Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232302e302f32322d3232203d3e20323633303837.roa
File:                     3137372e3133372e3232302e302f32322d3232203d3e20323633303837.roa (raw, json)
Hash identifier:          7O0aQAd8O/Qb8mVVQj0PGrct88DemBwMFi9zrJgLSfE=
Subject key identifier:   E3:99:94:65:3E:20:0D:E6:4F:0C:6F:B4:E6:B5:14:98:3E:8C:2E:59
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       3CF99F0C7632BE5BCDC2DC6C19F5E2BA600399E2
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232302e302f32322d3232203d3e20323633303837.roa
Signing time:             Wed 22 May 2024 17:35:30 +0000
ROA not before:           Wed 22 May 2024 17:30:30 +0000
ROA not after:            Wed 21 May 2025 17:35:30 +0000
asID:                     263087
IP address blocks:        177.137.220.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f9:9f:0c:76:32:be:5b:cd:c2:dc:6c:19:f5:e2:ba:60:03:99:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: May 22 17:30:30 2024 GMT
            Not After : May 21 17:35:30 2025 GMT
        Subject: CN=E39994653E200DE64F0C6FB4E6B514983E8C2E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:6f:00:9f:50:62:7f:00:c0:20:f1:b4:17:
                    5c:f4:20:7a:66:fd:15:9e:ac:c0:47:1c:67:10:6c:
                    5d:e2:f0:c2:e5:4a:08:32:66:8c:15:93:c2:32:c6:
                    c9:9f:9c:01:67:a2:d6:e8:61:aa:69:c0:91:78:61:
                    f8:30:17:ac:ca:eb:74:2d:68:a0:da:77:db:dc:81:
                    95:0e:12:48:e3:f0:51:33:d1:77:0e:41:9d:ca:d7:
                    de:81:35:64:ce:cc:3d:2b:23:f6:93:01:91:4f:b0:
                    72:fc:20:92:78:76:4d:e7:e1:78:9e:13:2d:82:2d:
                    f4:fb:93:41:6b:fa:ee:b1:09:3c:a7:b1:b6:ef:9a:
                    95:8e:7f:95:66:08:5d:e5:95:b3:58:e4:e4:e0:45:
                    a8:c0:31:89:69:d3:6b:d6:f8:32:a8:36:a7:b2:5e:
                    17:b0:22:3c:e5:df:cb:c7:b0:81:04:4e:9d:52:86:
                    40:2b:83:12:0c:46:b3:ac:6b:1c:6e:42:54:63:2a:
                    6a:00:b8:62:4e:3e:d0:e3:48:a4:67:8e:56:39:67:
                    ae:7c:37:32:a6:17:fc:cc:23:c6:6b:ac:64:54:47:
                    42:4d:82:cb:7f:6a:37:fb:bf:85:42:ea:7b:ef:1d:
                    ad:d2:30:6e:47:23:a6:e8:ae:17:5d:c8:84:22:ad:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:99:94:65:3E:20:0D:E6:4F:0C:6F:B4:E6:B5:14:98:3E:8C:2E:59
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232302e302f32322d3232203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:21:28:72:0f:ab:10:cd:72:16:d2:af:73:2e:be:f5:9b:29:
         ef:ff:1b:a7:8d:f7:08:f7:3c:cd:7f:67:00:fb:47:0b:e5:61:
         8b:61:d5:63:db:4c:91:79:fe:ef:df:38:d7:b4:46:d1:89:47:
         8d:6e:d7:78:9f:01:1f:c2:78:a4:a4:05:53:09:6b:53:1a:60:
         16:fd:20:3e:19:77:e8:47:ba:6c:7e:4a:ac:05:c7:0a:06:28:
         19:9c:b9:e8:6a:05:f5:aa:ab:08:33:fc:ac:34:53:dc:cd:78:
         80:1c:fe:6a:3b:92:90:6d:16:f1:fe:03:4a:b2:bc:be:23:11:
         5e:02:55:fa:c5:48:ab:e8:59:d9:cc:4f:5e:86:37:29:8f:bd:
         2f:2d:f4:67:80:7a:9a:37:f6:5e:4c:c8:8d:c4:c6:79:39:6b:
         bf:b6:2b:bc:b5:b6:00:99:3a:29:75:9a:2f:ab:8a:33:64:bb:
         cc:8a:ea:85:1c:bb:aa:e8:7e:55:64:ea:cf:1a:15:e0:43:77:
         4d:e9:bf:bc:58:95:de:69:9a:18:e7:04:bb:9d:c5:90:04:fc:
         7b:3f:a5:57:4b:5a:a4:b6:81:3c:da:be:f3:96:8e:80:c4:7d:
         1c:1f:22:cd:75:a4:b9:a2:0f:55:99:4e:04:7d:a4:77:9a:fb:
         f6:c5:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org