Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36302e302f32322d3232203d3e20323730383733.roa
File:                     3137392e34332e36302e302f32322d3232203d3e20323730383733.roa (raw, json)
Hash identifier:          duVbqV2HjVRgmwKmNxnoXOXpH7yIVFZIUs5mQSgi0iQ=
Subject key identifier:   DB:65:50:4F:62:AA:98:2D:D7:BB:6C:89:B4:7E:30:C9:74:50:74:8C
Certificate issuer:       /CN=46B712FDB1DD6EDE73EFEB711E11BCA6345B134D
Certificate serial:       5304231BADF3F7DBFCCFAB09A42943D6F3392047
Authority key identifier: 46:B7:12:FD:B1:DD:6E:DE:73:EF:EB:71:1E:11:BC:A6:34:5B:13:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36302e302f32322d3232203d3e20323730383733.roa
Signing time:             Fri 05 Jul 2024 14:43:41 +0000
ROA not before:           Fri 05 Jul 2024 14:38:41 +0000
ROA not after:            Fri 04 Jul 2025 14:43:41 +0000
asID:                     270873
IP address blocks:        179.43.60.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 18:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:04:23:1b:ad:f3:f7:db:fc:cf:ab:09:a4:29:43:d6:f3:39:20:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B712FDB1DD6EDE73EFEB711E11BCA6345B134D
        Validity
            Not Before: Jul  5 14:38:41 2024 GMT
            Not After : Jul  4 14:43:41 2025 GMT
        Subject: CN=DB65504F62AA982DD7BB6C89B47E30C97450748C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:cd:01:f6:81:c8:4e:57:0a:e1:2d:c9:ba:
                    77:de:aa:59:58:c6:f9:67:09:a9:72:a5:66:9d:f6:
                    7f:4b:27:db:85:c0:25:95:f8:86:be:3e:d2:45:18:
                    86:2e:e1:2f:2f:6b:fc:ff:39:c3:41:fc:3d:97:e4:
                    d6:e1:d0:83:d4:8f:f8:b3:9a:c7:c2:7b:11:b7:0a:
                    b0:ce:38:7f:ac:23:1f:7f:9d:d2:09:4d:7b:c1:43:
                    cd:2f:d6:26:9b:80:d5:58:95:fd:75:e1:03:ac:73:
                    06:26:91:26:b5:0e:03:bb:db:05:02:37:db:5c:e3:
                    74:ac:31:36:0b:66:0f:6f:ab:e6:04:14:74:5c:f7:
                    79:4a:0a:ae:d3:37:d7:24:71:f6:90:60:65:17:87:
                    3c:22:32:54:77:75:dc:44:1e:29:91:b2:da:10:dd:
                    9b:68:59:fb:21:e4:62:49:74:2a:45:a6:26:b5:c0:
                    55:7f:80:7c:ea:09:13:59:61:aa:f2:07:64:a5:4d:
                    34:f1:73:c1:d6:bd:b9:ed:1f:31:5a:c2:e1:55:d6:
                    6d:f0:79:55:61:c6:a3:74:2c:e8:15:e5:dd:6e:cf:
                    86:2b:07:66:61:dc:ac:67:72:09:ed:be:dd:f8:62:
                    2f:df:c2:8c:5c:5d:d6:e1:38:9d:45:ee:50:84:ac:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:65:50:4F:62:AA:98:2D:D7:BB:6C:89:B4:7E:30:C9:74:50:74:8C
            X509v3 Authority Key Identifier:
                keyid:46:B7:12:FD:B1:DD:6E:DE:73:EF:EB:71:1E:11:BC:A6:34:5B:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36302e302f32322d3232203d3e20323730383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:52:9a:23:e8:5b:a0:08:c6:e1:cc:bf:34:3f:6b:57:ed:15:
         6c:29:ba:e9:30:ca:c0:9a:d1:ff:a8:cc:bd:cf:0b:8a:59:9d:
         78:ba:a0:49:2b:94:99:b9:71:f3:5e:41:91:b8:6c:34:d5:00:
         aa:91:66:99:11:b9:5f:32:20:6b:7d:f8:5a:4e:93:88:0c:cc:
         32:84:cd:44:13:b8:2a:cf:2e:72:78:95:84:f7:78:cf:e9:d9:
         36:a5:b7:ed:33:11:e4:79:7a:f2:4f:b8:fe:bc:a8:57:4d:e2:
         6e:e0:e8:04:99:3a:68:f9:4f:d2:4a:d0:5d:8d:b2:8d:f9:25:
         3e:f7:58:f8:89:e6:76:42:6c:73:cd:75:10:14:39:3d:94:53:
         fb:d8:f9:40:85:59:c1:31:16:8a:42:65:94:6d:df:c3:46:b2:
         61:5f:8d:c9:84:e0:6b:08:24:73:4c:21:51:92:ed:1b:1f:b5:
         df:fb:1b:13:6f:40:aa:89:17:c0:09:65:59:d3:df:a9:2b:c1:
         7f:c7:3f:43:53:4a:62:a0:86:2c:31:a7:a6:80:c5:c8:c8:ab:
         ca:5e:fd:83:d2:f4:70:b2:99:a3:d7:79:44:f1:1a:f5:10:8d:
         42:3d:13:9a:55:89:fd:b2:3a:d3:c9:4a:65:c9:ce:ba:0d:7b:
         19:b9:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 20:42:47 2024 by rpki-client on console-ams.rpki-client.org