Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3234203d3e20323636343133.roa
File:                     3137302e38312e3130302e302f32322d3234203d3e20323636343133.roa (raw, json)
Hash identifier:          r5EuM1ES0YKtzqnyf91jkhDHmXIZMiScIcg0BlQGc6E=
Subject key identifier:   FE:8D:79:BF:6B:C1:CE:A9:12:4B:16:C1:72:5E:46:FF:CC:39:4E:C7
Certificate issuer:       /CN=0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E
Certificate serial:       24FE570E7C011C25E559E36B2F05E4FD1DA9FE2B
Authority key identifier: 0C:4E:4F:4C:BB:3A:F7:3B:B2:EF:D9:65:2E:86:7C:8A:97:82:83:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3234203d3e20323636343133.roa
Signing time:             Thu 11 Jul 2024 23:06:25 +0000
ROA not before:           Thu 11 Jul 2024 23:01:25 +0000
ROA not after:            Thu 10 Jul 2025 23:06:25 +0000
asID:                     266413
IP address blocks:        170.81.100.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sun 29 Sep 2024 19:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fe:57:0e:7c:01:1c:25:e5:59:e3:6b:2f:05:e4:fd:1d:a9:fe:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E
        Validity
            Not Before: Jul 11 23:01:25 2024 GMT
            Not After : Jul 10 23:06:25 2025 GMT
        Subject: CN=FE8D79BF6BC1CEA9124B16C1725E46FFCC394EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:9d:8d:fb:eb:9b:9b:c1:fe:0e:37:32:c6:
                    4f:34:10:57:55:9a:50:68:67:ec:4d:a3:04:c9:29:
                    bf:2f:45:f9:35:7e:b2:25:fa:df:f6:d1:48:45:9a:
                    a1:0a:66:49:ae:c3:14:da:ae:ab:d2:de:89:da:ca:
                    6f:9c:29:b2:12:b9:a5:4d:ac:3e:91:8d:8a:ca:a4:
                    d3:d2:18:ff:a8:20:b8:3e:af:39:28:d0:9f:9a:21:
                    e9:59:1b:c3:6d:14:ab:23:45:61:2a:d1:3f:25:6e:
                    48:f2:77:98:63:74:5a:87:3d:62:0c:2d:9f:dd:04:
                    04:0b:59:b6:65:c8:fa:d5:74:39:d9:84:8f:37:94:
                    bf:e5:b4:35:b9:c1:b3:a8:5f:26:6b:ba:53:66:5b:
                    1c:ef:1e:08:2c:b5:5f:8c:90:e2:b5:e0:16:41:28:
                    c9:1d:1a:eb:f7:72:7a:71:42:5a:8c:19:9a:c1:91:
                    96:11:40:76:ce:f0:70:7f:8e:44:a0:a5:6a:7f:36:
                    7f:20:df:e8:b0:de:42:6b:22:a6:d6:23:64:dc:d7:
                    e2:3b:29:ec:55:3e:c2:83:d9:27:74:c1:30:dc:d7:
                    19:77:86:6c:12:db:f1:0d:9a:72:1f:a0:4f:b6:64:
                    54:58:c1:3b:0b:61:62:51:42:9a:66:a7:ff:e2:06:
                    a5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:79:BF:6B:C1:CE:A9:12:4B:16:C1:72:5E:46:FF:CC:39:4E:C7
            X509v3 Authority Key Identifier:
                keyid:0C:4E:4F:4C:BB:3A:F7:3B:B2:EF:D9:65:2E:86:7C:8A:97:82:83:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3234203d3e20323636343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:f9:bf:d3:c4:b9:db:0b:58:b2:29:90:4f:c8:38:0a:8d:14:
         d4:95:df:64:70:c4:52:b4:f3:26:aa:70:2d:1f:fe:91:c7:5f:
         f3:a1:ed:e0:98:05:b3:f7:6b:31:c9:9a:81:85:d6:99:7f:59:
         59:d5:65:fc:d8:a4:a5:d6:a4:f9:55:1e:0b:c6:8f:3f:c6:d1:
         68:20:b7:38:b2:67:2e:45:74:4b:7b:e2:8e:e5:68:2e:89:5f:
         3b:99:57:8b:ac:c2:1e:94:d6:8a:82:2c:2e:98:b2:6a:e9:df:
         0b:67:a8:e9:47:db:39:dc:b4:ba:9d:98:01:88:a3:44:39:d4:
         a1:a3:e2:cc:9e:40:25:cc:ac:ca:9a:ec:46:7d:91:84:a0:07:
         7a:b9:58:eb:31:db:a5:71:7e:2b:92:8d:99:44:d2:e6:67:2c:
         f9:d2:12:6b:2c:24:97:f0:e7:78:7d:a1:02:67:cc:4d:a7:ed:
         5e:72:45:f3:9e:73:5b:23:ab:14:58:5b:2a:a6:77:55:d5:45:
         42:bc:45:c1:1a:5d:13:35:9f:bc:b5:7e:a7:f6:02:26:b1:f3:
         88:1d:5f:6b:d7:e0:1f:67:04:58:e5:8d:fb:27:36:30:d3:2a:
         8f:71:e2:d0:b3:02:c3:e0:ac:b4:ca:18:43:fd:53:52:17:8f:
         40:9b:a5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 22:43:24 2024 by rpki-client on console-ams.rpki-client.org