Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32312e302f32342d3234203d3e203532393136.roa
File:                     3137372e31302e32312e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          A+Qs9fVcdnxKXRsP9PwLYLFA49eyGfcr6unqcW//zaI=
Subject key identifier:   C1:63:11:9B:CD:D3:F4:6C:5B:49:3F:AC:5B:66:06:20:91:1E:16:3C
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       699BAA3D00579354934540F880FE73C41C98B24B
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32312e302f32342d3234203d3e203532393136.roa
Signing time:             Wed 03 Apr 2024 20:51:33 +0000
ROA not before:           Wed 03 Apr 2024 20:46:33 +0000
ROA not after:            Wed 02 Apr 2025 20:51:33 +0000
asID:                     52916
IP address blocks:        177.10.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 11:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9b:aa:3d:00:57:93:54:93:45:40:f8:80:fe:73:c4:1c:98:b2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Apr  3 20:46:33 2024 GMT
            Not After : Apr  2 20:51:33 2025 GMT
        Subject: CN=C163119BCDD3F46C5B493FAC5B660620911E163C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:7d:ad:b3:11:0d:da:8f:91:7b:cd:5c:00:
                    ec:66:5b:56:76:c4:51:1b:fd:e9:3c:80:a7:ff:38:
                    27:6b:3f:f6:7a:d1:12:86:4b:d6:00:ed:22:36:d1:
                    9e:60:7d:29:73:3f:99:69:bb:ce:64:b4:f9:28:22:
                    fd:cb:a8:bf:6b:1a:4e:92:97:d0:c7:08:1d:38:20:
                    4d:87:5d:66:97:82:6d:ed:0d:4c:88:6b:d4:6d:f9:
                    28:80:de:cc:63:a6:07:c9:52:dd:fc:85:81:e2:4c:
                    24:36:9d:79:73:86:7d:bf:33:52:10:01:f1:b7:08:
                    35:0e:88:e8:f5:7f:49:08:03:03:61:d7:43:da:3b:
                    91:ea:27:e6:ca:65:4c:6c:8c:86:bb:99:aa:59:87:
                    9f:77:e1:70:7a:9a:94:06:4b:a4:27:11:88:a8:73:
                    90:36:18:c9:a3:e1:99:c3:36:11:6b:af:59:bb:f6:
                    5e:ec:9a:64:84:f7:28:a0:72:09:19:62:57:13:e4:
                    12:8f:31:2d:18:ea:80:d7:57:05:31:11:e9:d3:1c:
                    e4:e3:5a:da:4c:dc:89:b0:5b:82:99:cc:9d:cf:72:
                    56:33:f5:f3:68:6f:c8:21:4a:48:14:50:ba:d0:6c:
                    7c:c7:b8:3b:b0:0f:38:28:97:7e:cf:15:91:70:a1:
                    97:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:63:11:9B:CD:D3:F4:6C:5B:49:3F:AC:5B:66:06:20:91:1E:16:3C
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32312e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:c6:75:46:df:c6:ce:eb:af:f2:57:b2:a2:a6:84:bf:d4:
         db:88:05:1f:14:1f:3b:68:92:98:fd:68:69:b0:6b:e0:8c:5c:
         71:b4:6b:dc:53:ca:65:be:51:be:af:80:5c:4d:c0:1f:30:48:
         8d:37:8d:fd:7b:e3:e0:39:3c:94:4e:09:52:0d:bc:6c:73:0c:
         e1:8d:4c:75:71:2b:96:93:ff:ee:c1:02:39:71:8c:54:a9:d2:
         2b:af:74:e4:8a:aa:c4:a9:51:fa:fb:f7:cc:ce:2f:c9:9c:64:
         c8:36:3e:2d:c6:a5:0b:f8:da:c9:2a:a7:1a:a4:c1:eb:1e:84:
         2b:b5:f9:2b:79:57:86:b2:6a:5d:38:db:73:98:ae:78:10:12:
         57:a8:27:16:10:4d:67:d4:e1:4a:2f:3d:0e:af:96:ca:dd:df:
         2c:20:97:29:cb:be:d0:29:29:76:1b:de:a3:b3:6d:a6:d2:f0:
         59:5d:a0:c4:ef:5f:1d:c4:4c:b2:98:dd:8a:f7:2f:ee:13:51:
         2f:75:d3:44:9f:23:36:d6:89:82:9b:7e:cf:cf:c5:d5:4a:ec:
         67:65:0d:8e:c8:96:9d:61:f8:df:d5:13:0a:1a:6c:22:3c:cd:
         16:17:ba:47:5d:bb:2e:5f:11:b8:36:1c:e6:c4:ac:a6:e1:6b:
         84:81:6d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 15:05:13 2024 by rpki-client on console-ams.rpki-client.org