Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231322e302f32322d3234203d3e20323633303837.roa
File:                     3137372e3133372e3231322e302f32322d3234203d3e20323633303837.roa (raw, json)
Hash identifier:          L/tNN5H9IJW4KPjzs/1mXpzEHYLz1Ch2ZEfY5+/1S4A=
Subject key identifier:   68:87:2C:55:03:54:A3:17:ED:52:38:70:86:3B:8E:64:92:0D:37:5E
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       1409656B471EDDFFD75F41B02535EE4488824A70
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231322e302f32322d3234203d3e20323633303837.roa
Signing time:             Wed 22 May 2024 17:33:19 +0000
ROA not before:           Wed 22 May 2024 17:28:19 +0000
ROA not after:            Wed 21 May 2025 17:33:19 +0000
asID:                     263087
IP address blocks:        177.137.212.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:09:65:6b:47:1e:dd:ff:d7:5f:41:b0:25:35:ee:44:88:82:4a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: May 22 17:28:19 2024 GMT
            Not After : May 21 17:33:19 2025 GMT
        Subject: CN=68872C550354A317ED523870863B8E64920D375E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:97:39:37:3c:95:a0:9f:1b:c8:f0:5e:f0:53:
                    05:74:a5:d1:e5:36:e6:4a:25:4e:d9:56:f5:ce:39:
                    a0:9e:42:ae:a7:7b:ab:1c:78:08:45:bf:e5:72:9d:
                    8c:e6:8a:46:03:d3:26:3e:c5:11:07:9b:49:84:80:
                    d8:e6:83:d2:18:87:ec:16:68:b9:31:8c:cb:71:f3:
                    c7:fb:6d:41:a1:e1:5c:0a:1d:fb:33:a3:dc:5f:e8:
                    05:9c:fe:01:73:d4:38:6d:b7:1c:ea:39:b4:ec:76:
                    06:bc:1f:70:34:e8:18:bc:ef:81:e4:86:a6:31:38:
                    94:c3:3f:82:35:e9:65:1f:f2:57:91:65:b0:c6:1e:
                    eb:41:55:43:f8:c3:59:8c:0b:33:7f:ee:72:0a:62:
                    7a:a0:fc:b0:29:3a:fe:13:64:5e:20:3b:19:52:6c:
                    d0:7b:12:09:8b:71:40:e1:69:6f:ff:49:9d:1e:7f:
                    17:1f:9d:d2:f9:c4:cf:ec:4e:b0:3c:ce:32:5a:a0:
                    cd:5c:09:53:e7:ef:af:4e:c2:22:3d:91:bb:17:8f:
                    36:af:a2:0f:16:2e:ca:76:0c:c0:05:91:85:ee:59:
                    41:20:39:dd:fc:12:ca:e8:df:79:7f:7f:84:87:49:
                    7f:a1:7c:bd:48:dd:5a:ff:89:1e:c6:49:6d:9e:e6:
                    22:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:87:2C:55:03:54:A3:17:ED:52:38:70:86:3B:8E:64:92:0D:37:5E
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231322e302f32322d3234203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:41:d6:74:7a:d0:32:53:51:ac:a2:31:51:a3:e2:43:31:29:
         b1:11:6b:af:12:2e:26:53:77:79:8a:d2:9d:b5:d4:50:ef:11:
         32:f9:76:9e:db:2d:9f:cb:e4:37:39:e0:ba:47:b5:22:03:be:
         34:3b:33:28:80:09:72:bc:e8:e6:d6:67:e4:cd:36:37:63:57:
         5a:2b:82:0a:41:bb:e5:f5:0f:ab:4d:c8:4c:00:62:96:7e:d5:
         a6:37:1e:e4:ae:1b:47:f1:ba:43:84:26:03:6b:7c:1a:95:86:
         92:f3:45:cf:ff:2d:c3:ad:a7:76:f6:af:98:22:d9:2c:3c:2c:
         5f:83:76:c7:e2:53:0e:09:40:67:38:14:65:6c:57:ef:de:d7:
         d0:f8:cc:48:0c:0e:5b:2f:69:b9:44:74:e7:4d:72:79:08:13:
         10:55:a1:0f:ab:2d:f9:64:65:ae:d8:8d:1f:9a:c3:c1:7c:c6:
         04:a5:2e:6c:96:74:8d:0e:be:51:5a:08:bf:a4:dd:90:ed:8a:
         de:99:75:14:36:2f:e8:43:d8:d3:43:c8:31:aa:5a:ec:56:19:
         7e:83:f0:b0:66:42:18:56:96:0f:88:a1:98:c0:a6:8e:a9:26:
         b3:52:52:db:67:8d:ad:4c:42:e1:1f:7d:03:65:a4:7f:18:fa:
         b3:9e:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org