Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133382e302f32342d3234203d3e203533323039.roa
File:                     3137372e31312e3133382e302f32342d3234203d3e203533323039.roa (raw, json)
Hash identifier:          xNP7zgxsrv1q/+a8I+E5FaXXININ4neR2e+qoRy2WdA=
Subject key identifier:   59:24:A9:C1:2F:A4:CC:01:10:32:B0:46:3B:8B:DE:12:2D:A0:24:2F
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       22BD8B5101E8075F2CBD40495516311555D2123F
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133382e302f32342d3234203d3e203533323039.roa
Signing time:             Tue 27 Aug 2024 12:56:22 +0000
ROA not before:           Tue 27 Aug 2024 12:51:22 +0000
ROA not after:            Tue 26 Aug 2025 12:56:22 +0000
asID:                     53209
IP address blocks:        177.11.138.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bd:8b:51:01:e8:07:5f:2c:bd:40:49:55:16:31:15:55:d2:12:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug 27 12:51:22 2024 GMT
            Not After : Aug 26 12:56:22 2025 GMT
        Subject: CN=5924A9C12FA4CC011032B0463B8BDE122DA0242F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:f3:c4:5f:a2:77:3d:4d:86:06:cb:f3:b3:
                    5a:f4:3b:fe:8a:47:48:3f:d8:6e:f3:f5:03:bd:8c:
                    32:08:ba:c6:06:97:9e:85:5f:90:21:90:9c:44:33:
                    f1:d5:1d:69:28:48:b3:13:42:a5:6e:50:95:da:ec:
                    b7:6c:c4:bd:30:ff:93:00:d5:fa:1d:cc:a1:b5:83:
                    25:98:4d:2e:1a:c3:c8:51:68:91:95:e9:b5:72:f4:
                    3d:ec:17:34:99:7c:14:48:75:17:76:ac:09:cf:2d:
                    61:ba:d3:10:75:c2:0d:42:f5:60:8b:82:b4:68:fd:
                    f7:77:d0:24:dc:fc:5b:ac:ee:8f:62:aa:a0:24:6f:
                    8a:a3:bc:72:3b:18:fe:a1:13:64:66:f7:e6:03:7b:
                    33:1a:64:09:47:fe:9b:4a:09:91:70:10:1d:58:a5:
                    26:dd:b3:2e:dd:9a:f0:09:d3:c1:77:b8:0d:3e:29:
                    6a:99:0f:c8:92:40:51:8b:eb:03:65:89:15:27:b5:
                    76:92:0a:57:59:78:1c:29:82:f5:8e:c4:61:e8:f1:
                    1c:c2:3b:d0:c4:f9:dc:2b:73:14:47:c5:37:a7:a8:
                    ac:8c:ac:a0:a3:d0:31:53:c6:7b:e8:d2:a0:c8:de:
                    80:23:2c:ba:73:82:a4:c9:e2:cc:c1:c7:71:11:ed:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:24:A9:C1:2F:A4:CC:01:10:32:B0:46:3B:8B:DE:12:2D:A0:24:2F
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133382e302f32342d3234203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:f6:8b:18:f3:64:7a:54:6a:4d:b6:06:57:d4:cb:d8:b3:ba:
         ac:57:af:99:c0:f2:4b:a2:c8:91:08:ab:87:bf:b8:05:51:ee:
         36:d3:df:75:66:98:84:ea:61:67:e7:ef:94:3e:1d:92:76:3d:
         76:6a:36:46:f5:b3:01:bb:06:7d:ae:92:81:f2:cb:19:43:bc:
         d7:87:4f:3c:40:e4:9c:70:47:46:84:22:ed:68:73:82:0b:a3:
         7a:aa:0d:da:d4:7f:02:67:15:82:79:7d:18:f8:2b:a7:d9:72:
         e1:7e:04:0f:30:52:9d:0f:3e:18:65:2e:00:12:e6:ee:67:39:
         39:ee:82:60:8e:1e:eb:87:6e:fa:9d:92:70:0e:b5:83:30:6c:
         42:b9:e0:f1:88:a5:f2:77:96:95:07:dd:89:dd:ba:32:68:69:
         f9:73:1f:f0:68:61:ae:2e:2f:45:24:cc:f1:a8:bb:61:50:93:
         3b:55:c9:9c:d9:10:e7:88:85:46:a3:95:46:1f:70:fc:8f:4e:
         ee:a1:7e:9d:84:fa:d2:64:f6:eb:fb:80:67:9b:74:0a:33:05:
         6f:97:00:c3:41:9f:1a:87:37:03:47:90:62:25:e1:98:e3:c4:
         4d:8f:2b:82:e5:01:6d:33:40:29:2d:53:fa:24:90:cd:9e:e0:
         74:c0:99:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:20:17 2024 by rpki-client on console-fra.rpki-client.org