Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32332d3234203d3e20323633303837.roa
File:                     3137372e3133372e3230382e302f32332d3234203d3e20323633303837.roa (raw, json)
Hash identifier:          6Dy9k21vBzlW19dXeUQcC3p0iH7UPybwwcZIPM1R8pA=
Subject key identifier:   59:0D:39:7A:31:1B:EA:E1:8F:EC:DB:49:D8:3F:1D:16:1B:4C:57:24
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       7EB4AE608EC034C25DA0542683694D2708F8FCE9
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32332d3234203d3e20323633303837.roa
Signing time:             Wed 22 May 2024 17:34:28 +0000
ROA not before:           Wed 22 May 2024 17:29:28 +0000
ROA not after:            Wed 21 May 2025 17:34:28 +0000
asID:                     263087
IP address blocks:        177.137.208.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b4:ae:60:8e:c0:34:c2:5d:a0:54:26:83:69:4d:27:08:f8:fc:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: May 22 17:29:28 2024 GMT
            Not After : May 21 17:34:28 2025 GMT
        Subject: CN=590D397A311BEAE18FECDB49D83F1D161B4C5724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:92:21:c1:2b:ec:47:de:1e:dc:ce:cf:be:
                    e5:4e:28:16:87:e8:c9:92:fd:6c:f9:e0:3e:02:7e:
                    22:96:03:bd:26:32:35:77:f1:a4:18:7d:7f:04:a6:
                    de:54:b1:9b:fe:e9:17:69:cd:94:50:a5:62:08:28:
                    fb:2d:3f:d7:16:ec:70:7e:58:72:8b:bd:56:4e:c7:
                    78:22:6b:7a:9f:ac:91:31:ef:90:a1:a0:ee:d4:84:
                    54:b4:ec:40:c4:d3:35:45:e2:e8:b8:e9:64:30:a5:
                    30:90:fa:df:ba:93:52:26:08:c2:ec:7b:71:0b:3d:
                    4c:5c:d8:0d:16:3d:1f:54:43:54:4f:aa:7d:a7:ff:
                    29:fb:18:1d:44:73:1b:2e:46:6e:ef:3e:0f:32:3c:
                    dc:c7:df:53:2a:56:2a:4c:bf:a3:bf:48:eb:60:59:
                    e7:aa:0c:73:0b:15:83:9c:d8:c0:fd:57:76:b2:40:
                    75:1a:c0:ae:52:c8:ca:4e:95:ad:57:52:d1:61:a2:
                    f1:30:aa:f5:ee:e3:19:01:82:3d:eb:49:f7:66:99:
                    02:69:cd:af:05:84:31:60:46:0b:ba:18:b1:15:38:
                    79:6e:5b:f0:59:17:c9:79:6c:28:1e:52:af:b3:2d:
                    ee:35:d3:8b:8f:ca:2c:d2:8a:20:fa:af:a5:25:42:
                    d6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0D:39:7A:31:1B:EA:E1:8F:EC:DB:49:D8:3F:1D:16:1B:4C:57:24
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32332d3234203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:36:00:6e:07:ba:88:a7:f8:08:2b:88:5b:05:92:1e:05:dd:
         02:b1:eb:2d:b1:85:b2:d8:7e:f4:93:66:51:9b:bb:5e:ba:97:
         fe:18:33:8f:88:45:51:23:b3:d4:55:2a:f4:1f:c5:cf:92:f0:
         0b:b2:d0:61:67:c1:db:1f:89:93:33:de:f2:91:0d:fa:8e:80:
         fe:9b:20:0f:e0:a0:f3:ad:c9:ad:fb:29:26:ae:5f:a7:a8:7d:
         c9:cd:30:dd:df:21:66:30:1c:29:40:89:a9:bf:07:7a:0b:08:
         4f:6a:7c:2b:63:62:b9:4a:74:c3:e1:51:85:0d:dc:4d:0e:36:
         cd:00:76:0c:54:37:bf:78:1c:77:bf:a4:91:e8:f7:68:d4:86:
         27:d8:e4:f2:b8:83:09:c4:33:85:56:fa:14:08:02:ba:28:4a:
         0c:cb:59:bf:b3:4f:93:88:34:54:23:3b:48:b5:ea:df:de:67:
         79:fc:4d:df:49:ec:f6:9c:ac:ef:55:c4:10:14:55:98:f2:c6:
         d9:80:01:02:ae:a9:50:64:8f:88:ad:41:f3:8f:88:71:46:b8:
         cc:2e:c6:25:5b:ac:87:b9:01:74:26:f0:e5:f4:48:e6:05:cd:
         20:f3:de:30:d1:ae:2b:3c:e2:cf:12:0f:66:19:2b:ce:ee:43:
         e7:e6:ad:02
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfrSuYI7ANMJdoFQmg2lNJwj4/OkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB
MzY0M0Y5NDAeFw0yNDA1MjIxNzI5MjhaFw0yNTA1MjExNzM0MjhaMDMxMTAvBgNV
BAMTKDU5MEQzOTdBMzExQkVBRTE4RkVDREI0OUQ4M0YxRDE2MUI0QzU3MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCczpIhwSvsR94e3M7PvuVOKBaH
6MmS/Wz54D4CfiKWA70mMjV38aQYfX8Ept5UsZv+6RdpzZRQpWIIKPstP9cW7HB+
WHKLvVZOx3gia3qfrJEx75ChoO7UhFS07EDE0zVF4ui46WQwpTCQ+t+6k1ImCMLs
e3ELPUxc2A0WPR9UQ1RPqn2n/yn7GB1EcxsuRm7vPg8yPNzH31MqVipMv6O/SOtg
WeeqDHMLFYOc2MD9V3ayQHUawK5SyMpOla1XUtFhovEwqvXu4xkBgj3rSfdmmQJp
za8FhDFgRgu6GLEVOHluW/BZF8l5bCgeUq+zLe4104uPyizSiiD6r6UlQtbDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUWQ05ejEb6uGP7NtJ2D8dFhtMVyQwHwYDVR0j
BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C
LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF
QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9L
RmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1CLzAvMzEz
NzM3MmUzMTMzMzcyZTMyMzAzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYz
MzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAbGJ0DANBgkqhkiG9w0BAQsFAAOCAQEANTYAbge6
iKf4CCuIWwWSHgXdArHrLbGFsth+9JNmUZu7XrqX/hgzj4hFUSOz1FUq9B/Fz5Lw
C7LQYWfB2x+JkzPe8pEN+o6A/psgD+Cg863JrfspJq5fp6h9yc0w3d8hZjAcKUCJ
qb8HegsIT2p8K2NiuUp0w+FRhQ3cTQ42zQB2DFQ3v3gcd7+kkej3aNSGJ9jk8riD
CcQzhVb6FAgCuihKDMtZv7NPk4g0VCM7SLXq395nefxN30ns9pys71XEEBRVmPLG
2YABAq6pUGSPiK1B84+IcUa4zC7GJVush7kBdCbw5fRI5gXNIPPeMNGuKzzizxIP
Zhkrzu5D5+atAg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org