Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37302e3137362e302f32302d3230203d3e20323632373733.roa
File:                     3137372e37302e3137362e302f32302d3230203d3e20323632373733.roa (raw, json)
Hash identifier:          K8koD1r2seMgQVMfL5/Bydr9qI9NgSusIGDhSdcbka4=
Subject key identifier:   5F:A9:3F:F2:E8:70:4F:68:07:65:28:5D:7D:59:EA:B1:90:70:42:1C
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       7D968D969C23379D5801D7AF6FFB4573C239F6FF
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37302e3137362e302f32302d3230203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:23 +0000
ROA not before:           Wed 14 Aug 2024 12:03:23 +0000
ROA not after:            Wed 13 Aug 2025 12:08:23 +0000
asID:                     262773
IP address blocks:        177.70.176.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:96:8d:96:9c:23:37:9d:58:01:d7:af:6f:fb:45:73:c2:39:f6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:23 2024 GMT
            Not After : Aug 13 12:08:23 2025 GMT
        Subject: CN=5FA93FF2E8704F680765285D7D59EAB19070421C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:d8:0e:18:3f:96:c2:51:e3:93:4e:4b:85:
                    22:44:61:1f:eb:39:2b:e0:68:f9:6e:56:ee:e1:da:
                    76:67:7c:20:42:cc:38:51:59:86:a4:1d:2f:e7:7d:
                    16:4c:12:69:4c:ce:b7:9b:f7:38:41:58:cf:0f:b9:
                    be:6a:eb:54:ca:63:1c:e5:6b:d7:26:42:df:bc:6a:
                    4f:6d:75:05:25:2f:75:05:d4:8d:b4:97:85:10:27:
                    e9:00:f1:b6:fd:76:8e:be:dc:48:47:c1:96:9f:ad:
                    31:9d:7a:59:12:95:8c:d2:0b:38:63:5a:f1:87:aa:
                    84:43:58:ea:73:14:ed:db:af:0b:8f:50:c6:f6:33:
                    26:22:2e:b3:82:5e:0f:1a:9e:cc:1b:64:d4:95:18:
                    ae:f1:89:6d:7f:22:ce:6f:1d:cc:77:b6:78:1b:8a:
                    46:78:31:07:41:69:9d:bd:e1:fe:d6:87:5c:f2:d4:
                    6e:b7:05:e8:0f:43:1e:f4:d6:61:23:6f:50:70:fa:
                    04:f7:bc:b9:9c:4a:9c:07:09:66:cb:b9:22:95:7b:
                    0a:7b:85:94:a4:77:2d:7f:9e:40:e4:cf:17:3d:a4:
                    13:12:44:e4:f5:52:1d:d9:d1:bc:c2:a1:fb:fa:9b:
                    44:a4:43:e5:81:d6:e2:9f:92:ec:9b:d2:53:0f:f1:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A9:3F:F2:E8:70:4F:68:07:65:28:5D:7D:59:EA:B1:90:70:42:1C
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37302e3137362e302f32302d3230203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:c9:da:46:be:b9:e9:2f:d9:08:a7:89:3d:d7:e1:f7:44:4b:
         d7:0e:90:10:4d:26:b1:28:89:d4:ea:e7:8b:c3:de:36:68:b3:
         d1:75:df:4d:00:e9:cd:c5:02:6f:19:7e:10:49:14:a2:17:0c:
         10:ba:32:d3:ba:be:b7:e2:6d:52:9b:7a:43:2f:c2:a3:ed:bb:
         fb:53:6a:1f:04:1b:86:28:4f:8e:01:be:12:f3:23:9e:e4:c8:
         d6:ed:9c:34:4b:da:c3:bb:5a:08:51:f3:f3:fc:18:78:00:c4:
         ab:98:0a:37:2d:78:59:38:77:a8:35:dc:8c:ba:6c:2e:09:38:
         db:fc:4f:af:02:e0:b8:f0:33:c3:26:48:c8:e6:ae:db:92:d4:
         d1:8c:6c:a6:a3:f5:0d:4f:03:8e:8d:a8:5b:f9:31:5c:9b:fd:
         57:3c:34:44:c8:8e:c5:cb:f6:ca:bc:8d:15:7f:4e:c2:1d:80:
         a5:58:dd:75:8c:de:9f:0a:23:92:5d:12:4f:fd:c4:55:a5:42:
         51:6c:d9:f0:85:d6:86:d5:d2:34:68:dc:21:2c:b2:6f:cc:8c:
         c3:7d:5c:a6:45:37:bc:6d:53:b9:4b:50:1e:f8:ee:80:eb:06:
         4b:1b:33:9c:99:25:2f:8a:dd:5e:39:bb:9a:74:81:6c:d5:cf:
         75:a5:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----