Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32322d3232203d3e20323633303837.roa
File:                     3137372e3133372e3230382e302f32322d3232203d3e20323633303837.roa (raw, json)
Hash identifier:          4Va+uEvVQ6bTQEshgq1/zy5ElXw3q7NylGJItH02iOU=
Subject key identifier:   30:D6:B6:C9:60:E4:28:6A:A5:28:32:F6:1F:9B:D3:DF:20:E2:B2:65
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       657C266343FB0E6A137AFD0EED0F8FBC37669EF5
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32322d3232203d3e20323633303837.roa
Signing time:             Wed 22 May 2024 17:34:40 +0000
ROA not before:           Wed 22 May 2024 17:29:40 +0000
ROA not after:            Wed 21 May 2025 17:34:40 +0000
asID:                     263087
IP address blocks:        177.137.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7c:26:63:43:fb:0e:6a:13:7a:fd:0e:ed:0f:8f:bc:37:66:9e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: May 22 17:29:40 2024 GMT
            Not After : May 21 17:34:40 2025 GMT
        Subject: CN=30D6B6C960E4286AA52832F61F9BD3DF20E2B265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:14:ee:79:33:04:74:c2:95:b1:e4:58:12:
                    e6:20:c5:9b:9f:88:d9:7a:a0:bc:6f:9a:10:1f:3b:
                    51:5d:ab:82:72:fc:55:ac:dc:ce:4c:a2:7c:38:4d:
                    8f:4a:e0:91:eb:6f:68:41:4f:ad:19:68:fb:0d:49:
                    3a:88:e7:47:4a:44:8b:0a:c7:bf:ec:86:7d:58:ea:
                    54:d0:af:c3:a1:5b:71:8e:c1:94:96:41:98:44:3f:
                    08:9d:da:e8:18:b1:99:da:8a:f4:4e:96:27:1e:fa:
                    d9:23:d2:47:b5:39:47:97:f9:68:79:14:91:6a:9a:
                    f5:dd:6c:f8:d6:bd:2f:ae:e9:a1:d2:41:fa:f8:2b:
                    ad:20:22:c3:91:50:30:0b:89:c6:48:a1:2a:05:cf:
                    1c:32:41:af:65:1d:a3:94:d7:fb:47:3a:db:59:70:
                    33:b3:aa:57:ae:26:ff:19:90:cb:64:c8:24:ce:c3:
                    57:7e:59:c5:cc:54:08:83:92:87:43:b9:ae:a2:3f:
                    84:6a:17:27:6d:c3:7e:6f:5a:6c:f8:ad:e9:48:d5:
                    d3:c8:b5:70:6a:26:0e:f6:32:e6:21:5f:17:86:41:
                    7f:86:88:6f:42:39:6e:19:b8:9f:8b:75:63:a7:14:
                    ad:f3:3d:a0:40:e6:cd:4b:3a:16:81:45:19:9b:a8:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D6:B6:C9:60:E4:28:6A:A5:28:32:F6:1F:9B:D3:DF:20:E2:B2:65
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32322d3232203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:de:c4:c7:e9:f9:42:a6:02:7c:37:49:75:4a:88:dc:36:64:
         91:6a:a1:bb:72:4e:36:0f:a1:a5:5a:54:11:d4:bd:84:6b:35:
         1d:ab:d9:9a:bc:2f:55:91:4d:fe:39:1f:4f:80:e5:4d:6a:ca:
         17:ae:5e:bf:b7:52:c3:2c:17:63:24:81:aa:18:17:9c:82:b5:
         c1:4a:af:92:ea:5f:84:4e:d4:8a:25:c3:73:81:09:30:8b:a4:
         6b:22:7e:41:1a:fe:b7:7c:c1:9d:88:77:1c:dd:ed:92:e1:c3:
         fb:2e:20:9b:14:3a:82:5f:e5:67:7d:cc:55:ce:d5:4f:17:d6:
         82:f6:90:71:b9:d9:65:b4:bd:36:7c:8a:ba:70:40:ca:41:2b:
         3d:39:53:30:6a:a2:70:4f:de:d9:68:53:7f:1e:72:6a:46:1b:
         0a:05:52:93:67:d5:eb:69:f3:0e:80:3a:04:7a:34:cf:85:38:
         61:a6:66:d7:8b:0f:92:df:c9:9a:b5:f1:f9:72:54:c9:c6:14:
         64:4f:2a:15:c5:e2:36:48:4d:84:2e:7d:e1:12:1b:a4:a7:8f:
         e3:27:b7:4a:10:c8:aa:d5:03:9e:86:7b:6b:c5:b7:bc:54:a6:
         84:a6:21:9b:71:7f:cb:a6:3c:88:32:a1:a0:0f:21:59:28:7c:
         42:fc:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org