Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37332e3230302e302f32312d3231203d3e20323632373733.roa
File:                     3137372e37332e3230302e302f32312d3231203d3e20323632373733.roa (raw, json)
Hash identifier:          LAMOJrnp0fBPxoyZLGhr7SfOmttamjTgIpNrJMK07/o=
Subject key identifier:   12:95:F5:4E:D2:75:9F:4A:BE:12:CD:FD:00:74:AA:1C:C4:D7:54:3C
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       2983C53E6060927930B5BED742D08B9A2DA090EF
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37332e3230302e302f32312d3231203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:26 +0000
ROA not before:           Wed 14 Aug 2024 12:03:26 +0000
ROA not after:            Wed 13 Aug 2025 12:08:26 +0000
asID:                     262773
IP address blocks:        177.73.200.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:83:c5:3e:60:60:92:79:30:b5:be:d7:42:d0:8b:9a:2d:a0:90:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:26 2024 GMT
            Not After : Aug 13 12:08:26 2025 GMT
        Subject: CN=1295F54ED2759F4ABE12CDFD0074AA1CC4D7543C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:f2:51:97:ae:db:5f:9a:e0:b9:51:af:04:
                    24:c5:94:4a:e8:d4:cd:8d:cc:42:cc:d9:0e:bb:46:
                    e3:1e:94:4f:0a:fa:c1:93:21:58:e5:79:a9:a2:4c:
                    4e:82:86:d7:51:8c:38:da:2a:d7:12:7e:c6:e6:65:
                    0c:39:92:99:4b:79:38:b3:62:de:12:c1:b9:01:37:
                    f2:51:62:7b:6e:9f:89:7a:16:91:24:e8:98:d5:45:
                    0e:e2:8e:be:f1:e4:d8:6c:94:62:c5:e7:8f:06:02:
                    9c:85:b4:a6:3b:9d:c7:a8:87:e6:40:fa:52:cc:b5:
                    9c:3c:b3:6d:ec:75:d1:1e:7a:80:d6:c6:92:46:64:
                    55:15:fc:dc:5a:4f:76:5d:5b:81:a5:6e:55:43:cf:
                    9f:0f:e1:fb:23:29:7b:06:f7:2e:7c:78:86:a5:0b:
                    89:9a:47:65:da:1a:29:c0:2f:a6:af:7a:50:43:d4:
                    08:73:97:0e:6e:66:b5:2d:05:96:24:aa:ef:7b:3d:
                    15:6a:12:58:bd:f9:3d:ba:5e:f8:be:96:92:de:5d:
                    6c:c8:c3:e6:bf:9c:00:44:7b:69:9a:96:18:54:8f:
                    3a:74:83:f7:70:c1:4f:95:96:6c:f2:61:60:04:54:
                    d6:04:0c:fe:36:c0:5b:71:eb:c6:04:92:86:1c:1f:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:95:F5:4E:D2:75:9F:4A:BE:12:CD:FD:00:74:AA:1C:C4:D7:54:3C
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37332e3230302e302f32312d3231203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:15:f8:77:c0:2e:b8:ae:7b:b6:b4:97:99:d1:2e:cd:52:b0:
         10:64:c1:67:0a:a8:d8:ce:ab:58:eb:a9:53:5b:08:65:7b:4d:
         87:97:f1:d1:8a:3b:c4:44:b0:97:e6:c0:68:dc:cc:52:f6:2e:
         aa:95:94:c4:ed:e6:20:5a:01:2a:15:d0:55:e1:33:fa:16:69:
         d3:2f:46:bd:84:c4:e3:d8:0c:ca:8e:87:fe:78:26:fc:87:d7:
         83:53:aa:b2:b1:d8:05:fb:7a:2d:ee:22:ca:81:49:20:12:91:
         79:b8:54:6f:f0:fa:aa:38:d3:f2:a3:07:ec:e6:f4:d1:b1:74:
         b3:c3:ff:10:22:12:45:9e:83:71:6d:88:ff:cc:d8:eb:6d:25:
         65:20:b4:24:8d:71:25:e8:b2:a7:5a:0e:b6:cf:14:7d:0b:ff:
         03:6f:1a:58:92:f5:03:6d:d0:1e:da:33:11:80:64:0f:1a:7f:
         e8:c1:aa:5c:ce:9a:18:27:23:f0:83:b5:db:88:33:21:d6:fb:
         29:f4:3f:21:3b:0d:e4:3e:bb:09:88:6a:78:6c:4c:d4:64:1e:
         fa:f3:a9:c0:fe:36:2c:74:9e:58:90:63:2a:69:fb:d3:ce:74:
         15:e1:24:a7:c1:c4:39:cd:60:3c:3b:0a:fd:af:aa:d3:b5:6d:
         02:a4:53:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:52 2024 by rpki-client on console-ams.rpki-client.org