Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e38382e302f32312d3231203d3e20323632373733.roa
File:                     3137372e38362e38382e302f32312d3231203d3e20323632373733.roa (raw, json)
Hash identifier:          gQZf3PoIdQ/0MvmIjGbVLJbn5iWS0LFZWWX8KcRn+kw=
Subject key identifier:   9C:94:8A:5C:72:3C:84:19:1E:79:65:CD:11:17:50:7A:29:81:9E:9D
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       18C3FA3BE2C5C02B95CD48EC7C8616F4F248FA29
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e38382e302f32312d3231203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:27 +0000
ROA not before:           Wed 14 Aug 2024 12:03:27 +0000
ROA not after:            Wed 13 Aug 2025 12:08:27 +0000
asID:                     262773
IP address blocks:        177.86.88.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c3:fa:3b:e2:c5:c0:2b:95:cd:48:ec:7c:86:16:f4:f2:48:fa:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:27 2024 GMT
            Not After : Aug 13 12:08:27 2025 GMT
        Subject: CN=9C948A5C723C84191E7965CD1117507A29819E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d1:0f:b5:e6:16:f7:74:7e:87:32:4e:9b:09:
                    a0:a6:10:06:bc:f9:5c:06:c3:b0:0d:ee:ed:c8:df:
                    0f:02:b3:97:e4:ba:e4:ae:fd:f9:96:a9:f9:50:70:
                    2e:b0:52:a3:7e:b8:4a:a0:bc:f6:e5:71:fa:e5:1f:
                    93:9b:f4:03:41:12:43:1d:00:6a:b6:dd:be:0e:ac:
                    11:d3:84:8a:6c:a3:e9:63:af:29:dd:92:88:d6:4e:
                    3d:0f:23:e8:87:f6:d1:3b:27:0f:51:31:05:68:be:
                    c9:28:c3:a4:33:e6:56:80:f4:18:54:18:64:40:94:
                    b7:48:1e:70:cb:e9:c5:c8:df:8e:94:3d:74:f6:87:
                    dd:77:b4:5a:c7:f6:5d:02:ec:0f:16:6e:85:74:aa:
                    ff:a1:52:a9:42:f0:b2:8f:51:c2:ed:29:18:8d:28:
                    93:b0:40:d2:bb:af:90:26:78:e9:13:c4:a5:45:0b:
                    30:49:12:76:da:1a:a0:2e:8f:65:f2:df:46:0a:c8:
                    90:0c:f7:39:12:92:75:17:ff:59:2a:53:79:6a:de:
                    df:53:ec:26:1f:82:3a:21:aa:f8:4b:06:2b:fb:ed:
                    a7:ef:3d:8d:33:cb:49:23:94:0a:61:b0:1b:0c:dd:
                    17:82:5f:c1:60:ea:01:7a:af:88:33:8a:1f:53:fe:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:94:8A:5C:72:3C:84:19:1E:79:65:CD:11:17:50:7A:29:81:9E:9D
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e38382e302f32312d3231203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:d6:03:00:40:59:12:d4:02:98:22:50:df:75:9d:88:7f:4e:
         9c:a2:6f:62:d1:f0:8b:fc:88:2e:6c:13:55:31:1e:90:1b:ee:
         98:29:5a:a2:0a:2a:e2:10:c0:da:e5:3a:d1:ce:b8:e2:a2:32:
         f7:d3:2e:60:ee:51:28:48:0d:73:21:92:b8:39:cb:ac:7d:76:
         c4:84:e4:fe:49:ed:48:6b:22:75:ca:d2:38:8e:09:53:dc:51:
         74:48:89:aa:67:04:f7:84:91:46:92:3c:cb:97:31:89:c9:a2:
         04:36:ed:4d:63:a7:2a:4c:95:62:ef:c6:7c:6e:58:85:6a:a5:
         a3:7e:6f:cd:d9:7f:9c:eb:41:0e:95:ce:60:06:fe:61:05:a2:
         01:cc:07:70:06:41:69:d8:cf:b5:c3:cd:93:5b:ae:f7:5f:d2:
         b3:a1:b8:3d:f6:40:65:a1:12:0a:5f:7b:b5:48:cb:36:cd:15:
         de:66:a9:a4:01:8b:22:b5:41:77:41:46:e0:65:3e:38:c5:c5:
         b7:d2:c1:79:8f:89:57:67:b5:19:26:43:cb:5a:01:bd:d6:92:
         7d:b8:e1:a3:eb:7c:28:41:ab:23:d4:f3:c8:5b:3f:68:37:d6:
         05:31:67:9b:15:d0:dd:75:92:22:f1:b3:26:bb:8b:cf:32:67:
         6f:d5:15:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:03:29 2024 by rpki-client on console-fra.rpki-client.org