Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232332e302f32342d3234203d3e20323633303837.roa
File:                     3137372e3133372e3232332e302f32342d3234203d3e20323633303837.roa (raw, json)
Hash identifier:          GEI4DdnKOsmatbtFgDwFIlyOVFSMlFeYJLsfDbB3Tz4=
Subject key identifier:   9C:43:F9:58:58:FB:E2:4B:EC:05:14:F0:3D:3D:8A:44:09:96:73:BF
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       5DA9D95663EE745091A3085064194F23B6314937
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232332e302f32342d3234203d3e20323633303837.roa
Signing time:             Wed 22 May 2024 17:36:03 +0000
ROA not before:           Wed 22 May 2024 17:31:03 +0000
ROA not after:            Wed 21 May 2025 17:36:03 +0000
asID:                     263087
IP address blocks:        177.137.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a9:d9:56:63:ee:74:50:91:a3:08:50:64:19:4f:23:b6:31:49:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: May 22 17:31:03 2024 GMT
            Not After : May 21 17:36:03 2025 GMT
        Subject: CN=9C43F95858FBE24BEC0514F03D3D8A44099673BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:30:e2:a6:20:91:89:aa:16:6d:0f:37:72:
                    31:bb:c3:13:fe:cc:68:e1:71:8d:8c:1c:bb:e5:8b:
                    16:d8:c4:79:81:75:c9:67:9f:dc:cc:a1:bd:a5:f7:
                    9d:85:9f:69:38:3c:05:28:45:a6:b3:66:4a:2b:24:
                    64:af:72:5b:42:86:92:a7:3a:d1:a1:de:06:a5:07:
                    95:9a:1f:56:b1:56:58:05:b1:26:7c:12:6b:cb:1b:
                    ad:0b:0b:51:36:74:f4:ac:ed:0e:3d:6e:83:cf:07:
                    b7:b6:07:ba:e4:d1:b5:1e:9b:e1:48:75:4c:18:01:
                    a1:10:23:25:59:ca:2d:6c:af:07:21:c7:90:da:b1:
                    e6:b9:2d:b3:c4:1c:65:93:dc:7e:c5:86:9b:35:b1:
                    93:29:21:ed:a6:d3:a2:ef:6d:bd:16:31:fb:67:57:
                    17:b0:05:e4:e9:73:70:c4:0f:0a:6c:a8:c2:4a:07:
                    09:e6:aa:24:b5:ee:4b:a6:b4:ad:4a:79:da:42:85:
                    13:8c:b6:91:83:de:08:d6:06:34:85:24:32:b4:e3:
                    b6:38:f7:b3:0a:43:0a:de:64:b6:a6:f3:df:f5:41:
                    43:ea:76:73:81:aa:0e:78:b4:58:c8:25:26:cd:8d:
                    c4:f4:ca:41:74:ed:6d:cb:35:30:16:f1:ca:e4:56:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:43:F9:58:58:FB:E2:4B:EC:05:14:F0:3D:3D:8A:44:09:96:73:BF
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3232332e302f32342d3234203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:35:51:17:81:c5:a4:66:b9:95:37:3e:07:8c:6c:33:21:75:
         f4:80:3a:92:81:96:20:b7:e2:69:04:4e:48:08:77:a2:cc:57:
         d1:62:d6:ce:34:53:56:d3:3a:b1:d8:db:ee:a0:46:31:de:fd:
         0e:71:a9:5c:6c:5f:b1:da:5d:cc:a6:44:4c:87:4a:c0:f8:93:
         6f:c7:9d:d1:21:37:31:f0:4f:e8:7e:3b:21:bd:25:a2:69:8f:
         12:2c:04:a6:46:66:55:17:fd:ce:84:7b:ce:e5:f8:44:a5:19:
         fa:2f:75:89:cb:e5:8a:a4:dc:3c:c1:4d:79:e4:d9:6c:3f:42:
         7c:2f:08:b1:ca:37:fa:7d:16:dd:1b:35:ca:73:3f:52:a3:cc:
         81:37:7b:bf:c9:77:e0:bb:e3:17:9a:a6:26:c9:de:42:96:07:
         ab:b5:c4:0c:aa:c3:70:19:c4:72:e0:9d:43:f1:04:11:5f:23:
         57:69:f3:92:75:d7:24:f6:10:3e:07:f3:de:e1:01:88:1d:11:
         b7:ef:96:8b:50:76:29:84:70:3c:22:95:f9:c7:fe:e9:f3:10:
         e2:90:e6:94:ce:7f:59:6d:ff:25:81:e9:7b:79:93:64:6f:ee:
         0b:93:54:11:27:29:53:48:51:74:e9:47:17:fe:29:43:25:07:
         09:22:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org