Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134332e302f32342d3234203d3e203533323039.roa
File:                     3137372e31312e3134332e302f32342d3234203d3e203533323039.roa (raw, json)
Hash identifier:          hwC3eCPQW22V6qt5aaqxwTU+/zGLgCp8tZlWtG+t4cI=
Subject key identifier:   B2:CC:16:FC:E6:DC:12:7F:EC:D4:E0:47:A9:7F:B8:9A:3E:0A:96:B1
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       74A802C4D5557F693F0A0A6EDBA30BE4F334B258
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134332e302f32342d3234203d3e203533323039.roa
Signing time:             Tue 27 Aug 2024 12:58:46 +0000
ROA not before:           Tue 27 Aug 2024 12:53:46 +0000
ROA not after:            Tue 26 Aug 2025 12:58:46 +0000
asID:                     53209
IP address blocks:        177.11.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a8:02:c4:d5:55:7f:69:3f:0a:0a:6e:db:a3:0b:e4:f3:34:b2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug 27 12:53:46 2024 GMT
            Not After : Aug 26 12:58:46 2025 GMT
        Subject: CN=B2CC16FCE6DC127FECD4E047A97FB89A3E0A96B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:2b:90:5b:a8:4b:60:4d:ad:43:20:cd:b3:
                    22:1f:25:a8:20:7b:2b:a0:a6:f7:59:52:ca:79:0f:
                    ce:2e:79:86:eb:90:2a:25:9d:53:a4:85:b5:6d:0c:
                    bf:5b:f9:62:a4:58:8e:93:5b:81:49:5a:1c:2b:08:
                    6f:cb:34:cd:97:24:68:55:93:25:ab:2e:8a:75:d1:
                    1e:31:b0:bb:4b:6c:ef:7d:fc:89:df:96:03:ee:9a:
                    a4:17:6d:42:0f:1f:02:15:c6:a8:bc:36:56:6b:0f:
                    b0:60:2d:54:ae:48:c5:91:de:da:5f:d1:7d:2c:78:
                    ca:65:49:d6:ea:57:0f:0d:a1:9b:48:43:22:86:bf:
                    12:89:f6:4c:84:21:bb:f9:52:b8:40:4d:c7:a2:29:
                    3c:72:43:62:d9:e6:bc:29:80:42:41:ee:17:f6:35:
                    bf:b9:b2:b5:3d:97:dd:d5:bb:b7:4d:fc:30:34:55:
                    7d:5e:34:c8:a7:e4:40:5c:8e:a1:92:1d:f1:e1:99:
                    d4:20:06:a9:6d:56:1f:38:67:eb:4c:06:08:50:0b:
                    b9:ad:8f:79:f9:f2:e6:33:62:7f:e0:27:1d:61:94:
                    39:91:25:fd:4d:66:d4:b3:cc:a3:5e:39:a8:d3:06:
                    90:b2:29:9c:86:e6:cb:58:48:73:8e:2a:e3:cb:fa:
                    b0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CC:16:FC:E6:DC:12:7F:EC:D4:E0:47:A9:7F:B8:9A:3E:0A:96:B1
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134332e302f32342d3234203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:7a:cc:61:f9:40:77:ea:46:3b:21:0a:1a:17:0e:14:b9:c5:
         34:9d:b9:0b:3c:af:2b:a2:db:84:ce:7a:28:57:be:6a:d6:ae:
         11:fa:bd:04:c3:a0:bd:12:4c:b4:8d:11:8f:76:c2:65:2e:65:
         fb:d1:46:bc:98:18:7e:c3:f9:69:1d:70:7c:c7:4d:ec:54:ea:
         6f:7f:11:29:f8:d5:46:3c:ac:84:22:63:6e:dd:23:1a:68:62:
         72:16:c7:0b:04:cc:46:9c:e3:5e:bb:64:90:a8:a3:f8:e2:7a:
         84:2a:8b:07:ca:74:dd:05:8a:c6:aa:89:be:56:39:db:a0:eb:
         04:37:43:2f:b1:42:05:2d:d2:f6:b3:20:2e:6e:03:59:35:47:
         15:cd:23:99:94:0b:c1:26:7c:1f:3f:d4:e2:83:ba:9b:bc:b3:
         38:c7:54:13:5a:f5:77:2f:d8:92:e8:47:bd:19:3c:28:90:c4:
         d4:51:82:d1:af:9a:c1:c8:a8:aa:0d:7b:d7:ac:5b:c4:45:cf:
         b9:54:55:2f:9d:5e:e4:b8:2d:04:04:29:dc:63:f6:06:22:e0:
         d0:d4:c5:6a:89:b0:7a:df:cc:f6:28:d4:43:a3:7b:ff:98:9c:
         65:c0:94:2f:c2:81:cc:db:1e:3e:69:71:f0:0f:6a:5f:be:66:
         37:2c:ab:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:57 2024 by rpki-client on console-ams.rpki-client.org