Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32352e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32352e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          lkYXLeDJwtQjwP+rUXmkxBvU/j6PX+4JLrpoE0YBJhs=
Subject key identifier:   C5:D3:7B:C3:A6:71:5C:CC:B1:84:F1:FD:5A:A9:C3:49:B3:E4:3F:3C
Certificate issuer:       /CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
Certificate serial:       470043A8BE5202A4F9778F5EFB55041D97F906E4
Authority key identifier: BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32352e302f32342d3234203d3e203532363331.roa
Signing time:             Wed 25 Sep 2024 15:03:26 +0000
ROA not before:           Wed 25 Sep 2024 14:58:26 +0000
ROA not after:            Wed 24 Sep 2025 15:03:26 +0000
asID:                     52631
IP address blocks:        177.128.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 19:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:00:43:a8:be:52:02:a4:f9:77:8f:5e:fb:55:04:1d:97:f9:06:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63BD3074071AEC0A44578C67B2D173C5CD1FF1
        Validity
            Not Before: Sep 25 14:58:26 2024 GMT
            Not After : Sep 24 15:03:26 2025 GMT
        Subject: CN=C5D37BC3A6715CCCB184F1FD5AA9C349B3E43F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:cc:e9:82:60:cc:13:bc:76:66:80:8e:d9:
                    4d:a6:e2:2f:09:c0:df:3b:41:be:7d:8c:e3:23:02:
                    48:7f:c0:e6:68:e6:9b:3f:e4:26:78:b8:91:ec:3c:
                    a6:7c:14:d6:2b:e1:a6:d6:bd:8f:c9:c7:d1:15:be:
                    c9:43:92:81:74:7f:06:f3:7f:6c:96:c6:2d:ef:59:
                    e8:e9:ad:73:f3:a6:93:48:13:a6:ef:16:37:40:9c:
                    bd:03:c6:02:32:1c:e2:7a:ef:35:52:80:2d:9e:7a:
                    2b:8b:7c:8a:0a:1c:5d:98:dd:24:12:a0:b2:c8:66:
                    2a:3e:5a:41:fc:46:06:93:96:e8:62:ee:2e:4e:d2:
                    21:42:b1:a3:f7:d4:a8:fc:c5:3f:ad:51:e3:ea:ef:
                    8e:4d:85:c1:04:fb:61:ad:d5:31:08:f2:4b:67:cf:
                    c9:0a:fb:f4:4b:6a:a5:ed:3b:13:61:b2:af:e3:35:
                    c6:c1:f6:4c:c0:02:9a:b0:9c:05:4b:67:32:1e:bb:
                    57:dd:d2:f8:18:0e:20:f0:bb:46:a5:73:e6:3a:9e:
                    02:ad:4d:fc:a4:99:2a:06:67:f3:ed:51:d6:3a:30:
                    b4:8a:a7:f7:2b:70:6e:40:e7:d0:19:b6:ce:3c:75:
                    96:3f:c5:59:ac:b1:cd:eb:05:70:55:35:c4:ba:5c:
                    e8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D3:7B:C3:A6:71:5C:CC:B1:84:F1:FD:5A:A9:C3:49:B3:E4:3F:3C
            X509v3 Authority Key Identifier:
                keyid:BE:63:BD:30:74:07:1A:EC:0A:44:57:8C:67:B2:D1:73:C5:CD:1F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE63BD3074071AEC0A44578C67B2D173C5CD1FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32352e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:b7:44:73:cf:c9:15:a3:af:d7:30:e1:a9:75:b3:d2:61:e4:
         5d:85:ac:c5:42:70:77:6e:a9:e9:25:a5:83:8a:51:f1:51:f4:
         ff:8a:58:21:ee:16:9e:57:e1:5a:aa:0b:78:3d:69:2e:40:12:
         29:6f:da:a7:87:0a:c8:44:32:ef:f7:10:a2:3b:92:0b:00:3f:
         3a:54:7d:bd:3a:53:54:52:a6:4f:b7:b9:92:77:18:05:a3:41:
         20:d0:56:09:97:44:15:70:3b:35:d5:d4:78:52:20:7f:b9:94:
         69:10:f2:2e:09:8d:7b:3c:59:47:b4:c7:7d:1d:88:b4:2c:ca:
         b9:0f:7c:91:25:c4:8b:18:71:50:25:e1:eb:09:c1:a9:44:ea:
         92:fc:7a:1f:2d:3c:25:6f:0f:72:f4:31:a9:73:1f:0b:93:15:
         ad:4c:fe:9d:3a:af:62:50:bc:bb:bc:2a:63:7d:77:f0:57:ad:
         c9:7d:14:95:4d:b0:c6:4b:92:19:5c:51:1c:ba:90:6e:85:ed:
         53:e6:6d:4d:4c:56:d2:75:7d:29:4c:48:f7:39:6c:c8:bd:94:
         c5:c3:33:b5:bf:84:b5:17:65:d3:82:20:fd:27:49:7e:90:6b:
         1b:67:33:a5:56:e4:b5:cf:ef:fb:7b:16:58:40:7b:9f:e9:6e:
         25:98:9b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 22:39:17 2024 by rpki-client on console-ams.rpki-client.org