Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232302e302f32332d3234203d3e20323633303837.roa
File:                     3137372e3133372e3232302e302f32332d3234203d3e20323633303837.roa (raw, json)
Hash identifier:          9xfyvVHdGVgz36Pzqb5f6px1oskCVRd4JJL+fp0YD1o=
Subject key identifier:   1C:2E:43:06:D8:86:CE:8A:34:93:46:0F:2E:C7:4E:60:2F:D1:85:30
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       38CD02FEE85A3176AE47E06670E8DE606FB2DEAE
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232302e302f32332d3234203d3e20323633303837.roa
Signing time:             Wed 22 May 2024 17:35:39 +0000
ROA not before:           Wed 22 May 2024 17:30:39 +0000
ROA not after:            Wed 21 May 2025 17:35:39 +0000
asID:                     263087
IP address blocks:        177.137.220.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cd:02:fe:e8:5a:31:76:ae:47:e0:66:70:e8:de:60:6f:b2:de:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: May 22 17:30:39 2024 GMT
            Not After : May 21 17:35:39 2025 GMT
        Subject: CN=1C2E4306D886CE8A3493460F2EC74E602FD18530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:cd:33:13:13:97:36:0e:73:d9:30:77:d3:
                    44:67:0d:52:18:f7:f4:1b:d5:60:5a:a5:9d:71:35:
                    ae:fd:12:bc:b2:49:0c:e5:0c:5e:3e:aa:ae:26:b8:
                    24:da:da:80:1d:bc:d8:93:69:e2:6d:10:6f:fd:49:
                    90:ff:15:1f:de:35:2e:e0:ce:e3:8c:9a:77:fe:ed:
                    4d:6e:25:0b:54:be:d5:29:f2:bb:07:b7:a6:43:6a:
                    fd:79:a1:65:fa:c3:88:5a:4b:f3:e7:ec:74:eb:f9:
                    f2:dc:5e:97:ed:5e:ed:e6:0d:15:9b:db:c1:39:8a:
                    bb:3e:0d:5d:75:53:09:0d:91:f0:63:f0:5b:86:0a:
                    05:d4:e2:3d:c3:b3:ef:a4:9c:54:6d:d0:da:1c:35:
                    b3:fa:5c:3a:a5:ae:88:c5:b8:a4:80:83:f7:a4:f6:
                    d8:91:dc:a5:69:23:ff:59:9b:a3:4e:7e:6f:8e:ea:
                    d7:12:c6:45:65:ca:cf:0a:23:b2:9f:0a:8a:f0:3c:
                    63:b6:cd:2a:fd:84:cb:ec:31:10:ad:c8:66:c9:c5:
                    40:a2:f9:77:1c:6a:96:4e:79:87:f7:77:a4:08:6f:
                    70:8a:13:97:7a:6d:b9:f8:30:7e:d5:f1:b9:11:de:
                    7a:41:5f:f4:91:0f:55:e0:8e:9a:38:b7:03:a7:9c:
                    f8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2E:43:06:D8:86:CE:8A:34:93:46:0F:2E:C7:4E:60:2F:D1:85:30
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232302e302f32332d3234203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:9c:d4:ba:3f:34:63:73:8e:e8:d8:81:92:80:27:f6:b9:ba:
         fe:53:65:d4:c2:f4:ba:99:6a:0d:fc:29:76:fb:83:5a:fb:12:
         da:90:1b:7b:d3:f7:6e:b4:52:72:be:7f:7e:f8:cb:85:48:a5:
         10:94:ab:4e:ea:13:f6:29:bc:1a:83:70:66:bd:3b:60:04:88:
         93:75:14:30:af:d1:a9:5e:99:c4:66:de:1c:4a:19:16:b8:9a:
         86:da:2f:13:22:03:09:46:d0:9a:47:67:6e:88:19:04:3a:92:
         0c:7f:f3:b4:dd:a1:96:15:29:4e:b8:27:92:48:2e:6a:94:bd:
         13:84:09:f6:7d:35:14:9e:fe:6a:e6:22:86:ff:fa:e9:71:ca:
         d0:b3:90:5f:81:36:1c:d9:13:2c:03:6c:93:c6:10:55:df:67:
         cf:94:b9:7e:a0:f3:57:b3:1f:50:57:70:5d:11:6f:58:90:05:
         d1:e9:cd:c1:17:4b:12:06:c0:17:83:e8:26:ec:9c:b9:da:2e:
         84:b3:11:d6:1a:cf:4f:92:55:2c:58:04:35:ec:58:e2:96:16:
         95:e8:f7:61:35:bf:f3:1d:d3:67:49:d0:0b:2a:5d:5d:32:26:
         69:87:5f:cc:8d:1e:32:85:3f:0e:01:4c:57:fa:4d:2f:32:c6:
         d6:66:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org