Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32342d3234203d3e20323633353238.roa
File:                     3137302e3235342e342e302f32342d3234203d3e20323633353238.roa (raw, json)
Hash identifier:          4npCYnTiOe/MYPW4zUdN6lNBh4kHtrxpEi4qmgVzIes=
Subject key identifier:   1E:BE:03:11:0D:4A:EB:50:0D:0B:CD:03:9B:EE:2D:B4:5E:9A:E3:58
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       4388E311BA310075BE31C1C16474AFE4CCA9556F
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32342d3234203d3e20323633353238.roa
Signing time:             Thu 18 Apr 2024 17:48:37 +0000
ROA not before:           Thu 18 Apr 2024 17:43:37 +0000
ROA not after:            Thu 17 Apr 2025 17:48:37 +0000
asID:                     263528
IP address blocks:        170.254.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:88:e3:11:ba:31:00:75:be:31:c1:c1:64:74:af:e4:cc:a9:55:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Apr 18 17:43:37 2024 GMT
            Not After : Apr 17 17:48:37 2025 GMT
        Subject: CN=1EBE03110D4AEB500D0BCD039BEE2DB45E9AE358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:93:3f:b6:6d:81:9d:38:05:c4:f3:2a:4c:
                    e0:72:a5:b9:ca:6c:e2:ad:d4:97:2c:05:d1:ea:e1:
                    a6:8f:1e:05:27:ac:3d:5a:0a:19:a4:0a:8e:14:27:
                    92:0e:d7:f3:9b:fb:67:27:65:ce:86:d5:5c:ef:c6:
                    5e:6d:c4:e3:28:3c:e4:2c:f0:ff:b4:92:40:11:1c:
                    05:28:1b:e4:d0:1d:32:2a:f1:8e:17:e3:93:55:eb:
                    50:af:b8:79:f0:e5:bb:2c:19:01:84:9c:0c:22:14:
                    95:66:ed:13:e8:55:e0:15:df:1a:0c:1b:c9:da:c7:
                    85:97:ca:c0:40:4c:cf:4a:97:0a:eb:fd:4e:b7:5b:
                    1d:75:56:55:8a:c2:09:0c:d0:19:b0:80:2f:b9:f1:
                    76:cf:f8:be:a0:ec:6d:45:3a:c1:03:a2:99:e9:26:
                    ce:af:51:a4:24:dd:f5:ad:29:97:2b:0a:a6:71:0a:
                    d3:70:a4:25:6c:02:ba:e7:23:cd:ab:b4:ea:54:65:
                    4e:5d:47:ba:4f:22:48:40:36:0e:17:cb:34:3c:fd:
                    52:86:f1:71:ad:c4:d5:4e:9a:55:ac:6a:0e:6f:c4:
                    08:15:83:31:99:bc:52:44:12:3d:82:13:56:2d:3e:
                    8e:7c:fe:89:c0:99:98:bc:44:6e:bc:19:09:db:2a:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BE:03:11:0D:4A:EB:50:0D:0B:CD:03:9B:EE:2D:B4:5E:9A:E3:58
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e342e302f32342d3234203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:f3:51:a6:75:3c:cd:8c:2a:47:45:80:d6:fa:c5:9c:89:b3:
         01:15:35:02:06:11:0e:f8:36:4e:5c:a0:5f:14:4f:eb:a5:b9:
         3a:a6:bb:79:99:7f:4f:1a:a2:52:2c:ae:4d:85:b0:c2:36:ac:
         70:2f:50:64:02:79:bd:d8:8a:a3:a4:8c:5d:e1:2d:68:d4:64:
         b3:2b:53:06:3d:a5:e4:f0:af:ff:d3:dc:5e:be:40:96:87:87:
         9c:53:f1:86:cd:a3:ad:6f:ff:d4:30:76:a3:cb:55:1d:e0:96:
         e7:37:ba:6f:df:71:07:2c:00:db:ed:47:53:b8:bf:40:32:49:
         42:ef:da:02:41:03:55:52:24:bf:0d:88:fa:8b:d5:1b:61:fd:
         83:bc:8f:92:41:cd:74:08:c2:c9:cc:d1:66:22:db:92:01:2d:
         c4:f4:e2:04:98:9c:70:36:c6:92:74:10:a0:33:b3:ba:c4:4d:
         ed:a7:ec:5e:a8:bb:f4:4d:b0:d1:3e:39:a1:76:eb:5f:7b:1e:
         e1:80:de:51:09:b6:14:ac:10:30:b1:53:01:e5:d7:e6:9e:0b:
         03:ae:37:93:59:60:d8:25:4a:89:04:d0:32:3f:5d:53:ec:59:
         59:ce:10:ac:c4:af:26:40:bc:d9:c0:e3:da:8e:7b:46:94:b8:
         5c:e5:32:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org