Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137372e32332e3137322e302f32322d3232203d3e203532393133.roa
File:                     3137372e32332e3137322e302f32322d3232203d3e203532393133.roa (raw, json)
Hash identifier:          mwFsfmSD6E8DoQLXhd15OWBMF6kVb8ApUWLjnE5uf/M=
Subject key identifier:   5A:0E:98:B3:7B:FF:F9:AD:7A:98:C3:D8:9B:B8:36:97:A0:84:02:6F
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       4F9D257B34E1D6A224DF3C42B54C944E670E2B70
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137372e32332e3137322e302f32322d3232203d3e203532393133.roa
Signing time:             Thu 11 Apr 2024 18:07:57 +0000
ROA not before:           Thu 11 Apr 2024 18:02:57 +0000
ROA not after:            Thu 10 Apr 2025 18:07:57 +0000
asID:                     52913
IP address blocks:        177.23.172.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 00:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9d:25:7b:34:e1:d6:a2:24:df:3c:42:b5:4c:94:4e:67:0e:2b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Apr 11 18:02:57 2024 GMT
            Not After : Apr 10 18:07:57 2025 GMT
        Subject: CN=5A0E98B37BFFF9AD7A98C3D89BB83697A084026F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f3:49:31:03:00:a2:e5:d8:f8:bf:e4:db:22:
                    c4:1c:10:2f:b0:f0:99:07:11:82:2c:72:76:a5:3e:
                    b7:f5:c4:fd:d7:fd:8e:09:6f:a2:6f:f2:1b:3e:e1:
                    73:23:c1:eb:a2:2d:43:b7:a3:7b:e4:0c:30:a3:fc:
                    5a:f7:bb:54:e3:a2:f4:40:be:ac:1c:7e:10:fc:10:
                    64:62:b5:21:70:83:76:42:a5:39:ad:77:ce:2b:38:
                    2d:2b:99:14:76:31:5c:a7:e9:80:8b:66:40:78:62:
                    13:fc:50:37:b1:0d:f7:ad:1f:9d:09:bf:3b:82:c2:
                    4d:b4:48:6c:cc:18:da:09:19:cd:cc:c8:c3:2f:f5:
                    e5:51:fb:bb:6e:a2:68:1e:88:d5:45:04:3b:4f:29:
                    ad:f4:c6:3f:78:75:73:16:2d:e4:99:48:9d:3e:ff:
                    9e:15:14:94:fb:60:8d:5a:84:6c:06:ae:2f:c8:e5:
                    85:33:4e:a0:94:05:6a:a2:54:7e:a0:fc:29:47:c2:
                    93:88:4b:85:ca:e2:78:76:71:b4:d5:e0:45:56:c3:
                    af:8e:c1:10:13:23:69:ef:30:77:70:03:d6:c5:ad:
                    0f:8f:a8:48:67:46:07:f4:ea:88:83:d8:fc:39:6c:
                    06:ba:70:0f:f8:a3:86:3d:bf:c9:ea:dd:b1:0b:18:
                    6f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0E:98:B3:7B:FF:F9:AD:7A:98:C3:D8:9B:B8:36:97:A0:84:02:6F
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137372e32332e3137322e302f32322d3232203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:38:bf:db:82:5c:95:ff:e1:bb:8d:a8:e8:79:6f:f6:eb:02:
         7b:1e:fa:65:43:55:e8:f6:cd:2d:f3:e4:3f:38:b1:db:c1:38:
         14:4b:fc:27:f4:53:06:6a:d5:35:57:33:d8:cc:88:e8:ec:f0:
         56:c3:74:37:91:a6:04:bb:8b:84:7f:be:66:dd:4c:35:2a:ee:
         1c:75:5c:80:92:7e:74:51:2f:93:55:56:10:c8:55:80:ad:1a:
         f4:ec:14:6f:6a:5a:02:51:55:df:9a:27:ff:10:cb:b8:8a:7b:
         28:3e:5e:cc:26:cf:48:63:24:e5:15:a4:76:6b:8c:09:42:17:
         b8:b4:8b:f4:86:e8:59:7d:92:25:83:d4:85:0e:b5:2d:8d:86:
         b0:f2:33:ab:1c:8a:bc:44:1e:fb:be:78:64:a5:89:b5:f8:c6:
         4a:38:08:54:03:97:80:99:c6:b0:5a:20:3c:f4:54:6b:b5:8b:
         5d:2e:55:55:23:c2:0e:29:c2:15:f7:fc:fc:12:cc:f6:7a:c4:
         aa:1e:7b:16:83:8e:a6:0b:da:11:3f:d1:dd:89:1a:2b:a0:c0:
         42:90:a8:9a:63:8b:cf:d5:d3:f1:f5:c3:1a:0e:2c:e5:63:c9:
         06:ca:0a:98:f1:cc:80:f1:9b:d5:fc:cc:5f:6d:c9:5a:d6:a6:
         6b:23:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org