Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e38382e302f32332d3233203d3e20323632373733.roa
File:                     3137372e38362e38382e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          Y96a8DRLZMqHgD6lkVFaBsphd1B/0HRPo+Eh+I1qqys=
Subject key identifier:   8D:E4:D9:BA:6A:FD:7D:8B:FE:7C:98:B9:C3:A9:F7:8D:BD:E3:CB:35
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       6AC094E46CBAE0AD9922615FC4B3AB40D42405C3
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e38382e302f32332d3233203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:28 +0000
ROA not before:           Wed 14 Aug 2024 12:03:28 +0000
ROA not after:            Wed 13 Aug 2025 12:08:28 +0000
asID:                     262773
IP address blocks:        177.86.88.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c0:94:e4:6c:ba:e0:ad:99:22:61:5f:c4:b3:ab:40:d4:24:05:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:28 2024 GMT
            Not After : Aug 13 12:08:28 2025 GMT
        Subject: CN=8DE4D9BA6AFD7D8BFE7C98B9C3A9F78DBDE3CB35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:20:1e:48:15:ef:57:fb:39:e8:05:cd:a7:
                    a7:e6:ef:76:ba:fc:f5:1f:52:75:35:f0:91:ab:17:
                    3a:68:08:58:d8:47:d2:e8:d0:39:e1:3e:fa:d9:48:
                    ed:e6:c8:d4:de:7b:f8:42:d3:0d:71:3a:1e:de:f2:
                    3a:5e:ff:fa:03:34:bf:3f:16:9d:0b:80:68:3a:e1:
                    4d:64:38:d5:13:6f:c8:9c:08:2d:e8:ad:fe:92:11:
                    f5:b2:c8:48:c2:72:56:f5:eb:e0:de:55:23:56:21:
                    3b:53:47:0e:a3:e9:66:c3:62:03:32:b8:78:d4:1a:
                    33:ae:cd:0f:d8:d5:e5:5d:9e:a2:48:7d:49:1f:24:
                    99:99:82:5d:7d:1a:48:44:1c:6b:aa:1a:5f:3a:ae:
                    cc:38:a6:07:a5:32:1c:c0:a4:75:92:4c:e9:df:f6:
                    13:8d:a1:fd:ca:89:0c:35:d0:84:d1:b0:0d:d1:7d:
                    09:80:05:01:92:8e:f1:db:0a:88:cc:98:53:1b:35:
                    44:4a:88:db:35:cb:de:90:d5:b1:c2:4a:53:90:80:
                    82:45:40:d4:0c:1b:9f:d2:f0:be:f7:b0:23:3b:d1:
                    30:e0:4e:28:b0:2f:b8:dd:27:5a:bf:9b:d1:47:d1:
                    8e:aa:18:93:79:9d:10:ea:b8:32:9b:ae:3e:2c:84:
                    ea:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E4:D9:BA:6A:FD:7D:8B:FE:7C:98:B9:C3:A9:F7:8D:BD:E3:CB:35
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e38382e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:49:17:71:f4:68:31:12:a0:c7:27:cd:d5:66:39:dd:57:e2:
         eb:83:90:90:11:15:73:cc:fa:79:a0:0f:46:83:c6:a6:d2:04:
         2e:6c:a4:34:ab:48:a1:de:19:72:71:0a:84:63:4d:eb:24:30:
         7c:95:40:ac:f8:53:7c:e9:9a:22:13:7e:c1:b3:19:51:0c:2d:
         e7:95:83:7c:bc:d1:3d:e4:12:c5:f7:a5:b9:08:b3:a9:4c:a4:
         be:85:f4:b4:e3:05:81:53:90:22:c6:ec:59:8b:39:15:6b:d2:
         5b:7e:16:62:c6:6e:53:c2:5c:75:ca:ea:69:1a:3e:cc:71:26:
         b5:42:84:dd:8b:36:d9:6b:db:4b:48:fb:07:6b:b9:0d:77:20:
         26:58:f1:10:45:fd:0f:d1:7f:69:db:82:a4:07:71:c6:e8:37:
         5c:cc:09:fc:c3:6b:ef:f4:94:eb:6b:bc:14:04:d4:69:98:94:
         32:26:6d:61:79:05:23:9c:ef:bb:87:d9:b2:d2:d4:fa:73:97:
         62:da:fd:f4:b2:51:11:f5:b4:9b:8d:17:c7:3a:7a:9d:a6:92:
         fb:f8:79:c7:6e:c9:95:c2:98:ae:76:59:6d:3c:a2:c9:4e:03:
         80:79:68:52:36:4d:a0:7e:a3:62:e2:b8:2c:84:a5:0e:32:1b:
         98:91:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:03:29 2024 by rpki-client on console-fra.rpki-client.org