Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36382e302f32342d3234203d3e20323632373733.roa
File:                     3137372e3135322e36382e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          3eigTrSGDnyX5p9W6210p57RTIfytw+wJREfBBzwlNk=
Subject key identifier:   5B:42:C9:B7:81:A3:0F:FD:32:2B:34:48:14:AB:DF:A8:BA:BA:B1:70
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       305341A7C745BD1DB5CD81298E685993A8E56EDF
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36382e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:24 +0000
ROA not before:           Wed 14 Aug 2024 12:03:24 +0000
ROA not after:            Wed 13 Aug 2025 12:08:24 +0000
asID:                     262773
IP address blocks:        177.152.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:53:41:a7:c7:45:bd:1d:b5:cd:81:29:8e:68:59:93:a8:e5:6e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:24 2024 GMT
            Not After : Aug 13 12:08:24 2025 GMT
        Subject: CN=5B42C9B781A30FFD322B344814ABDFA8BABAB170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a2:26:a6:59:55:f6:a9:e6:94:70:8c:22:09:
                    b8:8e:0d:2f:df:ff:92:a4:44:b1:e5:ca:6b:a9:a4:
                    f5:c5:da:8f:09:31:97:0d:5b:af:be:f4:6b:d9:ad:
                    85:da:1c:d5:45:b9:d1:2f:d3:a8:b5:1e:93:d9:16:
                    a3:65:4f:19:b5:fe:dc:77:af:8d:0a:0d:50:45:18:
                    e5:7b:55:0d:b3:9f:1a:b5:de:84:4b:b6:2c:de:e0:
                    1a:d6:8a:e9:be:f8:7f:24:3a:0c:8b:4a:91:fb:1f:
                    26:f2:1b:a9:fc:23:8f:cc:b2:1c:2b:66:b6:e3:36:
                    f0:7d:6b:ef:99:af:4a:91:4f:81:c9:7f:a0:10:46:
                    57:9c:5d:31:33:9e:cd:ae:ee:aa:1a:18:27:df:0d:
                    89:63:6b:15:27:19:9b:3d:91:7c:ed:96:23:45:90:
                    0e:d2:7b:05:de:46:95:35:3b:33:c0:13:d8:b9:13:
                    a4:1a:94:7a:e7:b2:b1:77:23:91:11:ec:fb:d4:9b:
                    e9:8a:02:90:ce:33:3f:3a:06:6b:79:75:fb:9e:e8:
                    86:5a:98:ba:12:47:7b:95:2a:10:d6:83:d5:d2:3d:
                    1a:f5:75:f1:61:6a:ef:ba:a4:7a:88:0f:bb:43:d6:
                    ac:12:6b:a9:4d:d0:ee:3b:60:99:17:32:4e:c6:09:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:42:C9:B7:81:A3:0F:FD:32:2B:34:48:14:AB:DF:A8:BA:BA:B1:70
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36382e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:83:5f:07:c3:bb:3c:9e:ea:09:5c:bb:b9:2e:e8:1f:92:4b:
         a3:77:f8:f2:25:80:52:c3:9a:4f:a8:3c:37:a1:e6:90:11:1a:
         5b:e8:e1:72:d2:ce:7c:f5:40:c6:c5:e4:bf:c2:18:f9:33:d1:
         2d:8b:e6:e0:18:00:a8:6f:44:14:b0:7e:5e:92:52:d2:25:09:
         dd:87:d2:fe:52:41:48:f7:c6:df:62:c8:28:dd:24:e5:1f:99:
         99:23:92:f4:d0:1d:b3:a3:33:87:ce:36:93:d8:50:e1:45:c8:
         8d:4c:62:4a:57:0a:e8:25:cc:cb:4f:ff:5a:ff:85:84:7c:48:
         91:ea:c6:56:3b:48:08:9e:42:8e:30:06:a9:be:4b:4e:05:f5:
         06:9d:40:9a:d3:33:41:8e:3f:a6:eb:0d:dc:7d:02:b9:91:b8:
         14:34:e1:19:60:fc:3a:b5:e9:4f:3e:5d:1e:33:eb:d0:78:5b:
         05:6f:16:d0:c3:03:97:0b:8f:71:33:6e:f6:ba:45:7c:ad:73:
         0d:dd:50:83:6a:61:ca:64:49:8d:8f:46:9a:fe:1b:d5:7e:41:
         0b:85:44:72:df:b0:52:dd:90:1e:dd:17:1f:f4:e8:6a:b4:18:
         91:5d:78:d1:67:64:73:41:78:10:40:51:d0:4d:4f:16:21:c2:
         63:41:6b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:52 2024 by rpki-client on console-ams.rpki-client.org