Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133372e302f32342d3234203d3e203533323039.roa
File:                     3137372e31312e3133372e302f32342d3234203d3e203533323039.roa (raw, json)
Hash identifier:          E1FVz5VKykjo53A9ZHoOrTCWmzZAa4fsaHk27sdaYBA=
Subject key identifier:   68:35:78:6F:6E:D2:37:33:81:59:E2:E1:12:C9:3E:D7:8B:F4:48:36
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       601E1FF36EA2D8A49B73568A7961E94C25558033
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133372e302f32342d3234203d3e203533323039.roa
Signing time:             Tue 27 Aug 2024 12:56:04 +0000
ROA not before:           Tue 27 Aug 2024 12:51:04 +0000
ROA not after:            Tue 26 Aug 2025 12:56:04 +0000
asID:                     53209
IP address blocks:        177.11.137.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1e:1f:f3:6e:a2:d8:a4:9b:73:56:8a:79:61:e9:4c:25:55:80:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug 27 12:51:04 2024 GMT
            Not After : Aug 26 12:56:04 2025 GMT
        Subject: CN=6835786F6ED237338159E2E112C93ED78BF44836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a5:98:39:47:db:71:31:46:c2:3f:72:3d:6d:
                    d2:19:e9:71:83:36:44:5c:5d:db:2b:8e:28:09:14:
                    b1:1b:16:90:4f:92:e5:00:fd:47:f9:0d:ee:2d:6b:
                    93:d6:06:c2:0a:fa:a2:eb:fc:13:e5:bf:f5:f0:7d:
                    37:00:01:4b:29:3f:17:1d:a9:64:5d:ff:ef:82:fd:
                    ac:9f:8a:af:a6:b7:86:e4:29:47:dd:e0:27:37:eb:
                    2c:eb:65:7f:e7:ff:77:a6:aa:08:a7:d5:bc:50:2a:
                    97:af:57:4b:e9:1b:7a:a8:dd:17:d6:e6:83:65:a8:
                    44:f9:ec:d2:4e:ee:44:de:91:81:c9:92:a2:a0:04:
                    4e:02:ba:66:58:25:6b:a2:d6:3e:7f:b1:84:ab:f9:
                    ad:5b:64:84:26:3d:b2:7c:a7:f3:57:d0:dd:b6:59:
                    53:52:33:e0:25:8e:cb:ea:06:2d:26:c4:b5:01:6f:
                    8b:e4:52:43:83:c7:3b:51:1c:f2:41:da:7b:8a:ed:
                    93:b4:67:c7:bf:a2:bc:5f:2e:08:25:8e:ad:86:58:
                    b0:6c:fc:e3:fa:67:b3:8f:d3:c6:bc:98:b1:6b:3f:
                    41:25:f1:9d:ef:56:ed:0e:f9:22:1f:f3:17:74:79:
                    a5:e9:67:3e:05:95:48:10:bc:33:13:8d:c2:89:b7:
                    bd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:35:78:6F:6E:D2:37:33:81:59:E2:E1:12:C9:3E:D7:8B:F4:48:36
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133372e302f32342d3234203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:3f:46:44:50:8f:73:e6:08:7a:65:1a:d0:50:f3:32:e1:be:
         62:95:6e:dd:93:ec:d3:a7:fd:b5:9f:3f:d3:28:8d:bc:84:20:
         b9:d9:63:cc:ad:58:b5:77:cb:f0:09:b8:26:b4:95:ac:02:03:
         09:92:79:c3:7e:5d:77:90:fc:57:5c:a9:8d:94:3f:e1:71:6e:
         81:c1:ec:80:d1:94:94:2f:02:f7:e6:be:c6:c2:a1:24:96:d9:
         52:7c:59:3d:7b:0d:97:0f:0b:d3:ae:00:5f:c2:ab:16:56:fb:
         b4:2b:b5:e1:bf:1e:58:56:b2:7e:3f:69:d7:8c:64:bd:ae:88:
         54:bb:fd:fe:ab:60:2d:7a:31:77:71:4c:df:6a:a4:c5:45:b3:
         0d:54:4a:7e:9c:4a:73:9e:f0:c6:8d:5f:12:b4:d8:a9:c4:b2:
         c9:42:9b:90:92:68:ff:9a:e7:1f:04:50:b4:6e:e9:d2:6a:f9:
         2e:e0:fe:b5:67:ad:b2:3f:cd:08:fd:9a:ae:e4:e8:a0:52:ee:
         88:d7:95:4b:fe:3f:1c:bd:3a:85:35:20:6c:f8:32:ac:95:4e:
         f7:04:5b:72:05:d3:3a:7e:e7:71:1c:05:c2:52:44:ca:8f:3f:
         3a:cd:e8:f0:8f:05:b8:09:c8:f0:10:5d:45:b6:9e:fa:46:f8:
         27:08:d0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:57 2024 by rpki-client on console-ams.rpki-client.org