Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/3137392e34392e3235312e302f32342d3234203d3e20323731323231.roa
File:                     3137392e34392e3235312e302f32342d3234203d3e20323731323231.roa (raw, json)
Hash identifier:          VrBOb59Oe4yZIGqv+VJ0cy+yEJOQk6Qme5S6lD2aFVc=
Subject key identifier:   6F:3E:A6:FC:6E:22:FD:41:39:DC:24:54:B4:35:7A:87:2D:58:A0:D0
Certificate issuer:       /CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A
Certificate serial:       04102CD715B08F87BC285FAA319B6E6827505723
Authority key identifier: 48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/3137392e34392e3235312e302f32342d3234203d3e20323731323231.roa
Signing time:             Thu 04 Apr 2024 08:00:19 +0000
ROA not before:           Thu 04 Apr 2024 07:55:19 +0000
ROA not after:            Thu 03 Apr 2025 08:00:19 +0000
asID:                     271221
IP address blocks:        179.49.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 16:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:10:2c:d7:15:b0:8f:87:bc:28:5f:aa:31:9b:6e:68:27:50:57:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A
        Validity
            Not Before: Apr  4 07:55:19 2024 GMT
            Not After : Apr  3 08:00:19 2025 GMT
        Subject: CN=6F3EA6FC6E22FD4139DC2454B4357A872D58A0D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:b9:df:0e:1d:4e:e7:e8:59:b4:e4:99:da:
                    55:e6:a4:4b:81:b8:f4:91:ae:42:5c:8f:10:00:6a:
                    b0:d4:f1:90:4d:3d:d9:30:f0:ea:58:ee:df:72:81:
                    fe:71:fe:67:d7:c9:be:98:07:f8:19:56:af:0f:e8:
                    b8:b9:2f:36:6e:8d:49:02:25:49:fc:2e:d4:31:f4:
                    2f:4b:33:b6:32:eb:0b:66:43:3d:43:d4:ee:cf:46:
                    d5:03:a1:8f:28:2a:1d:83:40:34:96:ac:ae:89:46:
                    de:e1:80:c6:b9:56:0f:c8:52:74:91:79:17:24:ce:
                    8f:e9:cd:ff:a5:b6:53:e4:62:1c:03:da:77:ab:d8:
                    24:5f:5d:d2:26:fc:5c:54:d5:80:e8:62:86:a9:02:
                    3d:14:95:1e:d7:5c:24:46:89:7a:98:3f:e7:90:15:
                    87:17:8e:65:1a:55:dc:45:85:fc:7a:6f:db:db:98:
                    0d:36:fb:ec:b6:15:60:a5:d0:5b:83:34:19:98:2e:
                    75:31:a1:55:03:77:13:68:4f:a9:4a:e9:2f:28:31:
                    b7:08:62:69:aa:ee:cb:da:40:c5:67:4d:86:21:5c:
                    e6:63:6a:bb:1c:85:82:a6:a3:a0:23:28:d1:44:fb:
                    bc:54:6d:ae:14:78:d7:05:da:49:ec:97:56:1b:ce:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3E:A6:FC:6E:22:FD:41:39:DC:24:54:B4:35:7A:87:2D:58:A0:D0
            X509v3 Authority Key Identifier:
                keyid:48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/3137392e34392e3235312e302f32342d3234203d3e20323731323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ac:dd:90:e8:c4:4f:12:57:10:e1:4a:ad:9c:50:8b:96:f6:
         2b:d7:30:b0:5d:ee:80:c0:05:43:7e:a3:3d:82:b3:f8:ce:ec:
         5c:51:cc:0d:d9:9a:92:6d:0b:cc:e4:a4:1d:a4:59:a3:2f:3b:
         96:9b:76:46:31:33:39:8d:f7:dd:10:2e:11:6c:d7:33:85:ec:
         fd:f7:f2:c3:1c:61:74:80:98:1b:b0:86:96:bb:18:37:88:c3:
         60:d8:31:3a:64:54:a5:16:5b:28:67:c7:59:ce:25:de:fe:89:
         84:5a:1e:10:8f:1e:c0:e7:1b:f7:26:97:71:fb:74:3b:e7:b3:
         f2:f9:8d:87:b8:8b:cd:dd:1e:2a:84:89:bc:6b:f1:2a:8d:ee:
         81:53:b5:3c:87:2c:40:13:65:c9:3a:ba:dc:01:96:8f:40:ab:
         f0:67:04:7b:ef:b4:23:a5:c4:70:14:72:a4:af:71:85:4d:7a:
         a5:01:2a:66:76:6a:20:af:a5:8f:11:19:1e:5f:b1:08:5c:25:
         77:ca:0c:51:da:71:79:00:a6:d5:12:39:a0:87:d1:96:e6:ee:
         90:50:da:28:13:a7:97:1a:76:5a:b5:e2:5d:1c:8f:9f:7e:74:
         26:44:b9:19:c5:53:97:5e:e6:b5:a7:92:b6:f2:3a:df:78:73:
         67:32:5d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org