Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234302e302f32342d3234203d3e20323632343738.roa
File:                     3137372e34372e3234302e302f32342d3234203d3e20323632343738.roa (raw, json)
Hash identifier:          VTr/Ua5F4etpxmik2vxLmOeBEmZ0uBgSnhPTVHvoDwM=
Subject key identifier:   21:6C:2F:09:3A:60:09:7A:FD:DE:A0:D7:BC:15:CB:BB:BD:26:EF:86
Certificate issuer:       /CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
Certificate serial:       137C7021314B1D1EF7DF4958F66F6551C2708316
Authority key identifier: 30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234302e302f32342d3234203d3e20323632343738.roa
Signing time:             Wed 24 Jul 2024 00:38:39 +0000
ROA not before:           Wed 24 Jul 2024 00:33:39 +0000
ROA not after:            Wed 23 Jul 2025 00:38:39 +0000
asID:                     262478
IP address blocks:        177.47.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 03 Sep 2024 21:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7c:70:21:31:4b:1d:1e:f7:df:49:58:f6:6f:65:51:c2:70:83:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
        Validity
            Not Before: Jul 24 00:33:39 2024 GMT
            Not After : Jul 23 00:38:39 2025 GMT
        Subject: CN=216C2F093A60097AFDDEA0D7BC15CBBBBD26EF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c3:b0:54:cd:b9:c4:37:d5:1e:a8:76:30:6b:
                    87:ab:f6:4c:d3:a3:e7:1e:da:09:57:3a:da:38:5c:
                    67:b6:74:c0:0d:19:73:fa:1f:3e:89:ce:30:e3:10:
                    1d:31:24:6e:ff:86:7a:0f:63:97:23:19:86:b9:fd:
                    55:da:64:e0:4a:14:dc:f7:7e:7e:06:8d:9f:14:d9:
                    12:03:21:f7:72:64:c6:e5:79:90:fc:d1:5b:38:59:
                    d1:4d:3a:b6:74:35:8e:e2:f4:88:45:0b:2b:ea:c7:
                    2c:5c:a8:2a:50:25:fb:cd:b7:67:e0:2f:27:05:da:
                    9e:ab:ae:cb:13:09:2b:4b:0b:f2:0f:ae:b0:d5:6b:
                    69:ac:a4:cd:78:9e:7e:c2:52:89:96:3d:38:03:86:
                    b1:26:2a:5b:07:82:2d:1b:61:c4:97:10:2a:88:aa:
                    05:2d:01:b7:d2:39:7f:a2:71:a3:82:b3:ce:9f:33:
                    c3:04:09:15:04:c4:ed:90:a5:23:8e:b6:39:30:42:
                    b6:f7:54:9a:17:48:68:9a:28:05:dd:27:90:04:4f:
                    09:cf:6a:8e:5f:53:f8:49:66:a9:92:01:a1:a0:d2:
                    f9:25:7f:4c:c6:ca:7e:90:e9:cf:c4:2c:22:0b:08:
                    5a:91:53:a4:f3:c8:89:62:6f:f2:2d:7b:27:7f:ef:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6C:2F:09:3A:60:09:7A:FD:DE:A0:D7:BC:15:CB:BB:BD:26:EF:86
            X509v3 Authority Key Identifier:
                keyid:30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3234302e302f32342d3234203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:e3:bf:7f:f5:81:ca:92:01:6f:be:f0:32:bc:6a:25:de:0a:
         28:72:a3:ef:f7:19:57:0b:ba:3e:c1:0d:a0:e1:62:6d:46:6c:
         ac:7b:aa:da:2f:e3:47:f3:61:4d:7f:df:9b:3e:0f:6b:08:19:
         4b:bf:62:f1:2c:48:a6:a2:cc:d1:99:f3:ad:36:00:a5:f7:57:
         6b:b4:54:58:ad:9f:5c:00:72:40:b0:60:7b:b0:6a:21:66:c6:
         e4:55:25:13:ef:eb:47:59:b1:d5:d1:cf:2d:09:da:b8:d6:ca:
         d9:c7:19:8c:8d:98:82:ee:68:b1:4c:78:7c:6b:d1:77:55:06:
         1b:5e:0d:3a:b0:48:8b:11:fc:cd:1a:3c:bb:d4:2e:95:15:71:
         78:90:18:ac:0b:9a:00:04:39:b3:de:47:36:df:e2:2e:e3:09:
         40:60:78:3d:a4:12:66:88:4f:51:90:76:36:b7:7b:f3:6c:5f:
         42:36:62:01:4b:7f:77:6b:99:ec:f9:3c:13:fa:19:04:c5:28:
         55:6d:a2:8b:0d:b7:a3:7c:57:64:f6:47:f5:2a:c8:fe:be:3e:
         0d:42:2d:a1:82:ba:67:c8:aa:8f:5d:c2:79:a2:e8:3a:23:ec:
         12:36:83:4f:21:bd:07:b0:31:72:e0:ff:33:94:e0:6f:58:0f:
         8d:33:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 23:29:02 2024 by rpki-client on console-fra.rpki-client.org