Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32322d3232203d3e20323633353238.roa
File:                     3137302e3235342e342e302f32322d3232203d3e20323633353238.roa (raw, json)
Hash identifier:          W9dfAm+E/mKeQBxomrR6eRlM9I4Zr1kjXJ+Y/yd3HAU=
Subject key identifier:   5A:44:E6:C6:BF:3E:63:82:C7:FF:8A:77:7F:71:85:93:E2:E3:99:6E
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       355F3ED2719CC48E1416B88A93D999CA95CB7C93
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32322d3232203d3e20323633353238.roa
Signing time:             Thu 18 Apr 2024 17:48:30 +0000
ROA not before:           Thu 18 Apr 2024 17:43:30 +0000
ROA not after:            Thu 17 Apr 2025 17:48:30 +0000
asID:                     263528
IP address blocks:        170.254.4.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5f:3e:d2:71:9c:c4:8e:14:16:b8:8a:93:d9:99:ca:95:cb:7c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Apr 18 17:43:30 2024 GMT
            Not After : Apr 17 17:48:30 2025 GMT
        Subject: CN=5A44E6C6BF3E6382C7FF8A777F718593E2E3996E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:0b:25:1b:21:62:25:ad:9b:e4:bb:29:8c:
                    4b:57:11:dc:be:10:8b:6d:3b:94:98:de:10:98:03:
                    ee:52:e6:36:56:d3:dd:6d:0d:0d:61:72:2e:46:06:
                    81:75:9f:af:1e:50:46:69:89:36:af:ee:06:c3:6f:
                    10:45:c0:b9:d8:2a:a3:e2:26:8d:c1:48:d9:3f:6a:
                    27:12:74:67:74:0d:32:19:c8:63:94:19:4b:14:2a:
                    40:15:d9:99:e6:94:90:7e:b6:d1:3b:aa:af:e1:ec:
                    5d:a7:45:3b:43:88:d0:b9:c7:a4:2b:c5:b5:f7:ef:
                    bb:1a:86:77:79:14:d0:f5:a9:71:92:41:15:8d:6b:
                    38:7a:5d:9d:e2:90:54:b7:57:da:5b:9d:53:63:d6:
                    06:4f:04:db:a7:4e:33:6f:40:32:7c:ff:f6:6e:f9:
                    45:30:e9:95:da:12:a4:8f:3b:64:f0:41:b0:12:c7:
                    59:7a:5c:e8:bf:7c:5f:cb:f5:fb:60:38:c0:5f:94:
                    b1:5a:27:53:0a:e1:b5:e8:64:1e:9f:73:b7:8a:9a:
                    bd:a7:ff:fb:89:4c:75:1d:93:da:21:b1:e3:fa:7a:
                    68:24:35:9f:86:eb:fd:89:9e:4b:48:b5:d7:13:85:
                    d9:5c:b4:e1:92:8e:3e:14:8d:ad:93:e5:be:d2:96:
                    00:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:44:E6:C6:BF:3E:63:82:C7:FF:8A:77:7F:71:85:93:E2:E3:99:6E
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32322d3232203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:1a:4d:a2:a3:29:57:8a:b9:51:b0:ab:c7:be:13:fe:3f:6c:
         3c:6f:c1:62:0a:e2:f7:68:e9:93:d5:76:90:48:a1:05:7c:f7:
         09:2b:f2:ff:10:04:5f:76:26:fa:31:0c:e8:fe:31:1d:df:93:
         5f:1f:a9:1c:b8:1b:5e:06:01:3d:35:af:74:50:34:aa:1e:21:
         3d:99:fd:3b:62:40:00:42:c1:c2:41:3a:73:ed:da:91:15:0f:
         6d:53:03:12:d3:5a:29:a9:ac:b4:39:f0:49:f0:76:23:41:df:
         a6:ab:e4:82:90:12:9a:81:80:1d:00:12:15:e4:b7:66:f9:0b:
         48:d0:66:19:37:c9:58:c2:39:c1:1d:bb:df:be:cb:61:e7:ee:
         78:b2:66:db:ca:19:2f:03:08:8a:8e:40:2e:2a:ae:a0:b3:81:
         c5:32:8d:61:65:40:46:13:d2:40:e3:f1:55:c5:6f:82:e6:ee:
         4a:e7:6b:7e:9f:f2:cf:f8:ca:15:75:d9:9f:76:d0:ca:1e:a6:
         a8:29:8a:f0:3b:2b:f3:ce:9e:ea:43:37:14:25:d2:3d:7a:a2:
         61:ef:6f:66:ad:be:c2:35:9f:f3:07:82:26:41:e1:0f:73:82:
         33:0e:ad:d4:a6:45:dd:da:c4:98:ba:86:06:53:33:cf:2c:d5:
         37:25:a1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org