Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136362e302f32342d3234203d3e20323633303837.roa
File:                     3137392e3130392e3136362e302f32342d3234203d3e20323633303837.roa (raw, json)
Hash identifier:          VJ+y3p4B0BGJs2fjH27PYf+k6Pe36Jh8fHnJ4y8x5fQ=
Subject key identifier:   D6:FA:E8:86:05:D7:D5:52:29:EC:4E:95:50:A0:E2:E3:F0:BD:5E:1B
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       64776F7ADD372964E0E950C20723B6FA186F2C
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136362e302f32342d3234203d3e20323633303837.roa
Signing time:             Wed 22 May 2024 17:37:19 +0000
ROA not before:           Wed 22 May 2024 17:32:19 +0000
ROA not after:            Wed 21 May 2025 17:37:19 +0000
asID:                     263087
IP address blocks:        179.109.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:77:6f:7a:dd:37:29:64:e0:e9:50:c2:07:23:b6:fa:18:6f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: May 22 17:32:19 2024 GMT
            Not After : May 21 17:37:19 2025 GMT
        Subject: CN=D6FAE88605D7D55229EC4E9550A0E2E3F0BD5E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:73:f4:0c:d4:0e:9b:08:c2:d2:ac:d1:98:
                    b9:65:41:9a:e5:cc:c8:61:39:3e:c5:b2:62:fe:83:
                    19:9a:89:17:8c:83:62:5a:f8:bd:79:0c:e6:26:8e:
                    6e:01:a6:3b:98:ff:c7:15:0a:17:26:e4:bb:6f:96:
                    16:5d:e6:93:1d:6f:27:22:9a:59:0d:79:67:c3:b6:
                    5d:94:5d:33:c2:dd:f9:30:18:04:fd:b6:6a:11:b7:
                    5e:e9:bf:55:42:db:81:ad:e2:fe:c8:8c:04:66:30:
                    3a:20:28:14:59:4c:8b:81:f5:82:ec:89:fa:3c:f6:
                    a3:a9:81:74:29:c4:cf:43:91:c1:8b:f5:b1:bf:29:
                    64:32:77:ca:f6:22:67:08:43:27:91:69:0a:14:1f:
                    5f:52:54:53:55:77:47:8f:be:3c:bd:98:bb:55:6f:
                    bb:b0:af:eb:09:8b:3f:a0:0e:89:75:91:c8:14:bb:
                    ca:22:a9:1e:84:87:ce:74:b1:4d:bb:d9:59:fe:55:
                    94:e5:00:c4:f6:3f:80:90:3f:57:fc:08:1e:0e:2b:
                    3d:7e:94:33:ed:85:5b:bf:af:f9:16:7c:72:6a:5e:
                    92:b6:08:d4:57:47:f0:e6:c9:53:70:d3:5a:66:66:
                    8e:92:3c:7d:9e:55:d7:1b:aa:96:b8:41:b1:0b:c0:
                    36:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FA:E8:86:05:D7:D5:52:29:EC:4E:95:50:A0:E2:E3:F0:BD:5E:1B
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136362e302f32342d3234203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:97:cb:64:09:1d:1e:d3:99:a6:c2:12:eb:98:41:ff:d8:07:
         0e:50:8c:41:07:58:94:26:e2:9d:8b:8e:82:33:f9:24:0f:bc:
         60:d7:e0:fb:08:ab:72:84:78:f5:5a:27:0f:4c:34:53:ce:a5:
         ab:da:5f:b4:04:be:ca:45:6c:4e:95:c4:76:2d:e9:71:95:f4:
         1c:c0:22:7c:35:06:ff:d2:d2:9b:c1:81:35:01:ed:e0:df:5e:
         84:eb:71:84:68:9f:66:68:ca:30:1d:14:67:b8:bd:f5:13:cf:
         24:9a:cb:47:4d:86:d5:41:df:96:8c:f5:8f:7d:6d:76:74:2e:
         0f:ef:b5:07:87:e0:e3:5b:65:b2:41:e5:36:05:ff:85:71:e0:
         c6:42:aa:0b:49:59:5f:18:dc:0e:7f:ee:2b:73:8b:0a:e9:bd:
         25:30:70:14:0b:ff:14:51:e9:44:8b:47:30:9a:44:43:28:e1:
         15:9f:42:33:aa:94:91:f0:9a:bb:28:bc:bb:11:8b:b8:82:c8:
         77:aa:45:70:e1:c8:06:35:31:2f:dd:11:dc:8e:43:33:2a:b8:
         27:a4:c8:7d:9c:a7:f5:0c:d2:3d:1b:4c:8c:13:a1:cd:f3:bb:
         3c:c3:5c:34:24:83:97:d6:de:e2:c3:cd:7e:79:fe:d1:01:74:
         0e:de:e9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org