Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e33382e3133302e302f32332d3233203d3e20323632373733.roa
File:                     3137372e33382e3133302e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          2X0mCHJHz9augVxKPyLDxVsmnF403wMXpMnAOEmXzaw=
Subject key identifier:   4F:8D:CE:D0:B1:C6:A7:95:C5:3E:CE:09:99:3C:5B:D4:E5:04:51:F9
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       100CA0D74299C48B3B138E83620CA97C62D06750
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e33382e3133302e302f32332d3233203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:28 +0000
ROA not before:           Wed 14 Aug 2024 12:03:28 +0000
ROA not after:            Wed 13 Aug 2025 12:08:28 +0000
asID:                     262773
IP address blocks:        177.38.130.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0c:a0:d7:42:99:c4:8b:3b:13:8e:83:62:0c:a9:7c:62:d0:67:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:28 2024 GMT
            Not After : Aug 13 12:08:28 2025 GMT
        Subject: CN=4F8DCED0B1C6A795C53ECE09993C5BD4E50451F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:db:7d:9d:41:53:e0:f0:af:7e:22:ab:3a:
                    46:f7:d2:ce:a1:8c:e0:ac:0f:c0:ec:4b:fc:55:c2:
                    03:dc:e1:55:58:6d:35:bc:6d:05:a9:bc:10:a8:46:
                    0b:77:07:17:98:06:8c:ec:7b:4e:f8:54:60:6f:91:
                    3b:2f:42:e2:3c:c8:9f:5c:c9:ee:9b:73:7f:7c:f0:
                    ed:14:3f:63:d0:3a:45:72:6e:f2:5a:b9:de:03:e9:
                    b8:9c:1d:7e:1f:9d:9f:71:b1:4c:40:67:6a:75:8a:
                    8a:90:15:35:da:ac:fc:e3:84:9c:e2:9f:8f:9d:9a:
                    eb:33:81:c7:05:dd:e7:a3:40:ed:04:a6:c7:74:2c:
                    3f:c5:fb:77:da:6a:fd:14:d4:d6:e1:7d:68:12:b1:
                    2e:25:e2:d0:d5:4b:81:dd:b8:5d:a6:8b:c0:c5:c0:
                    69:6a:d6:cf:dc:c6:69:72:ab:08:3b:10:74:2b:e5:
                    b1:c3:66:e5:2d:74:c9:ee:55:7a:74:17:03:b4:3d:
                    40:08:35:49:c9:d4:a1:9c:0c:61:4a:55:a6:32:4a:
                    ce:8a:f4:8d:4f:52:de:4c:c9:2e:96:4a:87:6e:ad:
                    c2:1c:2c:a5:0c:81:ae:84:c2:d5:0b:42:db:96:90:
                    99:54:4a:87:7c:d6:e7:bd:46:60:d3:91:7c:0f:df:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8D:CE:D0:B1:C6:A7:95:C5:3E:CE:09:99:3C:5B:D4:E5:04:51:F9
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e33382e3133302e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:28:c1:3c:9d:1c:90:c7:50:f1:0c:0e:ed:f5:c5:9f:49:3e:
         1e:1d:ae:2b:aa:56:a8:67:06:2d:ed:c1:8a:14:fe:0c:a5:8a:
         7e:0d:f7:a1:47:46:50:f6:60:2c:89:99:cc:16:ce:c4:9b:19:
         f2:f7:66:85:50:27:5a:0b:62:7a:f6:bc:45:bc:dd:4a:fa:f9:
         97:8b:13:61:a9:ab:ec:a1:14:1a:6b:c2:19:59:c1:94:91:00:
         55:12:6a:16:cd:bb:c4:79:88:d8:bc:fd:bb:95:81:88:f3:da:
         d6:bf:c7:fc:ac:64:06:d3:46:5b:b9:7d:cc:3a:d5:60:dc:0d:
         cd:79:f9:7c:c3:8c:53:8a:6d:80:53:83:33:c2:eb:c7:57:40:
         32:06:68:d0:1c:33:b5:9d:82:3a:ee:56:5a:1e:a2:0e:89:7c:
         3d:1c:d7:df:5a:29:cf:c1:3e:1d:61:d9:32:81:c2:71:60:15:
         60:47:96:60:df:2c:d1:8a:2a:fb:1c:aa:46:01:f0:e8:b7:99:
         fb:71:c6:7c:c2:50:41:ab:7b:08:7c:64:04:59:c5:8d:4c:96:
         12:69:4f:a7:ae:20:e4:c8:fa:5a:40:19:f2:2f:aa:b7:7b:8c:
         98:a7:a3:f8:0a:73:22:23:98:2c:fe:10:3b:3e:e5:02:d2:6f:
         67:ed:15:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----