54:b2:d2:
                    6f:5e:fb:09:38:49:83:37:54:23:1e:df:09:f7:45:
                    4e:c3:9a:76:71:1f:6a:e5:e0:ef:73:02:93:cf:09:
                    11:cc:39:e0:33:2c:9a:a7:e2:2b:e9:2f:2b:24:32:
                    4d:bc:bf:7f:44:1b:3a:7d:16:78:a9:c7:43:d8:01:
                    6f:70:0a:4a:35:4a:3a:13:28:62:23:e9:85:0f:3e:
                    53:fd:a3:b8:bf:2c:55:4b:ac:81:73:5a:51:7e:2e:
                    f1:3b:b9:85:b6:7a:69:96:e9:12:01:73:1f:9e:3b:
                    54:d2:52:62:88:6b:9f:df:09:3a:56:ed:2d:7c:50:
                    16:c4:0d:7e:6a:20:c6:98:ff:f2:59:40:a6:9a:c4:
                    8a:d9:25:74:c7:e2:ba:96:a5:12:23:5e:4c:e2:a2:
                    e6:f5:92:1a:53:36:0f:57:dc:aa:62:b1:3a:75:8b:
                    a3:88:19:da:f5:c1:81:50:24:95:75:09:50:7c:95:
                    2e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8E:52:D5:C7:5B:B9:86:CF:C5:05:42:0C:DC:88:19:8B:9B:1F:90
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32342d3234203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e9:c3:0c:c6:d8:5b:95:dd:90:e5:fe:b2:1e:c4:47:e4:e2:
         d5:e1:17:d7:e1:86:3c:29:47:d6:5d:63:4f:7d:3b:6f:06:d1:
         cd:91:6c:c4:e8:5d:be:31:c8:d6:e1:a6:32:6d:34:26:eb:0f:
         19:4e:ec:f7:d3:ca:b1:7f:95:31:f4:ec:76:34:81:2f:1f:bf:
         4a:64:77:45:7f:c0:7f:04:c0:80:26:87:26:3e:80:ff:52:34:
         99:09:52:4f:00:e4:d5:d7:da:7f:9d:f6:0d:0f:88:5b:60:27:
         72:84:df:c9:d7:7b:09:95:c4:05:e9:cf:45:ff:66:98:87:3e:
         3b:d6:ee:7a:41:db:0e:0a:f8:d6:fa:22:da:10:e8:67:f1:e8:
         0e:4d:c6:24:22:6b:98:68:5d:9e:be:9f:fd:d3:56:a8:0d:2e:
         19:29:1f:fc:96:73:f7:9c:35:eb:b0:b6:99:75:57:35:65:de:
         f5:d1:1e:4d:0e:e7:48:a1:e6:f6:be:d4:36:be:76:cc:49:d6:
         02:50:49:4f:5b:5f:08:d7:1d:a9:ba:3f:79:1e:0e:2b:43:d4:
         51:ec:f7:5e:8a:66:35:85:ba:e7:97:23:c4:3b:c0:5a:f1:bd:
         58:a7:8b:d9:32:c2:c9:dc:42:68:cc:48:41:68:6e:7b:f9:d7:
         9c:27:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:57 2024 by rpki-client on console-ams.rpki-client.org