Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e302e302f31382d3332203d3e203533303136.roa
File:                     3137372e37342e302e302f31382d3332203d3e203533303136.roa (raw, json)
Hash identifier:          cFOZGSulqOFB8BWw84VWxJxlYlBQkXuckXfa52Mu6Yg=
Subject key identifier:   CF:67:B5:B6:53:1E:63:E1:BA:A3:3C:98:83:2F:CF:CD:13:3A:3D:C0
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       3509E78892114C0E3284A5D1DE4A333CF2145453
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e302e302f31382d3332203d3e203533303136.roa
Signing time:             Thu 18 Apr 2024 18:38:02 +0000
ROA not before:           Thu 18 Apr 2024 18:33:02 +0000
ROA not after:            Thu 17 Apr 2025 18:38:02 +0000
asID:                     53016
IP address blocks:        177.74.0.0/18 maxlen: 32

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:09:e7:88:92:11:4c:0e:32:84:a5:d1:de:4a:33:3c:f2:14:54:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Apr 18 18:33:02 2024 GMT
            Not After : Apr 17 18:38:02 2025 GMT
        Subject: CN=CF67B5B6531E63E1BAA33C98832FCFCD133A3DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:62:2f:b4:de:cc:c3:f4:6e:ec:f2:55:1e:6b:
                    ed:ba:a4:16:da:3c:dd:e5:64:b1:56:90:1a:69:39:
                    f7:24:bd:39:2c:cd:e6:39:8e:5e:7d:39:7f:70:95:
                    58:40:a6:f5:80:2e:78:c0:45:a2:e3:59:84:f4:d0:
                    19:ea:48:ac:44:90:a0:77:cd:57:d4:a7:8e:4c:9f:
                    29:f8:a3:5f:79:04:39:68:ca:74:20:95:c2:76:2c:
                    0c:ba:a9:1e:2a:e0:ab:60:a2:88:28:da:dd:72:30:
                    bd:98:03:2c:87:c1:27:cf:0a:7e:43:3a:f6:83:32:
                    ff:42:8b:48:35:d0:50:9a:8e:8d:49:3f:7b:52:89:
                    1f:b1:a8:f0:4b:b0:d6:0e:e8:ff:d2:a5:15:fd:62:
                    2c:96:dd:f6:5f:51:c5:62:78:12:fd:6a:ac:c7:59:
                    fb:c7:bd:b0:d3:7c:1e:da:fb:d5:c7:89:a2:83:25:
                    55:81:55:03:df:a2:62:0f:fb:35:44:e4:14:c4:fd:
                    8c:0c:af:27:91:58:b4:ab:e9:f7:c2:7e:a7:84:28:
                    4c:1d:fe:b2:f2:f6:c5:0b:d5:b3:b0:ec:61:7c:2a:
                    9d:32:2f:35:6b:10:48:f6:8b:51:20:9e:8b:15:70:
                    9f:16:5e:37:99:d7:39:f1:e5:21:1a:fb:be:37:2d:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:67:B5:B6:53:1E:63:E1:BA:A3:3C:98:83:2F:CF:CD:13:3A:3D:C0
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e302e302f31382d3332203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5a:bf:5e:64:c1:a3:86:c9:86:91:74:4f:b5:b4:05:53:0d:42:
         fb:21:ef:6c:75:d3:0b:3d:7c:90:a3:3f:ff:b2:7a:a1:d0:28:
         ea:a6:57:6d:d6:cc:3c:9e:55:e4:a2:c5:24:1b:cc:e0:d3:ee:
         06:06:a8:ba:a0:c8:76:39:35:cb:3f:b7:8c:1b:73:a6:10:f9:
         0f:1a:3e:c9:82:ae:19:16:5d:ba:51:58:a1:bb:4d:49:fc:78:
         d5:92:20:1f:2e:6b:84:f6:2a:c6:03:ce:b8:77:c0:87:d1:d1:
         d0:b1:85:01:1b:e3:2b:11:5c:12:47:4e:06:24:1c:16:82:a4:
         fe:0d:84:7b:69:e2:0c:d0:a8:04:4d:15:ea:1d:db:6c:81:b0:
         e7:58:2e:5f:a7:22:63:63:bd:b3:23:19:fa:67:01:57:2b:4a:
         45:8b:99:ed:a5:6e:cf:27:b5:b1:c0:2c:c7:3a:d3:d9:37:f7:
         7e:04:f0:20:70:dd:35:32:50:cf:6e:40:b0:a0:8e:62:19:ba:
         d7:6b:a4:d9:56:aa:a8:c1:6a:04:39:57:42:22:e0:73:32:a4:
         c4:ca:31:13:99:49:4c:2c:db:94:56:21:8a:4c:da:6e:92:ff:
         ea:2e:17:1e:86:ee:e2:36:e6:7b:75:01:df:7c:16:c3:28:60:
         4d:e4:bc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 08:12:31 2024 by rpki-client on console.sobornost.net