Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32302d3234203d3e20323633303837.roa
File:                     3137372e3133372e3230382e302f32302d3234203d3e20323633303837.roa (raw, json)
Hash identifier:          1tHzwUVPr+0M3baulo5jzV7jgEuoqRmwoWavhhsLWak=
Subject key identifier:   60:55:74:3F:DA:EA:56:41:41:83:99:A6:79:BF:6D:9A:53:52:52:3E
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       64EA18E5DB8EC58CF7F02CD0F077C5A7600ABE9D
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32302d3234203d3e20323633303837.roa
Signing time:             Wed 05 Jun 2024 18:52:10 +0000
ROA not before:           Wed 05 Jun 2024 18:47:10 +0000
ROA not after:            Wed 04 Jun 2025 18:52:10 +0000
asID:                     263087
IP address blocks:        177.137.208.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 13:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ea:18:e5:db:8e:c5:8c:f7:f0:2c:d0:f0:77:c5:a7:60:0a:be:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: Jun  5 18:47:10 2024 GMT
            Not After : Jun  4 18:52:10 2025 GMT
        Subject: CN=6055743FDAEA5641418399A679BF6D9A5352523E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:32:96:a1:3b:94:5a:89:5c:85:84:67:5b:d2:
                    57:a2:a1:7f:56:22:26:9d:57:d9:ed:81:57:e7:8e:
                    c1:fb:d4:44:e8:0b:75:82:65:64:ee:8a:24:ed:7c:
                    4c:f9:70:06:61:2f:05:26:19:00:c4:62:12:a0:0c:
                    5f:51:d6:59:13:89:cc:ef:d1:9e:a3:b9:f4:bc:02:
                    bb:67:16:08:85:0d:77:1a:23:fc:06:1c:ad:c2:ff:
                    c5:36:0d:09:36:e3:4c:d6:16:b6:8c:60:0b:93:81:
                    8b:a6:42:08:d4:e4:2d:19:1d:43:fe:d1:e5:56:6c:
                    26:ee:e1:cc:d9:69:82:b0:7c:92:ef:d3:31:99:f3:
                    bf:00:1f:97:e1:b5:63:c2:ef:7b:4f:4b:40:c7:f7:
                    50:b2:26:6b:92:88:d9:73:bb:d9:87:0e:87:a9:1a:
                    58:87:7c:71:44:3f:63:ea:0e:e8:62:e0:ff:b1:30:
                    ed:d4:f7:fd:a0:92:ea:0a:d0:a2:c1:6c:ea:8f:45:
                    57:c8:89:5f:70:ba:f0:be:a8:db:a3:86:1e:5e:6a:
                    4e:e6:c5:67:f3:86:00:76:dc:cb:4e:c4:59:67:55:
                    54:4a:d7:dc:19:70:dc:17:1b:8c:4f:6b:ad:80:1c:
                    2b:5f:54:f1:ad:17:a2:5e:b0:dd:71:33:cf:3f:ca:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:55:74:3F:DA:EA:56:41:41:83:99:A6:79:BF:6D:9A:53:52:52:3E
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32302d3234203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:27:28:97:b5:58:e7:16:a5:37:8f:8f:5d:c2:ed:7d:18:c3:
         05:c3:65:24:28:42:0f:df:16:0d:9d:0e:d9:e9:b5:f9:37:f3:
         f0:73:6b:3b:d3:d8:03:ec:39:3b:3d:15:c5:dc:fe:c4:d6:b0:
         3c:eb:e8:01:0c:a3:0e:01:3a:bc:70:87:70:80:01:52:85:3b:
         36:67:51:19:0f:11:5c:4a:36:17:72:5b:33:1e:22:34:06:b1:
         9b:33:96:00:cc:e5:b4:d2:f9:31:19:0b:3c:90:6d:c2:a7:5d:
         d6:c5:38:5b:1c:c0:69:fa:0e:a0:76:1f:c5:e0:21:d9:f7:cb:
         3f:3d:a8:63:ae:6f:8c:c3:a9:90:95:4e:d8:b9:41:c0:65:a5:
         da:33:e5:7d:28:6d:2a:73:5f:da:4e:06:4a:14:8a:5b:c5:05:
         09:93:c2:ce:6f:5d:0f:12:7b:62:60:b2:31:1d:3c:31:cd:2d:
         2d:b6:e9:16:42:d5:9b:ce:ec:88:3d:73:00:01:0d:0d:55:02:
         01:a0:b9:09:2f:47:79:eb:34:7a:8c:1a:97:bd:61:f3:a3:97:
         13:26:3e:3a:fc:b2:7c:f2:67:08:1f:af:8d:1c:e6:7e:0d:f2:
         fa:6a:7a:97:06:5f:4f:19:0e:35:e0:d6:a5:cc:d2:da:34:41:
         92:64:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 15:01:49 2024 by rpki-client on console-fra.rpki-client.org