Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e33382e3132382e302f32312d3231203d3e20323632373733.roa
File:                     3137372e33382e3132382e302f32312d3231203d3e20323632373733.roa (raw, json)
Hash identifier:          I9tttbnp2WSAhx/uXmcK1r5IGaBqJgVVjX4oQWLjyRg=
Subject key identifier:   BE:27:A2:82:11:AA:57:0D:39:62:41:D0:F4:71:35:38:47:16:70:9D
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       75CA93D8FAE7AB16428D09998148E309B19D6CA3
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e33382e3132382e302f32312d3231203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:26 +0000
ROA not before:           Wed 14 Aug 2024 12:03:26 +0000
ROA not after:            Wed 13 Aug 2025 12:08:26 +0000
asID:                     262773
IP address blocks:        177.38.128.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ca:93:d8:fa:e7:ab:16:42:8d:09:99:81:48:e3:09:b1:9d:6c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:26 2024 GMT
            Not After : Aug 13 12:08:26 2025 GMT
        Subject: CN=BE27A28211AA570D396241D0F47135384716709D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:30:04:24:06:4b:b1:55:20:e3:54:79:d0:
                    6b:0c:9a:6a:03:26:69:ea:11:71:3a:37:72:1d:fe:
                    d7:dd:b8:82:19:f0:08:42:bc:2c:44:da:1d:7d:6f:
                    2a:9d:6c:17:77:0f:d3:5e:73:7d:de:fd:d2:47:83:
                    a2:7a:d2:e3:76:a8:60:88:fe:4d:63:9f:2a:64:72:
                    29:d6:ab:1f:6e:40:b9:b5:9a:0e:2d:80:30:ee:52:
                    8b:8a:9d:62:0e:df:01:3e:0d:20:22:e4:25:8c:1d:
                    77:5d:a8:ee:90:09:fd:53:b4:8b:ce:9a:bf:5f:41:
                    33:23:13:c2:41:1a:7a:77:96:42:9f:72:4f:c9:1c:
                    0f:f6:1c:cc:e7:14:9f:23:8d:a6:9e:85:a1:cc:21:
                    20:39:45:42:67:d4:9d:8b:f4:c9:14:7e:c7:fa:7e:
                    24:ce:f8:68:3c:46:9d:aa:fd:06:01:bd:10:5a:4c:
                    89:0f:95:96:1f:52:8e:c0:64:c2:44:3a:71:75:0a:
                    96:9b:f0:b3:84:7c:88:78:27:04:a5:ba:7f:93:b9:
                    3b:fa:bd:c2:8f:cd:c6:9b:3a:be:98:e3:d2:3a:cc:
                    f6:14:ce:4e:68:d3:9a:02:58:b9:91:12:a4:77:f7:
                    c5:ca:c1:74:ff:b0:76:4e:1a:3b:e9:83:45:25:97:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:27:A2:82:11:AA:57:0D:39:62:41:D0:F4:71:35:38:47:16:70:9D
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e33382e3132382e302f32312d3231203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:33:ba:75:f1:28:e7:a5:a0:2a:88:63:e2:5e:4b:30:63:b8:
         d1:a7:00:26:f1:cf:af:a3:43:ae:a4:3a:09:32:3a:58:48:97:
         4a:37:d2:cb:11:5a:75:29:1a:ca:a9:61:cb:9c:7c:bf:ee:d8:
         ce:96:14:23:31:1c:01:78:be:3d:d5:69:d7:53:4a:24:41:a7:
         84:cb:b0:62:1d:c2:6d:4b:19:ab:34:21:0d:2b:30:f4:aa:f4:
         7b:44:71:b1:73:2e:0d:03:59:05:55:f4:e1:fa:c8:a3:7c:3e:
         ff:65:a4:cf:46:f4:79:da:6b:bf:f5:0c:69:d0:ce:24:3c:1a:
         c0:ac:73:33:8b:a0:69:61:a8:df:2f:87:4e:6f:a2:f5:5b:6e:
         80:0a:f6:a4:03:64:cd:f5:e3:4d:fb:3c:bd:2b:6a:61:a6:da:
         30:79:60:31:5c:77:ee:84:60:62:21:7b:6f:01:f8:1a:76:51:
         40:1f:b4:05:88:2e:f5:d5:29:15:2c:30:42:a8:16:11:51:df:
         13:2e:92:58:96:53:a3:ea:8e:c2:f4:5a:8b:d3:d4:61:c9:2a:
         8f:ff:78:60:4d:7f:aa:7e:42:32:f7:84:13:bb:f5:4b:9d:39:
         7f:ae:6b:51:05:3c:fe:d3:7f:fc:74:98:4b:18:a4:ef:ce:37:
         f3:8f:0d:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdcqT2PrnqxZCjQmZgUjjCbGdbKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA4MTQxMjAzMjZaFw0yNTA4MTMxMjA4MjZaMDMxMTAvBgNV
BAMTKEJFMjdBMjgyMTFBQTU3MEQzOTYyNDFEMEY0NzEzNTM4NDcxNjcwOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFajAEJAZLsVUg41R50GsMmmoD
JmnqEXE6N3Id/tfduIIZ8AhCvCxE2h19byqdbBd3D9Nec33e/dJHg6J60uN2qGCI
/k1jnypkcinWqx9uQLm1mg4tgDDuUouKnWIO3wE+DSAi5CWMHXddqO6QCf1TtIvO
mr9fQTMjE8JBGnp3lkKfck/JHA/2HMznFJ8jjaaehaHMISA5RUJn1J2L9MkUfsf6
fiTO+Gg8Rp2q/QYBvRBaTIkPlZYfUo7AZMJEOnF1Cpab8LOEfIh4JwSlun+TuTv6
vcKPzcabOr6Y49I6zPYUzk5o05oCWLmREqR398XKwXT/sHZOGjvpg0Ull4eTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvieighGqVw05YkHQ9HE1OEcWcJ0wHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNzM3MmUzMzM4MmUzMTMyMzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxJoAwDQYJKoZIhvcNAQELBQADggEBAJUzunXx
KOeloCqIY+JeSzBjuNGnACbxz6+jQ66kOgkyOlhIl0o30ssRWnUpGsqpYcucfL/u
2M6WFCMxHAF4vj3VaddTSiRBp4TLsGIdwm1LGas0IQ0rMPSq9HtEcbFzLg0DWQVV
9OH6yKN8Pv9lpM9G9Hnaa7/1DGnQziQ8GsCsczOLoGlhqN8vh05vovVbboAK9qQD
ZM314037PL0ramGm2jB5YDFcd+6EYGIhe28B+Bp2UUAftAWILvXVKRUsMEKoFhFR
3xMukliWU6PqjsL0WovT1GHJKo//eGBNf6p+QjL3hBO79UudOX+ua1EFPP7Tf/x0
mEsYpO/ON/OPDQo=
-----END CERTIFICATE-----