Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38342e302f32322d3232203d3e20323633313239.roa
File:                     3137372e3135352e38342e302f32322d3232203d3e20323633313239.roa (raw, json)
Hash identifier:          K2j6Siq62BWx7h3VHHtXVEHvPxvJYyeFeiKK0gZyva4=
Subject key identifier:   27:FD:80:E2:1E:5F:D8:34:BA:91:83:A7:39:9E:9E:7F:C5:B4:8D:29
Certificate issuer:       /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
Certificate serial:       1E61408E76F0E2D764F7C5D4130C95ACCC007C98
Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38342e302f32322d3232203d3e20323633313239.roa
Signing time:             Thu 25 Apr 2024 13:11:46 +0000
ROA not before:           Thu 25 Apr 2024 13:06:46 +0000
ROA not after:            Thu 24 Apr 2025 13:11:46 +0000
asID:                     263129
IP address blocks:        177.155.84.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:61:40:8e:76:f0:e2:d7:64:f7:c5:d4:13:0c:95:ac:cc:00:7c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
        Validity
            Not Before: Apr 25 13:06:46 2024 GMT
            Not After : Apr 24 13:11:46 2025 GMT
        Subject: CN=27FD80E21E5FD834BA9183A7399E9E7FC5B48D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:9f:eb:cd:8c:3c:82:13:59:e6:b6:91:ee:
                    95:d3:73:85:e1:5b:02:d9:51:f9:c7:6e:ec:56:e4:
                    7d:1e:48:f4:a2:af:8a:40:1a:bd:dd:6b:54:e1:b0:
                    e6:bc:87:84:e4:ec:b6:be:47:c2:72:c6:ce:c6:39:
                    96:43:53:42:52:4e:35:14:73:07:fd:09:98:b5:68:
                    b6:32:41:80:e3:f6:4e:f4:d0:d5:0f:23:b5:f3:70:
                    df:7b:35:03:f2:36:c9:6a:3e:7d:85:3d:46:fb:2f:
                    67:92:1d:18:fe:34:2d:06:53:7e:34:d0:1a:9f:8e:
                    8e:73:97:94:17:62:d0:6d:f9:ab:fa:01:37:a0:dc:
                    84:86:eb:dd:89:ed:7d:5d:15:5a:c0:27:3f:18:18:
                    37:c0:5d:f8:ef:5c:79:13:d6:6f:a9:c5:a7:98:98:
                    c9:4b:07:88:a0:2f:18:70:ce:77:8b:cc:5c:9d:ec:
                    e8:93:db:88:0e:08:71:9d:a3:35:67:9c:1c:76:3c:
                    36:04:8c:c5:13:51:16:e6:2f:d3:f4:5d:89:4c:28:
                    29:bd:f9:87:5f:ae:b2:59:23:37:2c:f1:1a:da:55:
                    73:8c:20:77:b9:55:2a:1a:1e:1b:12:0b:66:78:39:
                    80:b7:89:9b:b5:b8:d8:d3:f5:23:bb:b5:78:a7:e6:
                    03:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FD:80:E2:1E:5F:D8:34:BA:91:83:A7:39:9E:9E:7F:C5:B4:8D:29
            X509v3 Authority Key Identifier:
                keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38342e302f32322d3232203d3e20323633313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:00:72:39:ca:74:7d:d5:bc:df:ec:fe:de:cb:69:80:75:b1:
         ec:4d:48:16:40:95:53:d0:bc:ed:b8:8e:be:c9:48:76:bf:cf:
         d9:ac:20:c4:b6:b2:e7:71:14:e8:b8:69:31:cd:34:86:a8:fb:
         df:d8:b0:3a:9d:72:3f:48:8c:53:f0:cd:95:51:c9:e6:6f:dc:
         dd:76:75:e9:52:c4:84:ba:bc:3c:52:25:6b:62:31:f2:92:09:
         f5:4c:6a:ef:20:2f:53:0a:3f:e7:f7:63:a6:57:67:22:18:f9:
         45:5d:62:d8:4e:35:f4:8a:c5:ea:8c:bb:d6:5b:8a:57:3a:8e:
         3c:82:fc:bd:eb:5e:e0:af:0a:d3:55:58:f1:b7:3f:07:94:36:
         8f:be:7c:a9:06:32:50:cc:2e:32:57:70:d2:8e:fe:77:be:50:
         ec:cf:16:72:5a:96:12:3e:e7:2e:a4:8e:19:87:fc:95:1b:bc:
         39:87:5b:cc:12:9c:e4:84:52:9a:8e:84:d2:b8:32:71:53:9d:
         8f:84:53:e7:6f:0f:e2:81:42:f1:9f:fe:53:47:1c:d4:e7:a0:
         89:44:50:b6:d0:32:cb:51:85:40:fe:2a:92:ca:07:e9:2b:07:
         2f:52:21:4d:1a:07:4b:2e:33:a5:7d:64:b0:fb:9a:69:8a:b6:
         da:72:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:41:19 2024 by rpki-client on console.sobornost.net