Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134312e302f32342d3234203d3e203533323039.roa
File:                     3137372e31312e3134312e302f32342d3234203d3e203533323039.roa (raw, json)
Hash identifier:          lADzL0gkF9PJ6vg+Z0uj7s7dgwxr9aMRLcaR2yLP1aM=
Subject key identifier:   FB:7C:5A:2D:18:36:BF:24:82:88:B0:C7:8F:9A:5C:27:C9:49:0C:18
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       4A849DD9EC32FF0A0CC0872706FB1B71D43F9D0A
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134312e302f32342d3234203d3e203533323039.roa
Signing time:             Tue 27 Aug 2024 12:58:21 +0000
ROA not before:           Tue 27 Aug 2024 12:53:21 +0000
ROA not after:            Tue 26 Aug 2025 12:58:21 +0000
asID:                     53209
IP address blocks:        177.11.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:84:9d:d9:ec:32:ff:0a:0c:c0:87:27:06:fb:1b:71:d4:3f:9d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug 27 12:53:21 2024 GMT
            Not After : Aug 26 12:58:21 2025 GMT
        Subject: CN=FB7C5A2D1836BF248288B0C78F9A5C27C9490C18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:17:8d:ff:42:66:48:70:04:f7:82:b2:b8:
                    05:90:4f:c1:25:6a:a3:f7:9b:fe:71:63:b2:80:02:
                    ed:f2:b9:48:7c:2f:a3:70:b1:36:06:4b:c5:b3:e6:
                    a9:92:6c:39:d5:56:49:0b:13:10:08:9c:4b:bf:8d:
                    50:20:91:c5:1a:36:5b:a6:30:fc:b9:da:4a:2c:40:
                    8a:72:da:64:b5:04:83:94:3e:65:09:87:36:cd:43:
                    47:19:03:40:50:70:07:0e:3a:0a:d5:22:21:19:9f:
                    ad:44:8c:b6:b0:6a:0b:78:94:2f:56:6b:69:5a:ca:
                    04:e9:68:96:75:f7:b7:98:91:82:be:d1:29:11:1d:
                    11:86:eb:5b:1a:17:34:c8:f6:16:65:3d:cf:c3:c3:
                    55:f0:1b:dd:c5:83:00:01:21:6f:e3:b3:be:05:81:
                    1b:0d:08:9f:31:e4:52:23:b0:6a:cd:a9:48:80:1a:
                    ae:67:14:1c:12:7a:82:ff:fe:62:91:c8:66:74:0a:
                    5a:ce:79:bc:9d:02:fe:aa:0c:c1:d4:ab:ef:30:94:
                    2a:b6:b5:45:cc:e7:b5:0c:f0:a7:12:ce:53:70:c0:
                    6d:32:5d:54:10:ce:5f:06:1c:77:67:7d:fd:ae:cc:
                    32:00:0b:54:03:81:f9:9d:cd:a5:16:1b:6c:83:b6:
                    cc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7C:5A:2D:18:36:BF:24:82:88:B0:C7:8F:9A:5C:27:C9:49:0C:18
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134312e302f32342d3234203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:ed:d6:80:27:42:2a:c1:f1:62:4c:ec:08:36:08:56:0c:
         2a:d8:87:54:27:78:e2:3c:d7:3c:f4:c8:db:34:10:23:b6:0f:
         f3:69:58:04:56:17:62:12:a8:79:7e:50:aa:d4:2c:44:15:af:
         7a:0b:c0:32:ef:b5:6e:fd:91:26:76:55:7a:17:3a:7f:b7:d1:
         7c:f1:4c:49:5e:21:59:af:0e:92:16:d9:3c:23:37:71:57:e5:
         3d:bf:fa:8b:f7:06:82:f2:26:eb:53:0b:e1:b1:17:31:bd:eb:
         ad:0b:58:47:2c:45:86:15:7b:66:64:36:25:0e:77:f6:93:f7:
         0a:57:c4:7e:3f:f4:70:89:22:f3:5b:53:ac:6b:08:0e:2a:0f:
         82:df:5e:c1:3c:b1:47:5f:fd:2a:14:69:2c:a1:7d:57:91:0b:
         b9:a2:a9:a5:61:fd:99:96:87:a4:1f:d1:ce:a1:fa:e4:8f:53:
         e2:71:49:91:b1:d9:c3:5d:db:15:f3:ee:dd:82:bc:86:0f:a8:
         31:b9:65:90:3b:b7:48:71:49:68:94:61:50:3e:f8:f3:48:48:
         5f:b8:1b:36:c8:ad:a5:49:0d:42:67:43:a5:e1:66:78:10:d6:
         37:e4:09:ec:91:74:dc:14:0b:80:88:8f:72:b3:dc:7d:31:46:
         af:8c:22:d9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSoSd2ewy/woMwIcnBvsbcdQ/nQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJEMjAxMEIyMDhBREEzMDNFODRBREE5MjE0NUJEMjFB
MEJCMTgyMjAeFw0yNDA4MjcxMjUzMjFaFw0yNTA4MjYxMjU4MjFaMDMxMTAvBgNV
BAMTKEZCN0M1QTJEMTgzNkJGMjQ4Mjg4QjBDNzhGOUE1QzI3Qzk0OTBDMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/aBeN/0JmSHAE94KyuAWQT8El
aqP3m/5xY7KAAu3yuUh8L6NwsTYGS8Wz5qmSbDnVVkkLExAInEu/jVAgkcUaNlum
MPy52kosQIpy2mS1BIOUPmUJhzbNQ0cZA0BQcAcOOgrVIiEZn61EjLawagt4lC9W
a2laygTpaJZ197eYkYK+0SkRHRGG61saFzTI9hZlPc/Dw1XwG93FgwABIW/js74F
gRsNCJ8x5FIjsGrNqUiAGq5nFBwSeoL//mKRyGZ0ClrOebydAv6qDMHUq+8wlCq2
tUXM57UM8KcSzlNwwG0yXVQQzl8GHHdnff2uzDIAC1QDgfmdzaUWG2yDtsyNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+3xaLRg2vySCiLDHj5pcJ8lJDBgwHwYDVR0j
BBgwFoAUstIBCyCK2jA+hK2pIUW9IaC7GCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWtialZSWFZwWHZFWDExVXRSSG9CSlFqcDV0dWtCb05zbmg4enh1ZzZn
WUIvMC9CMkQyMDEwQjIwOEFEQTMwM0U4NEFEQTkyMTQ1QkQyMUEwQkIxODIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyRDIwMTBCMjA4QURBMzAz
RTg0QURBOTIxNDVCRDIxQTBCQjE4MjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FrYmpWUlhWcFh2RVgxMVV0UkhvQkpRanA1dHVrQm9Oc25oOHp4dWc2Z1lCLzAv
MzEzNzM3MmUzMTMxMmUzMTM0MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzIzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQuNMA0GCSqGSIb3DQEBCwUAA4IBAQAI5O3WgCdC
KsHxYkzsCDYIVgwq2IdUJ3jiPNc89MjbNBAjtg/zaVgEVhdiEqh5flCq1CxEFa96
C8Ay77Vu/ZEmdlV6Fzp/t9F88UxJXiFZrw6SFtk8IzdxV+U9v/qL9waC8ibrUwvh
sRcxveutC1hHLEWGFXtmZDYlDnf2k/cKV8R+P/RwiSLzW1OsawgOKg+C317BPLFH
X/0qFGksoX1XkQu5oqmlYf2ZloekH9HOofrkj1PicUmRsdnDXdsV8+7dgryGD6gx
uWWQO7dIcUlolGFQPvjzSEhfuBs2yK2lSQ1CZ0Ol4WZ4ENY35AnskXTcFAuAiI9y
s9x9MUavjCLZ
-----END CERTIFICATE-----
Generated at Fri Nov 1 16:20:17 2024 by rpki-client on console-fra.rpki-client.org