Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/3230302e3233352e3137372e302f32342d3332203d3e20323731363430.roa
File:                     3230302e3233352e3137372e302f32342d3332203d3e20323731363430.roa (raw, json)
Hash identifier:          6xRAdgG13PL5oCoXntCnl+LRRiLQyazzcdFR5tjfw3o=
Subject key identifier:   6D:A9:9D:1C:E7:FB:C9:60:89:AB:09:44:DD:B1:5E:23:DE:AD:43:FD
Certificate issuer:       /CN=AC174F1C160ECD0876FC5577CFE25B27E134FB13
Certificate serial:       396126A0482CFD2055BAE8519C2BE79023733E73
Authority key identifier: AC:17:4F:1C:16:0E:CD:08:76:FC:55:77:CF:E2:5B:27:E1:34:FB:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC174F1C160ECD0876FC5577CFE25B27E134FB13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/3230302e3233352e3137372e302f32342d3332203d3e20323731363430.roa
Signing time:             Wed 17 Apr 2024 18:05:09 +0000
ROA not before:           Wed 17 Apr 2024 18:00:09 +0000
ROA not after:            Wed 16 Apr 2025 18:05:09 +0000
asID:                     271640
IP address blocks:        200.235.177.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 11:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:61:26:a0:48:2c:fd:20:55:ba:e8:51:9c:2b:e7:90:23:73:3e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC174F1C160ECD0876FC5577CFE25B27E134FB13
        Validity
            Not Before: Apr 17 18:00:09 2024 GMT
            Not After : Apr 16 18:05:09 2025 GMT
        Subject: CN=6DA99D1CE7FBC96089AB0944DDB15E23DEAD43FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:cc:80:9c:bc:35:50:f2:d6:17:cf:d8:19:
                    48:49:d6:e1:8c:eb:f0:e3:4d:73:e8:1c:ee:a9:47:
                    43:34:67:e0:2a:c7:4d:95:31:98:84:a8:d7:ae:01:
                    55:76:06:ed:76:c7:6e:45:b3:f3:58:84:82:06:b7:
                    1b:01:63:0f:95:50:e3:ad:5d:af:c4:ed:d4:b3:58:
                    20:ac:6d:72:ca:36:9f:1b:d3:55:10:2e:b8:29:54:
                    86:cb:a9:a1:b2:57:b5:55:a9:68:7f:31:d6:5e:92:
                    e8:97:44:8a:35:34:93:df:1b:b1:c6:5b:53:ca:85:
                    f1:96:4b:20:b6:7f:08:74:45:c8:82:58:7c:eb:ae:
                    dd:11:c5:80:69:d1:5e:83:d5:29:8d:2e:40:8c:e6:
                    38:35:39:eb:c2:d3:b5:4f:d4:ab:a5:0e:10:88:7b:
                    33:90:03:d5:74:ea:9b:ba:ae:28:a4:02:26:ad:0e:
                    50:83:fa:ad:17:dd:f9:04:3d:47:04:37:4b:27:2a:
                    69:7d:3c:f6:af:8a:52:62:c7:02:a7:ce:0a:a0:0d:
                    71:52:f3:87:f9:eb:b1:b9:48:9c:7f:73:43:3b:e6:
                    a8:55:85:7c:29:05:91:9c:83:b4:21:24:b8:06:35:
                    7e:0e:20:43:d1:6a:3f:23:33:ea:ab:47:6c:72:a2:
                    70:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A9:9D:1C:E7:FB:C9:60:89:AB:09:44:DD:B1:5E:23:DE:AD:43:FD
            X509v3 Authority Key Identifier:
                keyid:AC:17:4F:1C:16:0E:CD:08:76:FC:55:77:CF:E2:5B:27:E1:34:FB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/AC174F1C160ECD0876FC5577CFE25B27E134FB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC174F1C160ECD0876FC5577CFE25B27E134FB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/3230302e3233352e3137372e302f32342d3332203d3e20323731363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.235.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:f3:fc:9c:8a:c3:6e:c3:3b:7f:2b:58:ac:0a:24:76:90:22:
         d4:e4:b9:c9:82:7c:a8:de:01:9a:e5:42:26:43:e6:8a:8f:28:
         44:98:60:71:f5:cd:e2:0d:9a:34:92:72:cb:38:54:36:ac:6c:
         ed:3f:75:be:ec:98:8e:08:32:d0:e5:ee:b8:74:fc:a1:d0:46:
         ab:15:a6:f5:e5:8d:fe:83:bc:f3:0f:4f:37:78:a9:3f:80:a3:
         da:54:b0:fb:a9:98:ec:2f:f3:c9:39:03:bd:2f:38:7e:04:0b:
         bd:58:8e:1a:3d:a2:23:59:fe:7d:2a:b4:ce:5f:67:03:a3:79:
         5d:b6:4d:28:5f:eb:d6:65:1b:3f:61:11:69:6c:57:20:e7:ca:
         15:0d:35:42:fb:e5:2e:c8:05:eb:dd:0e:a8:81:ea:c1:36:9b:
         a3:cc:71:d5:35:b4:dc:c3:98:85:18:41:57:c1:e9:19:eb:6c:
         01:e5:79:03:40:a6:03:e6:ae:6e:5e:72:92:be:29:5c:5d:63:
         5d:5f:fe:86:31:ea:a6:65:b2:d0:a7:07:3a:e3:c2:e1:2f:66:
         c2:c8:9c:2a:08:66:4e:36:a0:4e:98:72:1f:44:2d:4b:91:44:
         e0:34:9b:bc:28:1c:a3:b2:28:67:51:3e:01:1c:51:a3:10:87:
         da:bd:55:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org