Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134302e302f32342d3234203d3e203533323039.roa
File:                     3137372e31312e3134302e302f32342d3234203d3e203533323039.roa (raw, json)
Hash identifier:          V37375izROxHA1hNLgxyG79aralY3ABic6VzCOOFRv8=
Subject key identifier:   4D:BD:4E:B5:91:D8:81:12:37:4B:F0:AB:F0:30:9C:F3:BF:3F:0B:72
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       67FCC5BF15795A3F5E4D2E540BD59ABB11A4A741
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134302e302f32342d3234203d3e203533323039.roa
Signing time:             Tue 27 Aug 2024 12:56:57 +0000
ROA not before:           Tue 27 Aug 2024 12:51:57 +0000
ROA not after:            Tue 26 Aug 2025 12:56:57 +0000
asID:                     53209
IP address blocks:        177.11.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fc:c5:bf:15:79:5a:3f:5e:4d:2e:54:0b:d5:9a:bb:11:a4:a7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug 27 12:51:57 2024 GMT
            Not After : Aug 26 12:56:57 2025 GMT
        Subject: CN=4DBD4EB591D88112374BF0ABF0309CF3BF3F0B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:a4:75:de:28:a6:01:58:ff:29:06:94:f0:
                    8f:59:05:b3:db:3b:6e:9f:0e:e7:9e:ce:ea:44:60:
                    59:fd:03:bf:a7:38:c2:97:08:7a:ce:d9:99:21:1c:
                    7d:05:07:d4:25:15:00:f2:07:a1:7d:b3:84:d9:14:
                    a6:94:2b:ac:04:59:5d:7b:65:82:5d:c0:60:f4:1a:
                    3d:d9:82:6c:fb:9d:4e:14:e8:2b:b2:72:6f:75:ce:
                    e2:23:21:29:48:5d:0a:d3:91:11:88:58:54:d1:3b:
                    d4:e0:cb:f3:29:40:d9:8b:51:1c:5e:3b:8a:0c:13:
                    9d:20:6e:53:f8:0d:bf:72:42:37:44:71:85:a9:e1:
                    15:d0:7c:e0:34:36:d6:18:59:aa:be:37:8c:8f:1b:
                    59:d1:4c:8d:e6:30:04:9f:c8:f3:b0:42:cd:59:b7:
                    fe:9c:b9:e0:dc:06:26:bb:8d:e7:6c:50:b8:d4:44:
                    53:68:1b:3e:5a:8b:b6:d0:e2:4f:1a:3a:ab:18:81:
                    6f:c1:56:cf:85:55:07:19:92:1f:73:f2:64:85:4e:
                    a0:b2:4b:67:cc:84:b0:63:1e:4f:8b:1d:96:b6:18:
                    ce:1a:ae:55:04:7a:7e:aa:89:5d:22:87:22:36:02:
                    8d:77:78:76:ed:8d:b2:60:8f:81:e5:74:38:b0:25:
                    dc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BD:4E:B5:91:D8:81:12:37:4B:F0:AB:F0:30:9C:F3:BF:3F:0B:72
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134302e302f32342d3234203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:82:e2:3e:10:00:fa:8d:20:91:c7:08:e1:96:13:99:c0:47:
         3d:c4:7f:3e:2d:7c:db:e0:16:f0:3b:23:48:ad:8c:ed:11:0c:
         1c:70:05:6d:8c:d5:f4:e3:11:26:c6:51:28:f5:1d:9a:bf:26:
         ad:3a:67:61:ef:c4:2f:38:fe:86:3d:96:b0:c9:be:bf:af:9c:
         71:92:e3:53:8f:9a:90:95:48:b8:f1:c0:b2:d2:7a:f5:37:6f:
         16:cb:bb:bd:85:99:be:b1:c3:bd:27:38:e1:29:a0:22:79:c6:
         e8:d3:11:41:78:cd:44:bc:28:72:61:e1:fe:4d:06:9a:ed:d6:
         7d:f2:a9:18:bb:49:d5:4a:f2:58:53:19:aa:ff:55:78:9c:30:
         54:08:ff:4e:72:d4:54:a8:95:a6:19:c5:72:dd:6e:9a:c3:4c:
         54:1f:bd:01:23:ed:5d:bc:9e:12:7d:27:83:7f:4e:69:4b:29:
         72:8c:1a:74:f0:18:76:9c:93:de:53:75:20:b4:21:12:10:c8:
         3c:eb:75:52:93:62:49:b8:37:c8:e1:98:e4:e6:1d:2b:b5:c0:
         cf:62:93:80:8c:c0:63:26:09:ac:53:8f:6a:5e:20:00:ae:6d:
         70:b1:0e:ee:d5:4d:16:ca:ea:7b:5c:47:a4:ef:e4:e8:d2:6f:
         a0:0c:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:20:17 2024 by rpki-client on console-fra.rpki-client.org