Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133392e302f32342d3234203d3e203533323039.roa
File:                     3137372e31312e3133392e302f32342d3234203d3e203533323039.roa (raw, json)
Hash identifier:          XhAKWm/eLGFtq882imStH6/4doUDgzEe/9AUzTCgDo4=
Subject key identifier:   0B:AC:9D:31:28:E2:DC:1D:73:16:E2:92:E6:A1:3D:4D:0B:86:13:1E
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       46A732BAFCB782E53409FEA474BA65EC065441A5
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133392e302f32342d3234203d3e203533323039.roa
Signing time:             Tue 27 Aug 2024 12:56:37 +0000
ROA not before:           Tue 27 Aug 2024 12:51:37 +0000
ROA not after:            Tue 26 Aug 2025 12:56:37 +0000
asID:                     53209
IP address blocks:        177.11.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a7:32:ba:fc:b7:82:e5:34:09:fe:a4:74:ba:65:ec:06:54:41:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug 27 12:51:37 2024 GMT
            Not After : Aug 26 12:56:37 2025 GMT
        Subject: CN=0BAC9D3128E2DC1D7316E292E6A13D4D0B86131E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:6f:4b:f9:df:47:58:70:31:24:c4:a0:e1:
                    02:cd:75:d6:78:e1:fa:36:da:f4:06:9b:fb:62:1b:
                    cf:bd:38:c8:eb:fc:6a:a9:76:88:67:78:06:ea:ac:
                    2b:80:1a:20:06:00:72:5e:55:af:1b:cb:0c:85:cd:
                    cf:04:c4:d3:27:b7:d6:b4:e5:19:41:0d:3b:b7:a5:
                    1a:e8:50:15:d9:2a:9d:e9:a5:7a:d3:d0:71:cf:40:
                    a2:eb:cd:8a:dc:32:39:79:0b:db:1b:57:e7:93:f9:
                    4c:79:79:a0:5a:a6:f4:9b:44:1d:0e:ed:9d:d2:85:
                    d0:56:f3:1e:7c:4e:42:2a:92:2c:f1:98:74:ba:ec:
                    cc:48:aa:40:09:5b:a3:47:72:53:b7:0b:99:1a:96:
                    cb:ef:ce:97:1d:60:d5:03:7d:e6:f7:d3:6d:95:01:
                    66:c2:14:9f:e6:db:a0:64:62:0d:7f:8a:96:0b:6f:
                    e0:0a:b0:f9:bc:5b:1b:b5:c6:5d:43:cf:0a:15:b4:
                    88:1d:b8:97:f0:50:e8:69:0f:bc:aa:71:aa:03:a0:
                    fb:80:49:44:60:ef:85:66:fc:be:fa:8f:db:9f:33:
                    aa:4b:d9:0c:6c:1d:45:47:d3:f5:38:a7:12:38:6a:
                    51:f7:9a:88:4b:54:e5:1c:64:57:95:ad:a9:6d:34:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AC:9D:31:28:E2:DC:1D:73:16:E2:92:E6:A1:3D:4D:0B:86:13:1E
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133392e302f32342d3234203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:74:9c:0f:dd:85:1b:c8:a0:af:83:07:bc:2a:5e:7b:a1:39:
         c8:3c:33:f5:ae:43:df:80:85:f4:e8:ec:db:47:51:d5:30:26:
         9f:99:73:5e:70:96:65:e7:dd:ba:9a:96:93:d1:e6:bb:67:be:
         b4:ab:5e:b3:b7:5f:cc:ee:ca:58:ba:c5:dd:e2:64:e3:e6:3d:
         84:c5:56:27:7f:ec:cd:aa:d4:0b:e1:08:f8:01:75:ff:f3:f5:
         d0:7c:8f:36:99:94:f1:2c:96:65:a0:ec:72:3a:04:7e:40:c1:
         fd:6b:d2:fc:d2:e5:b4:84:f0:9f:54:21:a1:0a:49:69:1f:98:
         52:dd:2e:3b:85:2c:32:b7:69:80:a5:20:0f:09:61:18:0e:fe:
         a9:a7:1d:2c:1a:68:51:16:50:6e:e7:53:e9:18:38:a2:82:2b:
         be:45:64:64:7c:37:98:20:c3:62:ff:38:0e:bd:91:49:ab:00:
         0c:bf:fb:2e:7c:e8:7f:a9:a8:fc:4d:67:8e:6a:3b:da:f9:78:
         27:3a:cf:b6:79:43:45:8f:b1:9c:e5:77:98:80:db:64:35:2c:
         5e:97:55:c5:d2:13:56:5b:5e:4e:11:fd:95:29:67:06:dc:9f:
         ca:91:35:1d:57:58:5a:a4:cc:62:5d:5a:26:a9:a9:0c:bc:0a:
         bb:a4:ec:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:20:17 2024 by rpki-client on console-fra.rpki-client.org