Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137362e302f32332d3233203d3e20323731343636.roa
File:                     3230312e34392e3137362e302f32332d3233203d3e20323731343636.roa (raw, json)
Hash identifier:          XKKnIiPQ0fDFvDzGor8Z4cozqMPFjxWFMeYBY6Hcnh0=
Subject key identifier:   24:5C:77:9B:1F:B8:3F:FB:E7:74:F5:D8:A0:D9:F3:58:A2:B3:7B:61
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       33F299CFFAE008DD096C58475BB14791DD8F7CD5
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137362e302f32332d3233203d3e20323731343636.roa
Signing time:             Wed 10 Apr 2024 12:45:05 +0000
ROA not before:           Wed 10 Apr 2024 12:40:05 +0000
ROA not after:            Wed 09 Apr 2025 12:45:05 +0000
asID:                     271466
IP address blocks:        201.49.176.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 05 Jul 2024 15:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f2:99:cf:fa:e0:08:dd:09:6c:58:47:5b:b1:47:91:dd:8f:7c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Apr 10 12:40:05 2024 GMT
            Not After : Apr  9 12:45:05 2025 GMT
        Subject: CN=245C779B1FB83FFBE774F5D8A0D9F358A2B37B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b6:e3:f1:81:59:1c:69:72:56:10:70:fe:0e:
                    54:78:46:46:44:58:d5:19:a7:33:82:35:d4:ef:03:
                    95:95:f4:8f:5d:34:ce:d3:ba:75:8e:34:6b:be:d7:
                    d1:16:4f:6f:90:8e:b7:e7:5d:6c:81:a1:93:9c:63:
                    3f:30:56:ff:3a:c0:33:db:77:df:ff:11:0f:24:ed:
                    3d:92:12:2a:52:9b:97:9d:72:f6:27:a7:3f:7f:82:
                    f0:97:bf:b0:96:bd:c5:fc:27:57:d6:a7:16:02:b1:
                    98:2f:10:c9:f3:be:6c:f6:b2:f5:7b:ec:ff:58:d7:
                    13:4f:15:47:06:be:1e:b2:cc:2f:a5:25:c7:7b:f4:
                    04:8b:a8:f9:14:cd:dd:8e:62:7e:be:10:43:19:0c:
                    b4:03:52:3f:c1:14:38:f5:a3:02:f8:50:15:f0:08:
                    73:ab:02:3a:9c:f1:ba:ad:82:7f:52:e5:1f:00:dc:
                    8f:8b:f5:f5:96:06:58:87:d2:14:48:87:15:ad:8b:
                    d3:81:3f:1f:de:3f:6c:31:0b:9f:3b:e9:be:e1:33:
                    79:a5:4e:8f:d9:d1:8b:c0:5b:7d:e8:e1:33:7f:fc:
                    13:dc:9b:2b:59:a9:33:e3:e6:e1:30:2f:d7:8b:22:
                    02:e6:79:dc:0c:fb:c5:1d:71:77:7d:85:dd:5c:89:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5C:77:9B:1F:B8:3F:FB:E7:74:F5:D8:A0:D9:F3:58:A2:B3:7B:61
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3137362e302f32332d3233203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:67:0c:0c:df:84:86:c1:0a:95:b9:de:8f:9d:86:bb:51:
         d0:1d:de:37:75:88:a5:25:36:bf:97:77:58:98:64:2b:20:aa:
         d9:8c:56:6c:01:31:58:b4:c2:e8:19:1e:a2:21:5f:7d:b3:94:
         b9:c8:b1:99:3f:70:f7:2e:66:2b:4c:55:e0:4f:36:92:f1:65:
         15:05:eb:d7:99:6f:33:e0:0f:8c:31:41:c7:9f:2c:04:07:59:
         5c:d9:c3:5b:f8:bd:17:2e:16:2c:2b:4b:82:57:04:ce:63:72:
         51:48:b4:15:69:16:b1:4b:3e:c2:bb:fd:1a:b1:b8:fc:31:10:
         20:dd:c7:67:23:c8:bd:be:0a:c3:0f:77:e0:55:74:8c:12:39:
         db:ce:9c:70:c3:df:0b:91:0f:16:d1:90:bf:3a:9c:da:ac:1d:
         02:f6:c2:69:b0:60:75:3e:58:85:43:9d:33:11:ae:60:0a:a1:
         f5:b1:b0:8e:a5:14:e2:ac:48:a3:71:c1:40:bc:26:75:8a:d8:
         b3:96:3e:eb:d0:f9:f7:1d:3f:7a:8f:ba:43:90:19:1a:e0:91:
         23:d2:a5:41:98:26:1f:91:a9:ed:d8:ac:ea:19:cc:45:30:59:
         ea:00:48:34:57:b1:38:79:91:e5:88:72:bf:b9:06:78:27:fd:
         b5:b0:c6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 17:25:50 2024 by rpki-client on console-fra.rpki-client.org