Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38352e38382e302f32322d3234203d3e20323632373733.roa
File:                     3137372e38352e38382e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          /aHpktgA2UwlKh/8bF/mGSVWvCCujrOZbXmGcG/WbOk=
Subject key identifier:   BB:10:6A:41:3F:F3:82:11:F8:0B:8A:C0:4A:DC:D3:00:FB:F8:92:F3
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       66794FD28947F51CCC92C9F15F03426A7DBCDE1C
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38352e38382e302f32322d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:28 +0000
ROA not before:           Wed 14 Aug 2024 12:03:28 +0000
ROA not after:            Wed 13 Aug 2025 12:08:28 +0000
asID:                     262773
IP address blocks:        177.85.88.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:79:4f:d2:89:47:f5:1c:cc:92:c9:f1:5f:03:42:6a:7d:bc:de:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:28 2024 GMT
            Not After : Aug 13 12:08:28 2025 GMT
        Subject: CN=BB106A413FF38211F80B8AC04ADCD300FBF892F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:a9:66:e6:fe:aa:64:0b:94:09:a8:25:d5:
                    69:f5:98:88:49:cd:e3:2a:5a:2c:dd:7b:53:57:32:
                    49:42:29:42:9a:51:c7:7e:ef:1c:86:b9:46:92:0d:
                    6b:1a:ed:28:ed:fb:73:32:ef:37:96:93:01:65:e7:
                    0a:63:97:2b:91:a4:6e:5a:6d:7f:71:0f:68:a4:5f:
                    52:4a:bb:50:c1:79:96:c6:e8:8f:c3:c2:21:05:c2:
                    f1:37:d1:23:de:4d:73:20:b1:79:f2:06:5c:fe:eb:
                    e9:df:e1:b4:08:17:50:23:e1:9c:7c:ee:7a:e6:0a:
                    c8:08:18:6e:49:56:12:9d:ca:30:1f:ea:31:e3:86:
                    9d:2e:78:cc:6f:a9:b0:74:a1:f2:32:38:79:f4:22:
                    10:23:47:39:0d:28:39:84:8a:c3:1a:e6:99:20:ef:
                    99:f3:7c:59:17:22:40:0f:60:cf:44:a8:56:83:ab:
                    08:aa:cd:ac:3c:2b:2a:8e:33:81:ec:53:b3:71:ff:
                    ec:23:2d:7e:45:c4:dc:e9:b5:90:d6:94:ea:c6:5c:
                    4a:6b:ee:aa:e9:f2:20:bf:fb:6e:e5:22:75:4b:5e:
                    e8:11:af:0c:d3:80:7d:d8:15:4a:44:71:20:d2:57:
                    ad:a4:1b:a8:41:7b:78:32:22:dc:cc:d0:64:23:7a:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:10:6A:41:3F:F3:82:11:F8:0B:8A:C0:4A:DC:D3:00:FB:F8:92:F3
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38352e38382e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:40:a3:24:b8:cb:8a:59:7b:64:f7:88:51:a1:95:d3:fd:0f:
         7d:8f:05:83:62:8f:e3:f0:f2:6a:44:d1:3e:29:5f:9c:1f:ea:
         17:b1:95:dd:ac:11:f2:1f:13:ca:82:c1:3e:4b:dd:27:46:cd:
         b2:36:bd:3f:87:53:50:d6:e5:7b:c5:0a:bd:ff:f5:d9:c8:cd:
         99:a9:7a:d7:d8:bb:d5:8b:f8:ba:2a:71:ac:74:c7:53:98:80:
         0a:11:89:52:36:9c:d1:ff:c2:a7:d2:91:96:35:76:03:c3:b5:
         44:72:62:82:f9:ed:08:c7:75:7a:56:03:e7:a5:15:1b:ec:14:
         17:01:22:1c:b6:40:bb:85:dd:49:3c:7f:6a:d3:c2:25:2b:25:
         17:e6:b4:97:91:25:28:b1:58:40:e3:a4:e4:a7:cb:eb:dc:a9:
         1b:84:3b:5b:d7:ad:8f:47:9f:eb:63:48:f8:f0:51:f6:fa:1d:
         af:7a:56:2b:6c:e5:95:51:ac:1e:e5:59:12:24:40:bb:3c:66:
         5f:46:c3:04:ad:72:25:95:27:ec:12:44:8e:dd:b2:19:0c:08:
         f5:a0:c9:40:0c:fa:0c:e1:ad:a4:e4:7c:87:bd:d4:47:dd:96:
         ee:ca:24:1c:80:3b:3e:c7:57:9f:12:f9:90:84:cd:35:ec:4c:
         ab:5a:c4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:03:29 2024 by rpki-client on console-fra.rpki-client.org