Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3137302e38322e31302e302f32332d3233203d3e20323632343337.roa
File:                     3137302e38322e31302e302f32332d3233203d3e20323632343337.roa (raw, json)
Hash identifier:          n7byaf2h+ZLWmiJMfdygSGQ502WJegavRbAyibB7moc=
Subject key identifier:   78:0B:CE:7E:AC:A5:C2:7A:DF:80:A3:B0:66:BE:8F:B9:F4:8E:69:89
Certificate issuer:       /CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Certificate serial:       1CE5841622BC8FF927371EAC4BB1BC2B639B923B
Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3137302e38322e31302e302f32332d3233203d3e20323632343337.roa
Signing time:             Wed 24 Apr 2024 13:03:28 +0000
ROA not before:           Wed 24 Apr 2024 12:58:28 +0000
ROA not after:            Wed 23 Apr 2025 13:03:28 +0000
asID:                     262437
IP address blocks:        170.82.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 22 May 2024 11:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e5:84:16:22:bc:8f:f9:27:37:1e:ac:4b:b1:bc:2b:63:9b:92:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729
        Validity
            Not Before: Apr 24 12:58:28 2024 GMT
            Not After : Apr 23 13:03:28 2025 GMT
        Subject: CN=780BCE7EACA5C27ADF80A3B066BE8FB9F48E6989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6b:69:14:9a:c4:08:b5:94:47:bc:c3:ac:6a:
                    9e:c1:7c:77:b3:7f:7a:8b:db:d3:12:bb:12:2a:71:
                    b5:05:ea:df:ca:f5:ad:3b:0b:38:df:72:df:6a:5f:
                    1e:25:78:d0:b1:ff:2b:cb:c5:53:52:a9:bc:5d:9b:
                    b6:fd:09:58:75:45:c2:0b:c2:65:8e:ae:7e:9a:46:
                    cc:4a:3b:d6:b3:5f:68:7a:28:35:f7:c7:80:11:a4:
                    2c:f2:33:2b:5b:82:31:6c:30:ee:9a:3a:be:fa:4d:
                    41:71:1b:33:e8:20:0c:9f:de:45:d4:14:22:41:02:
                    97:bb:a0:18:5a:4e:e9:75:02:1b:02:b3:da:a0:f5:
                    68:c4:68:a3:2b:5a:a4:29:f0:e9:c6:76:4e:86:5b:
                    13:31:30:e3:d3:b0:0c:23:36:01:b9:9e:fa:92:3c:
                    54:49:d0:c6:6f:55:57:42:90:1d:d3:12:94:66:a4:
                    c2:27:af:fa:06:56:7a:06:f5:d1:2c:34:ee:03:35:
                    f7:21:e4:95:1d:7c:18:00:78:96:f7:7d:77:21:d6:
                    58:64:72:36:40:4f:86:54:90:26:40:d8:93:2b:9e:
                    16:b4:f7:7b:b9:bb:b9:53:bb:b5:12:cf:2d:c1:ff:
                    04:ed:42:ab:75:98:75:0f:df:d5:0b:e1:da:3c:0a:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0B:CE:7E:AC:A5:C2:7A:DF:80:A3:B0:66:BE:8F:B9:F4:8E:69:89
            X509v3 Authority Key Identifier:
                keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3137302e38322e31302e302f32332d3233203d3e20323632343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:79:78:8e:8b:f1:f2:d1:de:e2:3b:d2:8d:1b:fe:87:cd:42:
         df:20:7f:81:8c:b2:88:83:ab:5f:f9:aa:39:23:65:cd:1e:a5:
         4e:17:2f:78:c3:b0:c8:5e:7f:1b:03:79:c9:c6:40:3a:c3:31:
         b4:5b:e6:46:39:68:b3:78:ce:df:92:e8:6c:58:25:d4:a7:a0:
         e1:3a:00:0f:bb:41:50:1e:3a:da:e1:df:83:66:9c:ec:69:e5:
         d7:bf:60:7a:8e:7b:9e:19:ec:c5:08:6d:2c:4b:2a:cb:10:6d:
         d5:92:cd:fb:16:bd:4b:52:ba:f3:15:c0:87:a3:56:d7:7c:ea:
         5e:45:ab:40:47:c0:03:9d:f9:71:2c:e1:8b:38:ec:aa:c1:a2:
         0b:fc:14:76:e5:50:d4:38:14:bf:58:7f:dc:03:14:97:60:e0:
         35:66:0b:cc:c1:64:db:24:98:50:3b:bd:b9:89:00:f3:b9:bd:
         66:de:b6:d6:19:16:c1:5e:e7:5a:8c:48:34:c1:29:c9:ae:0f:
         17:ce:e1:6a:07:9a:f9:20:6e:4a:15:be:0f:3c:f3:81:b2:99:
         46:38:69:54:71:94:e6:bf:2e:44:33:04:36:9d:e7:f2:1a:4e:
         ae:9f:0a:5d:bd:ba:2a:1b:e7:52:fa:dd:5e:d9:70:60:b1:5f:
         20:1c:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org