Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36342e302f32302d3230203d3e20323632373733.roa
File:                     3137372e3135322e36342e302f32302d3230203d3e20323632373733.roa (raw, json)
Hash identifier:          8AVEyNOInyOMIbPw7C1I8+59Rp5LpEcqKiOsbVpjbmk=
Subject key identifier:   AE:F2:32:AD:05:5A:3F:1E:80:9F:39:5E:B2:FE:37:4A:2E:C5:F4:18
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       0AB3BE2D8F41386CB28C49024A919AF74DD8D0B4
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36342e302f32302d3230203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:24 +0000
ROA not before:           Wed 14 Aug 2024 12:03:24 +0000
ROA not after:            Wed 13 Aug 2025 12:08:24 +0000
asID:                     262773
IP address blocks:        177.152.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b3:be:2d:8f:41:38:6c:b2:8c:49:02:4a:91:9a:f7:4d:d8:d0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:24 2024 GMT
            Not After : Aug 13 12:08:24 2025 GMT
        Subject: CN=AEF232AD055A3F1E809F395EB2FE374A2EC5F418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:f1:6f:f7:52:cc:fd:36:3e:e2:50:8a:df:
                    88:18:82:41:b3:f8:30:79:4b:fe:f3:27:39:ca:36:
                    55:47:f8:4e:be:48:ac:09:69:d8:61:59:15:d6:1c:
                    e8:c8:47:82:07:eb:71:a6:93:03:88:b1:d3:93:f4:
                    ca:25:f0:7a:9f:c9:0b:6e:cb:cc:cc:57:87:db:2b:
                    6d:50:13:9f:3e:32:fb:f2:19:21:93:d7:70:81:20:
                    8a:8b:c7:b5:8c:a0:ab:1b:6b:72:6f:94:57:63:3c:
                    a1:f2:79:d4:bc:1a:00:b3:03:3f:95:ff:58:cc:f0:
                    f2:6b:c6:8f:e0:40:0f:95:40:7b:a2:fc:d2:3b:fb:
                    04:d2:af:7a:a5:c6:b5:70:76:16:24:52:72:d1:8c:
                    2e:f1:f8:4a:7d:cd:d3:42:4d:2e:b5:20:e3:ef:26:
                    2c:82:19:5c:f5:9f:ef:0f:59:ee:45:34:82:6c:48:
                    85:ca:d6:b0:11:1d:14:5a:92:ca:a7:f0:44:a0:15:
                    40:b0:80:a2:8e:66:2e:f5:6e:16:8f:5b:eb:4f:b4:
                    26:e9:d8:c2:b3:e6:08:95:6f:3f:24:13:cb:7c:32:
                    8b:f4:f0:c4:6a:04:15:29:14:c5:5e:2f:ae:7e:af:
                    59:a8:ad:a2:d9:0d:30:6c:98:9f:f0:c4:68:ce:b9:
                    cf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F2:32:AD:05:5A:3F:1E:80:9F:39:5E:B2:FE:37:4A:2E:C5:F4:18
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36342e302f32302d3230203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:cb:78:03:27:29:4f:00:56:95:b5:81:3e:72:71:6a:5a:ee:
         43:a9:df:a4:89:f3:47:99:69:35:96:f9:ef:99:64:18:b6:75:
         f1:0e:2e:17:ea:a3:5c:c3:1d:01:f6:af:e1:c2:9b:4e:27:08:
         45:30:bb:90:7e:32:07:dd:e0:62:3d:db:f1:07:37:04:b1:a7:
         35:27:aa:2f:46:06:20:ea:09:d9:09:59:af:a8:44:33:cc:1a:
         97:a4:d7:11:45:02:a8:bf:2c:37:00:98:09:c9:fa:e4:e1:59:
         08:c9:88:0b:26:3d:42:5f:e3:20:5f:81:5f:f5:4b:42:89:fe:
         28:39:8a:c8:82:9d:98:67:bd:96:e2:da:40:67:d7:a9:46:9d:
         bb:da:a6:b4:a0:d1:17:41:b0:51:ef:fd:ea:d3:c5:48:7f:0b:
         21:d5:fb:60:22:19:ac:1b:4d:c5:dc:b4:46:e9:e0:ca:6e:b9:
         d1:20:b1:7c:10:91:23:ec:a5:52:4b:38:1c:6a:b8:1a:33:cd:
         b0:b9:cc:17:e1:e7:e8:5b:05:d0:1f:0b:a3:19:42:56:e7:00:
         2a:71:4f:be:6b:4b:22:36:5e:bc:ab:ca:a0:56:43:ae:25:4e:
         ce:6f:50:01:d6:7f:d3:f5:9c:97:77:20:27:6d:13:98:c5:86:
         84:e5:24:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:03:29 2024 by rpki-client on console-fra.rpki-client.org