Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32332e302f32342d3234203d3e203532393136.roa
File:                     3137372e31302e32332e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          UqiwlGb5HKSRo0aMBg28Ny4V/4LRQ8ghudWFSHuk/ks=
Subject key identifier:   25:82:2D:8F:92:B6:B0:5F:04:EB:5E:03:A6:59:65:68:02:A3:70:8D
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       494DCB5E684B734F7C7F5DABB12EA1A34B92CF14
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32332e302f32342d3234203d3e203532393136.roa
Signing time:             Wed 03 Apr 2024 20:51:33 +0000
ROA not before:           Wed 03 Apr 2024 20:46:33 +0000
ROA not after:            Wed 02 Apr 2025 20:51:33 +0000
asID:                     52916
IP address blocks:        177.10.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 07 Sep 2024 14:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4d:cb:5e:68:4b:73:4f:7c:7f:5d:ab:b1:2e:a1:a3:4b:92:cf:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Apr  3 20:46:33 2024 GMT
            Not After : Apr  2 20:51:33 2025 GMT
        Subject: CN=25822D8F92B6B05F04EB5E03A659656802A3708D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:af:d5:ae:aa:f5:05:0c:13:e5:7c:50:61:d2:
                    ce:48:08:2e:e7:04:c1:69:55:c3:5a:93:90:3f:7e:
                    4c:d4:c9:62:0a:53:00:4a:95:1a:8d:3f:36:8a:5f:
                    ad:d6:6f:8c:7a:4d:54:64:5e:0b:fc:34:ee:7a:5b:
                    50:78:09:7b:23:9f:54:7d:f7:5c:c8:fd:ea:c5:c7:
                    35:e6:1b:e4:a8:9f:e6:b4:72:f0:c2:92:a5:a1:57:
                    ee:71:6a:f8:d6:12:8e:d8:13:4d:1f:d5:47:62:11:
                    ef:79:28:50:a8:fb:e6:9f:5a:7d:1e:38:4c:a5:cb:
                    2b:89:a1:ed:75:4c:c2:b2:20:94:70:ce:a7:58:c5:
                    5c:a4:2a:7e:01:6b:ea:5f:25:dc:5f:c3:66:a6:3b:
                    44:8d:db:fe:66:2f:3d:3a:51:a8:76:f2:77:4e:38:
                    16:1c:91:9c:09:41:cc:ed:75:17:0a:e9:cd:02:87:
                    22:44:51:07:f9:6b:99:f8:da:a5:e0:82:28:63:14:
                    c3:19:45:ad:a6:d0:b0:f1:0c:0d:92:6b:31:db:71:
                    c6:c4:7e:95:ea:23:02:2f:55:0b:af:c0:57:cf:32:
                    4a:e6:cf:b4:9a:61:64:43:02:48:16:36:6b:86:11:
                    70:1f:01:36:44:ea:18:ff:bf:64:d6:6e:99:45:7c:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:82:2D:8F:92:B6:B0:5F:04:EB:5E:03:A6:59:65:68:02:A3:70:8D
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32332e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:22:64:9f:0f:93:da:ee:c3:93:7a:d4:22:1e:82:f7:1f:dd:
         e7:df:a7:9d:fc:de:07:e6:7c:95:08:5c:1b:49:33:81:ea:20:
         5a:b5:e0:b4:0c:1e:53:de:1d:aa:3f:7b:bb:75:49:68:ac:2c:
         b2:1a:91:fe:58:e7:58:cc:51:f1:ea:61:bf:03:0f:2c:b6:93:
         8d:24:9a:73:31:1f:0e:f4:13:cc:6f:69:2d:36:09:9a:0b:ba:
         2d:37:8b:21:37:01:5a:62:1b:fb:8c:c8:76:72:f1:67:0c:e2:
         a8:f0:db:70:cd:4b:d1:ba:7a:4e:ce:29:b7:da:0d:88:98:56:
         eb:1b:c0:3e:4e:47:c8:e3:12:c0:fe:72:3f:b2:b4:de:6e:19:
         33:23:90:35:f5:f2:02:06:5b:1e:58:20:1f:0b:c1:72:70:61:
         d2:4c:c6:e2:d6:d0:05:f2:02:b7:a7:f3:9d:98:20:d4:f7:bd:
         cb:d3:9c:ea:ed:65:eb:ce:08:1e:37:c9:10:f5:4c:ca:f6:09:
         b1:3d:1d:de:df:b3:75:7e:80:8f:df:e0:2d:2b:ad:f3:0e:72:
         b0:a9:2f:91:a5:d1:8d:84:5f:cc:d4:6d:40:e9:9d:92:c1:5b:
         f8:45:c4:2f:41:a1:2b:a4:7e:53:56:6f:bf:52:a9:76:2d:f4:
         c3:4a:6a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 15:48:34 2024 by rpki-client on console-fra.rpki-client.org