Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e362e302f32342d3234203d3e20323633353238.roa
File:                     3137302e3235342e362e302f32342d3234203d3e20323633353238.roa (raw, json)
Hash identifier:          akI5HQAqFXOxgUj81iIMO3OCPBDVGxXPhx/2FhvseOQ=
Subject key identifier:   D7:E7:D2:8E:7E:35:CF:CC:54:6D:25:7D:C4:24:91:52:F5:F0:5C:49
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       9ED0E47AAC69F237D38F47764AD7A228283DA1
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e362e302f32342d3234203d3e20323633353238.roa
Signing time:             Thu 18 Apr 2024 17:48:47 +0000
ROA not before:           Thu 18 Apr 2024 17:43:47 +0000
ROA not after:            Thu 17 Apr 2025 17:48:47 +0000
asID:                     263528
IP address blocks:        170.254.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9e:d0:e4:7a:ac:69:f2:37:d3:8f:47:76:4a:d7:a2:28:28:3d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Apr 18 17:43:47 2024 GMT
            Not After : Apr 17 17:48:47 2025 GMT
        Subject: CN=D7E7D28E7E35CFCC546D257DC4249152F5F05C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:93:9e:15:59:ae:8d:64:7c:25:5f:69:09:3a:
                    e9:5e:a2:28:89:60:eb:be:ec:78:6c:e9:48:b8:76:
                    74:62:95:c5:96:ef:6d:d8:c1:4d:c6:4e:47:fb:f1:
                    4e:e0:b8:3f:24:32:53:97:72:43:f8:ff:c2:fd:a2:
                    c5:ec:10:2e:02:2e:aa:39:c6:1e:93:6f:b1:ae:cd:
                    11:73:9b:f7:52:68:9e:00:e6:c6:fa:42:78:22:ef:
                    a8:9d:0a:8d:14:3a:be:77:67:02:1d:3f:7e:62:4c:
                    c6:05:fa:56:68:00:1d:8d:12:5d:61:b2:77:f9:02:
                    d9:05:16:c0:c4:44:d6:cf:29:eb:7a:f6:13:6f:ec:
                    5d:22:4c:75:0c:b5:f0:01:c9:a3:16:31:96:00:c6:
                    dc:47:20:06:a9:75:3c:72:9c:ff:75:32:e0:e2:38:
                    ac:f2:20:5c:16:dc:75:56:45:78:92:6d:fc:f4:13:
                    14:ff:2e:03:e3:7d:48:e9:f0:bc:7e:a0:2b:86:cc:
                    f4:5f:60:11:d3:ae:57:2d:25:51:ef:ff:b3:ba:85:
                    a1:7f:dc:63:4c:6f:6f:ac:ca:fa:41:63:6f:31:8b:
                    85:c9:b1:5f:ab:aa:af:2f:da:51:02:16:34:db:ea:
                    07:1a:88:0f:7c:74:99:5d:c6:1c:03:5d:1e:93:b3:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E7:D2:8E:7E:35:CF:CC:54:6D:25:7D:C4:24:91:52:F5:F0:5C:49
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3137302e3235342e362e302f32342d3234203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:7a:a4:6a:5f:2b:a1:c8:f4:8a:1c:06:73:20:bd:88:46:46:
         95:9c:24:00:9f:22:8b:7b:8c:6d:e6:2d:5f:da:59:62:72:7c:
         66:3f:0b:14:82:b5:3a:4d:62:e5:94:c9:15:d8:98:66:5e:11:
         23:e1:76:f6:7b:da:34:81:8b:ad:dc:00:df:bc:c7:67:ed:ff:
         71:84:93:de:8c:a8:7c:72:0b:b0:66:57:37:80:b1:79:ea:42:
         6c:87:d2:a2:c0:d0:52:11:a3:89:45:df:13:dc:69:50:fd:15:
         ba:7f:98:05:2e:8e:89:5e:05:d4:a5:7c:f9:e2:46:36:a5:0e:
         76:0b:f0:4f:3a:61:77:4d:9d:dd:7a:8a:33:bc:6b:13:21:75:
         f5:60:b2:df:09:07:90:08:73:b4:dd:ec:55:79:51:4c:56:28:
         41:1e:49:24:fc:85:62:08:88:3e:09:57:c8:d5:50:b9:1c:81:
         e2:cc:3c:d6:09:9c:60:eb:4d:f2:15:30:19:27:5d:66:d8:ad:
         3c:e4:c4:c4:14:c7:76:d9:04:ec:96:c7:b4:8c:5f:42:4b:b1:
         58:19:c4:ba:58:b5:c7:42:0d:02:2a:8e:37:64:61:d0:34:f8:
         e8:ec:47:e4:f7:be:85:ff:79:01:a6:ea:bf:46:f1:16:f3:02:
         43:d6:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org