Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137372e32332e3137322e302f32332d3234203d3e203532393133.roa
File:                     3137372e32332e3137322e302f32332d3234203d3e203532393133.roa (raw, json)
Hash identifier:          an9rYsmNAIy6cHlv1IqinQ103nRjQlxFvqloTFLnvac=
Subject key identifier:   C4:E0:CE:09:35:AF:F6:29:5E:57:D8:94:B3:27:01:B5:F3:B9:9C:ED
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       489DDBA3020525592120356D82CFE6C1096F170F
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137372e32332e3137322e302f32332d3234203d3e203532393133.roa
Signing time:             Thu 04 Apr 2024 09:45:17 +0000
ROA not before:           Thu 04 Apr 2024 09:40:17 +0000
ROA not after:            Thu 03 Apr 2025 09:45:17 +0000
asID:                     52913
IP address blocks:        177.23.172.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 00:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9d:db:a3:02:05:25:59:21:20:35:6d:82:cf:e6:c1:09:6f:17:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Apr  4 09:40:17 2024 GMT
            Not After : Apr  3 09:45:17 2025 GMT
        Subject: CN=C4E0CE0935AFF6295E57D894B32701B5F3B99CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:0a:a4:b3:0b:6b:ba:ec:1b:8d:a7:b8:e2:
                    e9:f0:12:23:12:c0:8c:eb:f7:d4:63:a4:4f:4c:1b:
                    ba:44:d5:41:d9:3e:5d:0e:d7:bf:fa:91:cd:ca:45:
                    4a:d4:ae:57:48:af:80:a9:4d:22:af:83:3b:d7:a7:
                    c8:9b:c9:84:16:6d:1a:b7:d5:66:b9:b3:74:47:30:
                    fb:b2:fd:32:ce:47:72:35:b1:09:80:24:e0:ed:ab:
                    54:e6:70:e3:03:01:66:91:f7:61:c6:15:17:39:44:
                    1a:10:b7:7a:4b:44:60:ba:ff:4e:44:9b:9b:f6:48:
                    07:c3:63:cf:47:64:dd:b5:30:61:a7:4c:84:cc:99:
                    a1:f3:5f:b6:3a:2d:44:73:d1:f5:f4:f2:d3:60:8d:
                    0a:45:c4:87:b5:8a:0b:61:2f:fe:5c:67:bf:24:e7:
                    6b:10:00:91:de:da:9e:37:51:71:39:a6:de:ce:14:
                    95:6e:f0:de:2d:e4:9c:4e:28:85:33:4a:b6:eb:5e:
                    37:f9:76:ad:bb:8c:0e:54:4e:17:28:95:a6:c6:09:
                    f1:65:37:32:58:54:0a:c8:db:15:16:d1:99:b8:fd:
                    b1:d4:44:48:bc:8c:40:cb:c5:a5:be:09:78:1f:de:
                    81:d4:bc:36:61:a0:e3:40:86:b4:b2:5a:5b:cd:ad:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E0:CE:09:35:AF:F6:29:5E:57:D8:94:B3:27:01:B5:F3:B9:9C:ED
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137372e32332e3137322e302f32332d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:02:36:00:70:ac:5d:fa:88:1f:f3:2d:a4:ef:be:57:b2:52:
         7b:cb:b1:b7:c2:19:db:f0:2b:0c:98:5c:0e:a9:a7:83:3b:2a:
         65:f9:ca:45:d0:76:cf:7c:07:eb:bc:78:23:56:fe:de:fc:f8:
         72:c1:79:87:7b:06:54:f8:96:71:4e:09:d6:60:8e:51:87:7e:
         6c:4e:85:98:51:95:00:a0:19:e4:e2:3f:b9:df:53:2a:6e:8f:
         1b:f8:80:3f:cb:32:b6:87:a2:c7:0c:c8:ad:1a:e6:0d:d6:47:
         31:9e:7a:6e:39:15:04:aa:5c:ad:fa:33:05:5b:96:cc:52:e7:
         57:52:41:7e:83:8d:6b:b9:d4:43:6a:99:dd:f6:be:4e:98:f8:
         ad:56:2a:64:78:a2:4f:51:69:94:35:20:dd:65:ad:62:19:c3:
         a4:d9:75:8e:36:be:d3:a1:f9:4c:06:20:fb:24:1d:5b:8c:1d:
         07:02:31:64:f2:86:7a:00:3a:c9:3c:c2:b9:1b:b5:8e:fa:3d:
         45:80:45:c5:2d:94:3e:48:53:25:d0:fd:8f:78:7b:ec:f3:f9:
         e1:e2:d2:92:5e:23:40:49:cf:7c:1c:4c:ad:cd:c1:df:41:91:
         9d:3b:0c:e7:ef:98:d4:29:d2:a0:49:d9:93:00:ca:6a:da:60:
         e0:35:83:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org