Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3137372e35322e34322e302f32332d3233203d3e20323632343337.roa
File:                     3137372e35322e34322e302f32332d3233203d3e20323632343337.roa (raw, json)
Hash identifier:          crz6VFy40KODBckg5PvY+01rV5M6RPWxM79mOYlOsWc=
Subject key identifier:   FA:FE:A0:A7:EE:D4:0B:46:FD:63:00:A5:30:83:CF:EC:FB:D3:46:CD
Certificate issuer:       /CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Certificate serial:       74A6F196DF6CC36DC45E59531A0416B153754CBD
Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3137372e35322e34322e302f32332d3233203d3e20323632343337.roa
Signing time:             Wed 24 Apr 2024 13:03:36 +0000
ROA not before:           Wed 24 Apr 2024 12:58:36 +0000
ROA not after:            Wed 23 Apr 2025 13:03:36 +0000
asID:                     262437
IP address blocks:        177.52.42.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 22 May 2024 11:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a6:f1:96:df:6c:c3:6d:c4:5e:59:53:1a:04:16:b1:53:75:4c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729
        Validity
            Not Before: Apr 24 12:58:36 2024 GMT
            Not After : Apr 23 13:03:36 2025 GMT
        Subject: CN=FAFEA0A7EED40B46FD6300A53083CFECFBD346CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:f4:bd:cc:ff:d4:86:43:fe:3c:53:ec:d4:
                    f1:38:87:ed:de:84:f4:c1:5c:db:89:2b:8e:17:e9:
                    ec:0f:c4:ed:d9:49:23:e6:7d:cb:87:58:4b:ee:9a:
                    c4:de:97:58:c7:df:82:ea:38:a6:1a:fc:65:bd:01:
                    dc:12:b7:a7:56:e7:9e:cb:95:26:e3:43:e1:5f:fe:
                    ea:2e:91:d6:62:97:3e:24:da:87:60:34:eb:5e:90:
                    7c:ad:aa:71:a3:bb:d7:0a:14:46:ea:ef:dd:04:51:
                    62:8c:f8:7d:9c:95:b4:cc:42:9e:4c:6f:79:cf:df:
                    0d:61:b6:ec:f6:b3:b9:f0:e5:46:09:76:c4:cb:17:
                    1e:c7:1a:a0:bd:20:1a:11:95:89:1d:90:56:92:fd:
                    4a:2b:58:12:ab:54:de:6e:81:2c:4e:2f:5e:47:de:
                    44:6d:3c:84:59:08:9e:15:0e:57:e0:a6:87:d8:ad:
                    d3:8e:de:93:f6:cf:cf:cf:d8:8a:d6:43:7c:51:28:
                    a8:86:1a:5b:ce:80:47:5a:43:79:2f:66:c4:ce:3e:
                    0b:52:47:fa:7c:06:46:1f:26:7a:66:55:1f:3e:d9:
                    1f:5a:55:db:de:2b:14:3a:ec:35:d0:11:fc:d6:6d:
                    3e:5a:53:0c:c4:96:e3:38:8f:c4:67:69:35:6f:fe:
                    6b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FE:A0:A7:EE:D4:0B:46:FD:63:00:A5:30:83:CF:EC:FB:D3:46:CD
            X509v3 Authority Key Identifier:
                keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3137372e35322e34322e302f32332d3233203d3e20323632343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:d4:58:00:c6:72:bd:65:c8:6b:68:88:5f:2e:e4:91:14:55:
         68:e5:86:50:88:c3:d2:15:67:8b:7a:1f:44:bd:bc:2f:dd:03:
         fc:a7:b4:f3:b6:01:e6:da:aa:1f:ae:84:0d:7b:69:72:58:68:
         f5:14:38:2b:26:19:63:d8:95:6f:4b:f7:7a:38:a3:52:ad:79:
         79:a0:51:0e:95:e6:9b:1b:dd:c6:06:1b:93:e7:67:41:0b:85:
         1d:72:02:44:80:87:b2:a2:15:ee:15:d3:40:3c:02:29:9e:5a:
         99:62:d0:5a:49:80:33:c1:64:69:67:4e:93:04:34:07:80:1d:
         18:ec:2b:0f:64:24:84:b4:27:ce:19:2f:14:cf:b8:e5:99:34:
         83:2f:d0:9a:5b:99:7a:b2:2d:62:50:f1:a1:4d:05:98:1f:7c:
         ec:97:ee:fd:82:89:08:d0:5c:7d:66:80:7b:9d:25:e6:aa:79:
         3f:3a:24:a0:b4:88:e4:17:d2:85:95:bb:3e:32:d5:02:f2:0b:
         61:0b:e3:ec:e9:ce:3e:95:71:16:5c:3f:37:7c:d9:58:91:65:
         a4:12:19:cd:90:a6:6d:11:b8:44:cb:6e:12:ea:d6:bc:74:0e:
         11:5d:7f:de:cf:7f:45:1e:74:3a:91:e7:3f:ff:83:5b:ba:fd:
         bb:8f:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org