Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231382e302f32332d3233203d3e20323633303837.roa
File:                     3137372e3133372e3231382e302f32332d3233203d3e20323633303837.roa (raw, json)
Hash identifier:          ww9Twe4m+GJhQ+3y7ZKFEcuDjXYqe0rN63RD6tnQFxI=
Subject key identifier:   16:BE:51:A2:20:18:91:9E:4F:39:10:54:C8:FF:F1:78:E6:58:A5:47
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       4130A95FA7ACF82A6C86FE217B07DA7320B4DF09
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231382e302f32332d3233203d3e20323633303837.roa
Signing time:             Thu 18 Apr 2024 14:31:33 +0000
ROA not before:           Thu 18 Apr 2024 14:26:33 +0000
ROA not after:            Thu 17 Apr 2025 14:31:33 +0000
asID:                     263087
IP address blocks:        177.137.218.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 22 May 2024 17:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:30:a9:5f:a7:ac:f8:2a:6c:86:fe:21:7b:07:da:73:20:b4:df:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: Apr 18 14:26:33 2024 GMT
            Not After : Apr 17 14:31:33 2025 GMT
        Subject: CN=16BE51A22018919E4F391054C8FFF178E658A547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a1:7f:4a:08:b2:b9:ef:68:7b:cd:aa:52:f7:
                    16:f1:fd:23:3d:ea:96:46:3f:be:47:17:f9:dd:e1:
                    81:17:51:b6:af:1e:04:38:63:fd:e7:8c:de:73:96:
                    47:c3:dc:78:82:ee:c6:94:74:c6:aa:3d:ba:68:95:
                    3e:0c:48:11:55:5f:50:50:cb:93:a0:32:64:72:d8:
                    7c:51:7c:07:01:f4:fc:a0:a6:e1:2b:13:76:8e:d0:
                    64:d3:ce:92:b8:ca:5d:f8:78:b4:31:c9:93:39:b8:
                    a8:56:8e:25:f6:6b:d0:1d:f0:bb:6e:28:3d:7f:1d:
                    2c:84:16:90:35:a1:f4:da:18:f6:e7:fe:16:37:06:
                    4f:ff:0c:7b:17:b6:bc:66:00:bb:5f:58:5a:b9:aa:
                    d0:16:99:5e:02:37:d6:e2:17:3a:2c:29:77:a5:15:
                    f5:df:3f:ba:d0:bb:dc:28:2f:77:4a:cc:82:38:e9:
                    b2:86:de:51:93:6a:67:b1:96:d4:0a:10:a0:8b:0f:
                    d8:7d:2b:47:03:3c:ca:7b:40:e4:0c:e1:ed:88:05:
                    3e:89:bc:1c:74:d9:48:a6:19:29:91:e7:d0:eb:70:
                    13:6d:4f:eb:03:a8:2c:a1:16:0f:03:6b:a2:6f:a7:
                    af:38:34:e4:38:4a:a5:5f:d7:4b:ab:46:49:00:70:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BE:51:A2:20:18:91:9E:4F:39:10:54:C8:FF:F1:78:E6:58:A5:47
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3231382e302f32332d3233203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:f2:75:6c:03:92:68:ae:10:6e:78:ab:78:c4:dc:44:e2:64:
         57:cd:d1:2c:b4:cf:ab:73:a3:66:85:24:26:29:28:ae:0a:a9:
         0c:5a:49:da:5a:6c:1e:75:b6:24:5d:d5:49:7e:55:a4:9d:76:
         3f:0f:a7:d8:f3:a6:6f:df:fb:8b:c2:61:c1:6c:79:5d:96:56:
         64:9a:f7:c9:17:57:a9:fb:c5:ea:57:1d:54:c5:d8:64:68:1e:
         19:9d:d4:77:47:9c:b8:e3:a0:a1:52:16:b9:2f:f8:5c:d3:8e:
         5c:2e:df:ad:bd:e3:62:be:ea:7f:5d:4b:11:0b:f2:a5:67:5b:
         81:8f:fd:8a:ae:76:8c:43:19:f4:48:65:16:5b:5f:96:a1:00:
         c6:2c:fd:de:c3:36:e8:78:04:e4:89:d0:20:0c:3d:5b:e9:a3:
         eb:c9:56:68:81:68:cc:6f:39:4a:34:06:d4:e8:5b:b4:f7:36:
         08:55:e0:1b:af:87:64:a3:c8:f2:73:21:88:1c:74:62:fa:d3:
         60:a6:55:f8:d3:8d:a1:d9:cc:af:5c:cc:2e:3d:35:f5:d4:f9:
         21:3d:2f:37:db:fa:80:6d:7f:d8:d7:e6:51:3a:59:16:9a:9b:
         6b:f2:39:31:85:65:04:b1:e7:1b:ee:3e:d9:42:29:08:26:b7:
         b0:ec:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org