Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132352e302f32342d3234203d3e203237373135.roa
File:                     3137372e36372e3132352e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          iCNQ/2rIImjdANvhf4cnY8grpAOCR2qvFxvgHWvJB+M=
Subject key identifier:   5C:12:F6:87:7F:28:59:F2:08:DF:75:D8:55:0A:34:8C:77:36:71:E4
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       051AC0A6D47F8A36EC029A1B76CC46E9A18EE4A6
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132352e302f32342d3234203d3e203237373135.roa
Signing time:             Wed 08 Nov 2023 17:22:29 +0000
ROA not before:           Wed 08 Nov 2023 17:17:29 +0000
ROA not after:            Wed 06 Nov 2024 17:22:29 +0000
asID:                     27715
IP address blocks:        177.67.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 12:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1a:c0:a6:d4:7f:8a:36:ec:02:9a:1b:76:cc:46:e9:a1:8e:e4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Nov  8 17:17:29 2023 GMT
            Not After : Nov  6 17:22:29 2024 GMT
        Subject: CN=5C12F6877F2859F208DF75D8550A348C773671E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:78:93:69:cc:f2:5e:d9:ce:07:02:00:2e:41:
                    b8:f4:cb:27:07:e8:de:40:b1:d2:52:b1:2a:91:e9:
                    3b:92:37:1e:d9:17:37:9c:9c:12:21:40:b0:b3:cb:
                    2d:58:b8:a2:8e:ed:8c:8b:c1:e1:e1:de:e1:19:89:
                    28:b8:37:89:06:4f:43:d0:76:82:af:19:f6:86:f3:
                    ca:4c:8d:c6:a5:20:5a:c4:e7:0f:19:5d:72:ae:7b:
                    86:c5:11:43:b0:6f:49:f4:ba:a1:b9:9a:21:11:78:
                    51:50:fb:b2:e3:f8:eb:42:79:45:6f:ee:47:98:5d:
                    37:e6:71:d6:fd:52:c4:8b:9c:d4:d4:dc:aa:c9:31:
                    dd:4a:98:c3:95:22:3b:fb:16:00:1f:13:0a:9e:22:
                    84:d5:04:67:15:b9:dd:90:30:22:27:40:f9:30:7d:
                    54:e4:11:2c:1d:51:41:a2:2c:34:62:9f:0a:5c:d8:
                    44:00:82:17:97:25:62:73:d6:75:1a:f0:2d:cc:e0:
                    3b:66:fe:d7:0e:23:4a:08:93:78:90:e9:55:5d:3e:
                    db:79:50:c1:f9:90:4f:12:66:da:74:3d:dc:4d:be:
                    9b:b9:3e:42:d8:19:08:23:2d:66:ca:47:c0:d5:1d:
                    7a:05:45:a6:7b:5c:99:1c:1a:de:45:82:d5:4d:fa:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:12:F6:87:7F:28:59:F2:08:DF:75:D8:55:0A:34:8C:77:36:71:E4
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132352e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:ae:4e:e7:52:be:f1:63:1f:9b:de:60:1e:76:ab:ef:95:03:
         d8:d4:60:ea:1f:65:7c:30:73:16:13:9e:d7:2a:63:63:bb:f3:
         33:26:e3:46:01:3f:d1:47:40:fe:ad:76:35:61:21:48:8a:68:
         38:79:e3:5d:6f:c6:5d:bc:24:e7:08:36:d2:cf:a0:96:83:8e:
         3d:8c:52:ce:07:67:ea:f3:5b:67:ed:98:29:cb:ba:0a:97:7b:
         c3:21:9d:9f:72:9b:14:12:33:31:7b:98:c0:e5:1d:df:e8:66:
         67:8a:d9:6a:6b:33:d0:99:80:97:32:ff:00:7f:9f:2a:57:4e:
         42:37:f1:0f:c9:b3:54:e7:54:54:65:a5:67:86:87:e1:c3:be:
         29:27:97:87:98:a9:aa:a2:8a:fa:2b:47:e5:8b:03:1b:84:f2:
         d2:04:56:db:ec:6f:ae:28:0c:a1:c1:1c:9c:98:2b:c3:e4:8d:
         86:06:92:ba:ee:10:99:04:60:50:69:2b:64:0e:a0:4d:28:f3:
         8f:64:8e:2d:54:5a:0b:8e:85:7f:e7:2f:b2:28:45:94:ab:48:
         50:d9:13:82:81:0a:f8:a8:d4:ed:d1:07:76:5b:46:6a:29:f3:
         a5:14:83:9b:bd:70:3d:7a:ab:ea:24:ba:a5:52:a0:7c:dd:98:
         0f:45:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 16:15:07 2024 by rpki-client on console-ams.rpki-client.org