Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134322e302f32342d3234203d3e203533323039.roa
File:                     3137372e31312e3134322e302f32342d3234203d3e203533323039.roa (raw, json)
Hash identifier:          AeojJ7l+7Gmi5rU/tiHWzE0UwzNIwnXyHkACKKAEbQE=
Subject key identifier:   FE:20:FE:C5:AC:DD:EE:70:B6:04:3E:22:89:C7:71:74:40:B3:9A:EB
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       29254217DD4A94B6B6DE3086AE8FBB70F7AAA21A
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134322e302f32342d3234203d3e203533323039.roa
Signing time:             Tue 27 Aug 2024 12:58:33 +0000
ROA not before:           Tue 27 Aug 2024 12:53:33 +0000
ROA not after:            Tue 26 Aug 2025 12:58:33 +0000
asID:                     53209
IP address blocks:        177.11.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:25:42:17:dd:4a:94:b6:b6:de:30:86:ae:8f:bb:70:f7:aa:a2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug 27 12:53:33 2024 GMT
            Not After : Aug 26 12:58:33 2025 GMT
        Subject: CN=FE20FEC5ACDDEE70B6043E2289C7717440B39AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:19:dd:59:8f:43:53:47:59:1c:d5:c5:6b:
                    b5:11:f7:9b:13:47:9d:f7:ad:2f:31:2f:df:37:f5:
                    4a:83:88:f0:d3:77:25:7a:db:34:38:a0:19:30:0a:
                    ed:27:d4:19:05:af:1b:3e:1b:26:5f:95:7f:1d:b4:
                    70:8a:22:a4:7f:53:71:f5:10:41:0a:e0:aa:38:6e:
                    77:a7:87:a4:c9:31:a1:af:35:aa:10:fb:3f:e0:08:
                    e9:f4:4c:23:fa:5a:86:2d:c8:53:87:46:94:a3:e9:
                    df:fe:dc:3e:1f:34:64:00:b0:44:ba:dc:c4:b4:90:
                    de:1a:a4:f3:4d:26:d3:a8:88:b4:aa:c4:ee:03:be:
                    00:26:17:a8:e2:2c:e8:b6:c2:2e:e0:f7:d8:aa:6c:
                    3d:df:a7:85:7f:2d:89:0f:f3:b9:72:a6:68:23:7d:
                    ed:b9:f6:7d:69:11:87:99:84:bc:6c:b6:55:19:74:
                    73:a7:3e:68:b7:4f:70:27:89:a1:40:87:87:37:d2:
                    a5:ed:d7:1c:e1:46:de:b2:36:44:03:e0:be:61:98:
                    89:d9:ca:f0:b6:4e:11:d4:52:27:ab:20:10:3b:c8:
                    b6:3e:51:4d:27:34:90:fc:57:0e:46:49:53:0c:d8:
                    27:95:8c:22:5d:4b:98:d9:72:08:ca:10:c9:34:95:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:20:FE:C5:AC:DD:EE:70:B6:04:3E:22:89:C7:71:74:40:B3:9A:EB
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134322e302f32342d3234203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f5:6d:fd:6d:69:1f:8b:3f:91:af:c6:e9:e0:e9:43:f1:ae:
         4b:31:7c:b5:b3:4b:bf:67:0c:a8:73:38:14:e8:dd:ad:85:10:
         7f:e8:9f:b5:a8:4b:fd:d1:3e:94:e1:8a:81:3a:dd:7b:ea:c3:
         75:6f:46:3e:62:d1:bc:ac:97:fd:b4:e8:25:0c:82:09:2e:b1:
         26:2b:1c:8c:9b:cc:0f:bc:79:06:e6:fd:33:ec:bb:3a:15:c2:
         89:d1:94:91:09:95:f0:a6:32:ea:eb:3d:b2:c5:e6:1b:dc:86:
         67:52:a4:a9:a4:ed:ea:d0:b0:a8:f1:7a:68:00:2a:da:35:dd:
         7b:c7:dc:8b:bb:ba:f9:85:05:96:e2:7b:a7:4d:41:c3:43:ef:
         7b:52:ce:8a:50:05:d7:89:ce:bd:14:ca:e7:6d:80:3e:d2:a5:
         4b:ee:4c:e2:c1:eb:5e:9e:ee:2e:cc:34:85:0c:12:32:af:95:
         8e:a1:85:80:c1:47:92:ef:43:37:ca:88:d5:e1:8f:ed:17:d3:
         96:99:47:8b:c7:e2:e4:6f:8e:b6:4a:27:3f:2a:cd:3a:a0:5e:
         80:14:df:32:90:5c:e4:46:e7:50:4c:62:10:09:27:ec:d2:d4:
         ec:1e:cb:88:ec:4c:dc:86:8c:42:71:7f:dc:df:b3:95:9a:f7:
         c3:cf:18:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:57 2024 by rpki-client on console-ams.rpki-client.org