Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/3137372e36362e3135362e302f32332d3233203d3e203532363532.roa
File:                     3137372e36362e3135362e302f32332d3233203d3e203532363532.roa (raw, json)
Hash identifier:          9l53CvPXPROlLkeCoMgcEbZcH7+RSaQiBjrDIo8TEsc=
Subject key identifier:   8E:D8:1A:30:36:18:FE:F1:CE:EA:BD:83:2C:0E:76:AC:75:79:8C:0E
Certificate issuer:       /CN=6C15DB2FEE5E171C04E748A2B002640082E651E8
Certificate serial:       0CAB1A307C37C1C1C4CC56850EDDC997AB4F7830
Authority key identifier: 6C:15:DB:2F:EE:5E:17:1C:04:E7:48:A2:B0:02:64:00:82:E6:51:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C15DB2FEE5E171C04E748A2B002640082E651E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/3137372e36362e3135362e302f32332d3233203d3e203532363532.roa
Signing time:             Tue 23 Apr 2024 21:09:49 +0000
ROA not before:           Tue 23 Apr 2024 21:04:49 +0000
ROA not after:            Tue 22 Apr 2025 21:09:49 +0000
asID:                     52652
IP address blocks:        177.66.156.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 22 May 2024 17:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ab:1a:30:7c:37:c1:c1:c4:cc:56:85:0e:dd:c9:97:ab:4f:78:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C15DB2FEE5E171C04E748A2B002640082E651E8
        Validity
            Not Before: Apr 23 21:04:49 2024 GMT
            Not After : Apr 22 21:09:49 2025 GMT
        Subject: CN=8ED81A303618FEF1CEEABD832C0E76AC75798C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d4:67:46:dc:18:26:79:0d:57:7f:30:08:97:
                    42:e3:b4:01:aa:d3:28:61:0e:a6:af:8c:3d:a6:68:
                    f3:81:18:fd:a0:8f:8e:97:d3:d9:51:eb:17:0f:c1:
                    d0:ed:8b:c1:4c:55:12:5b:16:67:8c:b0:c8:c6:33:
                    64:9f:48:ac:c5:ca:09:f8:1b:a9:fe:ff:cb:e7:20:
                    45:3b:9a:cc:ee:8e:b6:eb:03:6f:95:b5:07:bf:e3:
                    be:f2:da:d5:19:ba:8a:7a:32:67:5f:59:9d:35:1c:
                    4e:fc:92:ff:19:73:92:de:9f:51:cc:6d:e7:cb:58:
                    96:4c:fd:19:14:cf:c5:e7:5b:0e:27:e4:73:2e:3e:
                    c4:a4:cb:63:6c:ba:1e:b3:74:96:13:7a:bf:3f:5b:
                    c7:6a:63:35:1e:8a:b5:86:3f:23:b9:25:2c:66:83:
                    6a:ad:08:42:c1:ce:ed:71:94:d4:bc:36:5f:77:fb:
                    2d:05:b3:12:c7:38:08:b5:d1:3d:77:80:89:82:2c:
                    d3:cf:75:03:2c:58:f9:27:73:f9:b5:b1:01:dd:f4:
                    30:fe:a5:43:14:fc:4c:31:ba:c9:b8:a5:ea:11:26:
                    1d:05:ff:da:b7:78:19:59:8e:ef:de:b4:44:86:42:
                    08:2f:e4:43:63:39:ae:2a:9c:5b:6a:d6:aa:6d:e9:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D8:1A:30:36:18:FE:F1:CE:EA:BD:83:2C:0E:76:AC:75:79:8C:0E
            X509v3 Authority Key Identifier:
                keyid:6C:15:DB:2F:EE:5E:17:1C:04:E7:48:A2:B0:02:64:00:82:E6:51:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/6C15DB2FEE5E171C04E748A2B002640082E651E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C15DB2FEE5E171C04E748A2B002640082E651E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/3137372e36362e3135362e302f32332d3233203d3e203532363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:97:b4:48:ca:19:f2:76:11:6a:c5:e7:86:64:12:45:7e:74:
         da:a6:e4:93:26:68:45:34:64:cf:a9:43:cb:55:ad:c8:e8:42:
         c5:75:eb:2f:ca:c1:25:0a:8e:93:c8:41:cb:6a:6d:92:05:48:
         12:24:c2:18:e4:f8:8f:68:e0:7d:ad:0c:77:f8:d5:2a:75:9a:
         7a:41:24:03:65:82:92:26:d5:6d:6d:2d:e3:10:80:43:e0:19:
         63:49:57:78:e6:21:6c:ce:c8:37:73:e4:a4:bb:3b:cf:07:17:
         86:39:8d:90:5c:81:3c:3f:00:29:4a:0e:8a:09:bc:88:8b:fe:
         cc:50:0a:7f:1e:44:cc:5b:16:ee:ef:a0:0a:a5:8d:93:84:9c:
         3a:18:29:eb:ca:cf:2c:70:16:c1:99:0a:91:89:12:e0:5c:72:
         9f:f3:92:c1:69:bc:fc:6f:14:41:91:bc:b7:67:40:0a:a4:f2:
         a5:2e:24:d0:93:54:02:88:77:82:08:26:82:47:9d:98:7b:84:
         a5:96:75:6e:e7:98:3d:fe:98:d1:d0:15:a6:33:82:3c:25:59:
         97:fe:52:1d:19:e2:0d:ab:f1:1d:c8:f8:dd:c8:80:ed:5e:f1:
         c7:7c:5e:93:94:22:97:d4:f8:f9:90:ff:07:99:98:6e:7d:64:
         06:13:9c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org