Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3137372e35362e302e302f31342d3134203d3e203232303835.roa
File:                     3137372e35362e302e302f31342d3134203d3e203232303835.roa (raw, json)
Hash identifier:          ht0WsVa32MM+rve7NXbLsTFKAW8DgdDxDZoYHKpHPl8=
Subject key identifier:   3C:79:EA:89:06:74:1E:9D:CC:85:D3:54:5A:91:26:4B:5C:08:07:E8
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       5473A543CF15AC290F885930E34BB68E12BE7612
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3137372e35362e302e302f31342d3134203d3e203232303835.roa
Signing time:             Wed 03 Apr 2024 18:31:54 +0000
ROA not before:           Wed 03 Apr 2024 18:26:54 +0000
ROA not after:            Wed 02 Apr 2025 18:31:54 +0000
asID:                     22085
IP address blocks:        177.56.0.0/14 maxlen: 14

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:73:a5:43:cf:15:ac:29:0f:88:59:30:e3:4b:b6:8e:12:be:76:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Apr  3 18:26:54 2024 GMT
            Not After : Apr  2 18:31:54 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4a:23:b1:24:99:8f:15:45:46:2b:4d:dc:5b:
                    1f:64:0a:91:29:79:5e:59:5a:20:d4:b0:63:66:65:
                    3d:22:cb:13:57:af:01:2b:8c:69:5c:9b:08:19:92:
                    f7:1f:93:bb:59:e0:da:0b:1c:85:05:f8:03:c0:38:
                    fd:d7:84:02:1d:de:a5:12:4e:6a:96:c9:64:35:a1:
                    7d:ca:73:8c:3e:29:da:6e:6c:2d:b1:e7:bb:09:83:
                    3e:9b:d1:13:f6:26:3f:6b:59:27:99:c0:c8:f6:8e:
                    5b:f6:15:1a:16:e5:da:ca:50:e5:29:22:58:b7:3e:
                    c6:6f:18:72:91:30:57:d4:1e:80:c1:eb:a0:9d:e4:
                    77:50:21:04:b0:46:f4:13:54:06:19:9a:4b:4b:50:
                    d0:b4:07:31:6f:7c:33:80:2e:9f:70:35:05:04:a2:
                    4e:fb:78:31:d2:db:c5:56:3b:cb:19:77:f6:48:2c:
                    d1:28:bf:e7:09:c2:ac:43:f0:65:fd:0a:bc:0b:36:
                    74:e2:20:17:52:2b:e8:41:b5:93:91:33:22:90:1b:
                    f2:ed:23:de:73:51:06:ae:0b:c0:fa:cf:17:e9:6c:
                    5a:47:f4:eb:a4:74:cc:da:d1:16:29:15:47:77:40:
                    64:3c:eb:6b:88:3e:24:84:49:b3:46:05:4d:24:56:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:79:EA:89:06:74:1E:9D:CC:85:D3:54:5A:91:26:4B:5C:08:07:E8
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3137372e35362e302e302f31342d3134203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.56.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         8a:6a:5d:17:d7:0f:1d:91:a9:cc:68:0a:72:65:f4:b6:cb:17:
         63:5d:0f:5a:15:c3:10:96:e7:83:06:9c:9e:eb:a8:d9:7b:e1:
         c7:aa:37:4c:da:fa:84:bb:ce:92:1e:29:eb:7d:6c:50:54:bc:
         16:2a:e5:3c:a4:c5:ed:6d:19:40:32:48:fe:60:f3:ad:4e:55:
         6d:9a:03:60:15:f7:4f:af:77:3a:b0:dd:9a:ef:ef:fc:80:c8:
         c2:f2:d2:bc:3f:e1:43:6e:3f:25:e5:b8:32:eb:57:8a:43:6a:
         b0:67:9b:e8:eb:24:dd:8d:46:32:dd:aa:ab:f7:29:1b:e0:fe:
         ef:01:b9:6a:8d:b8:25:be:f9:11:18:0f:50:94:ea:e5:3e:2a:
         12:f2:16:1b:ea:e1:b8:0b:56:63:09:fe:bf:88:e0:41:1b:f8:
         28:3c:1c:20:fb:da:8f:71:74:38:f5:a3:ff:2d:81:10:31:27:
         ed:c8:42:95:b2:5e:85:1c:22:3a:33:2f:1b:d6:35:97:d8:d6:
         ac:47:c0:3c:39:4f:20:5f:3a:cc:c2:ed:c7:ab:f7:f4:3a:ce:
         8d:62:f9:39:0a:ec:fa:d8:b5:24:2d:dd:81:f9:6a:ee:a8:d2:
         5d:c6:82:6f:78:f1:fb:f7:42:30:fa:93:32:70:00:ea:3a:d2:
         5b:4c:b1:ca
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUVHOlQ88VrCkPiFkw40u2jhK+dhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVFQkVFRkQ0NUEwRDkwQjVFNjBDRDhENEI0Mzg0MDk4
MzUzRTgyODAeFw0yNDA0MDMxODI2NTRaFw0yNTA0MDIxODMxNTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREE0QTIzQjEyNDk5OEYxNTQ1
NDYyQjREREM1QjFGNjQwQTkxMjk3OTVFNTk1QTIwRDRCMDYzNjY2NTNEMjJDQjEz
NTdBRjAxMkI4QzY5NUM5QjA4MTk5MkY3MUY5M0JCNTlFMERBMEIxQzg1MDVGODAz
QzAzOEZERDc4NDAyMURERUE1MTI0RTZBOTZDOTY0MzVBMTdEQ0E3MzhDM0UyOURB
NkU2QzJEQjFFN0JCMDk4MzNFOUJEMTEzRjYyNjNGNkI1OTI3OTlDMEM4RjY4RTVC
RjYxNTFBMTZFNURBQ0E1MEU1MjkyMjU4QjczRUM2NkYxODcyOTEzMDU3RDQxRTgw
QzFFQkEwOURFNDc3NTAyMTA0QjA0NkY0MTM1NDA2MTk5QTRCNEI1MEQwQjQwNzMx
NkY3QzMzODAyRTlGNzAzNTA1MDRBMjRFRkI3ODMxRDJEQkM1NTYzQkNCMTk3N0Y2
NDgyQ0QxMjhCRkU3MDlDMkFDNDNGMDY1RkQwQUJDMEIzNjc0RTIyMDE3NTIyQkU4
NDFCNTkzOTEzMzIyOTAxQkYyRUQyM0RFNzM1MTA2QUUwQkMwRkFDRjE3RTk2QzVB
NDdGNEVCQTQ3NENDREFEMTE2MjkxNTQ3Nzc0MDY0M0NFQjZCODgzRTI0ODQ0OUIz
NDYwNTREMjQ1NjdEREIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2kojsSSZjxVFRitN3FsfZAqRKXleWVog1LBjZmU9IssTV68BK4xp
XJsIGZL3H5O7WeDaCxyFBfgDwDj914QCHd6lEk5qlslkNaF9ynOMPinabmwtsee7
CYM+m9ET9iY/a1knmcDI9o5b9hUaFuXaylDlKSJYtz7GbxhykTBX1B6AweugneR3
UCEEsEb0E1QGGZpLS1DQtAcxb3wzgC6fcDUFBKJO+3gx0tvFVjvLGXf2SCzRKL/n
CcKsQ/Bl/Qq8CzZ04iAXUivoQbWTkTMikBvy7SPec1EGrgvA+s8X6WxaR/TrpHTM
2tEWKRVHd0BkPOtriD4khEmzRgVNJFZ92wIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FDx56okGdB6dzIXTVFqRJktcCAfoMB8GA1UdIwQYMBaAFNXr7v1FoNkLXmDNjUtD
hAmDU+goMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hGWXFjckxWdjFKSld6
dlVGZ1I4cVp6cGlkTFFUdGtCa1haczZnZVFkdWllLzEvRDVFQkVFRkQ0NUEwRDkw
QjVFNjBDRDhENEI0Mzg0MDk4MzUzRTgyOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENUVCRUVGRDQ1QTBEOTBCNUU2MENEOEQ0QjQzODQwOTgzNTNF
ODI4LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IRllxY3JMVnYxSkpXenZVRmdS
OHFaenBpZExRVHRrQmtYWnM2Z2VRZHVpZS8xLzMxMzczNzJlMzUzNjJlMzAyZTMw
MmYzMTM0MmQzMTM0MjAzZDNlMjAzMjMyMzAzODM1LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCsTgwDQYJ
KoZIhvcNAQELBQADggEBAIpqXRfXDx2RqcxoCnJl9LbLF2NdD1oVwxCW54MGnJ7r
qNl74ceqN0za+oS7zpIeKet9bFBUvBYq5Tykxe1tGUAySP5g861OVW2aA2AV90+v
dzqw3Zrv7/yAyMLy0rw/4UNuPyXluDLrV4pDarBnm+jrJN2NRjLdqqv3KRvg/u8B
uWqNuCW++REYD1CU6uU+KhLyFhvq4bgLVmMJ/r+I4EEb+Cg8HCD72o9xdDj1o/8t
gRAxJ+3IQpWyXoUcIjozLxvWNZfY1qxHwDw5TyBfOszC7cer9/Q6zo1i+TkK7PrY
tSQt3YH5au6o0l3Ggm948fv3QjD6kzJwAOo60ltMsco=
-----END CERTIFICATE-----
Generated at Tue Jul 16 20:13:36 2024 by rpki-client on console-fra.rpki-client.org