Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36362e302f32332d3233203d3e20323632373733.roa
File:                     3137372e3135322e36362e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          hqBRkmUwo8Sjnw7arTvEKg0lhY7QjmBwB53t8R9bX2Y=
Subject key identifier:   78:AC:9C:43:7B:64:A9:95:09:16:9A:79:75:71:33:7D:10:6D:F4:A0
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       68BB087D1EBBC81AA757841CB0C1068C134BAD22
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36362e302f32332d3233203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:22 +0000
ROA not before:           Wed 14 Aug 2024 12:03:22 +0000
ROA not after:            Wed 13 Aug 2025 12:08:22 +0000
asID:                     262773
IP address blocks:        177.152.66.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bb:08:7d:1e:bb:c8:1a:a7:57:84:1c:b0:c1:06:8c:13:4b:ad:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:22 2024 GMT
            Not After : Aug 13 12:08:22 2025 GMT
        Subject: CN=78AC9C437B64A99509169A797571337D106DF4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:16:f6:c1:79:ed:a1:27:8e:08:e2:86:b2:7e:
                    ae:fc:7a:60:95:64:a0:40:7f:dc:1a:af:98:47:6e:
                    a3:cf:9a:a4:32:30:6d:f3:c8:ee:1a:92:c5:53:9a:
                    0e:a0:e1:5c:fd:bd:11:8f:ca:23:e0:0a:c2:fa:c4:
                    d3:f0:04:b7:af:55:ed:fd:3d:f1:a1:91:d5:1f:f6:
                    3c:6b:a8:2d:c3:37:1f:c3:b8:e0:8e:31:d7:cd:38:
                    82:7d:c2:13:d1:15:b8:67:16:93:5e:a2:8f:ba:d0:
                    0b:b3:0f:31:98:98:6e:1b:ee:13:9a:02:6c:85:59:
                    a4:3c:ca:d3:19:98:05:ed:45:2c:3f:de:fb:21:45:
                    05:bd:04:6b:b9:a8:02:56:0e:f5:c6:ec:33:9f:16:
                    a9:a8:5c:11:10:1b:2c:a7:9f:d5:9e:b2:c0:7f:56:
                    cd:f4:c9:75:bd:e3:93:60:ce:ca:23:89:83:fe:0d:
                    62:55:aa:67:1b:d4:68:89:89:ec:42:49:6f:9c:40:
                    02:ee:cb:2c:95:73:f1:cc:de:d3:f9:37:71:12:3a:
                    1e:41:bd:dc:d8:75:00:63:58:0d:0a:a9:cc:6c:fc:
                    69:4c:33:92:ad:de:fc:83:aa:be:87:eb:28:0d:42:
                    3c:d9:e4:fd:f3:40:56:ba:54:7b:2c:03:c3:f0:34:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AC:9C:43:7B:64:A9:95:09:16:9A:79:75:71:33:7D:10:6D:F4:A0
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36362e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:82:14:a6:97:a5:62:d0:65:9c:a2:20:f1:d5:31:51:07:06:
         8f:bc:cc:33:e5:c1:4e:c2:65:24:57:2a:7b:01:ac:8b:a4:61:
         28:2a:bb:e6:37:e4:b3:b4:c9:9a:7a:20:14:d9:fc:6a:40:c8:
         44:e4:e4:6c:db:5e:cb:63:74:64:d1:0a:c3:2f:89:f4:f4:9d:
         1d:88:7e:86:6b:e6:af:2b:66:ce:79:4e:cb:f2:45:1b:a4:44:
         87:f8:c9:9b:2f:b9:15:0f:a6:42:24:e7:ca:21:77:42:a1:cd:
         ce:e1:d1:4f:7c:3b:ef:4d:4d:0f:58:b9:8f:85:5d:d7:c3:00:
         00:bf:b8:4c:99:69:02:0c:14:af:59:52:55:7f:70:e6:12:94:
         7b:1d:be:34:dc:46:23:ff:95:57:fc:be:3c:da:1e:03:ed:f8:
         cc:1b:6e:bb:d4:6b:66:be:e8:0a:76:58:06:62:b5:3e:cf:f1:
         ec:45:c8:64:c8:83:a3:2e:ad:53:ce:de:74:06:0d:a2:d2:54:
         f0:3e:be:42:f8:f7:6c:58:af:c3:b2:b6:1f:36:ec:a2:e1:5b:
         43:db:f0:02:90:0e:e9:e0:64:72:45:04:cf:02:9e:38:92:28:
         1f:ed:67:27:c3:d7:b8:b2:7b:e7:4f:83:7e:f0:df:6f:e1:37:
         c9:a6:6e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:03:29 2024 by rpki-client on console-fra.rpki-client.org