Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36302e302f32342d3234203d3e20323730383733.roa
File:                     3137392e34332e36302e302f32342d3234203d3e20323730383733.roa (raw, json)
Hash identifier:          EJ+cAm21WO97RGP/09dLqrWLBEQe0cHHSrFgyYHiXVE=
Subject key identifier:   16:91:12:59:C8:63:E5:2D:DE:C6:1A:94:AB:49:25:C2:60:4A:FD:1D
Certificate issuer:       /CN=46B712FDB1DD6EDE73EFEB711E11BCA6345B134D
Certificate serial:       2FC7165AA673362C94AAA0C5370A2E41E8EE4D97
Authority key identifier: 46:B7:12:FD:B1:DD:6E:DE:73:EF:EB:71:1E:11:BC:A6:34:5B:13:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36302e302f32342d3234203d3e20323730383733.roa
Signing time:             Fri 05 Jul 2024 14:43:43 +0000
ROA not before:           Fri 05 Jul 2024 14:38:43 +0000
ROA not after:            Fri 04 Jul 2025 14:43:43 +0000
asID:                     270873
IP address blocks:        179.43.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 18:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c7:16:5a:a6:73:36:2c:94:aa:a0:c5:37:0a:2e:41:e8:ee:4d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B712FDB1DD6EDE73EFEB711E11BCA6345B134D
        Validity
            Not Before: Jul  5 14:38:43 2024 GMT
            Not After : Jul  4 14:43:43 2025 GMT
        Subject: CN=16911259C863E52DDEC61A94AB4925C2604AFD1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:6b:12:44:a4:6a:46:b6:34:f6:82:9a:e2:
                    50:ba:f3:fb:a0:65:b2:b7:23:71:4d:e1:78:fd:08:
                    46:9d:1f:24:07:6b:c5:bf:19:cf:97:2a:33:08:53:
                    ad:56:ef:6f:ed:be:4b:82:73:13:a2:62:75:26:ea:
                    88:9c:b2:32:c7:5a:a4:c1:47:f4:94:9b:6e:03:86:
                    e1:43:58:63:bf:e5:02:f6:b7:ee:1d:3a:e6:ce:b1:
                    82:83:e6:b3:0f:51:99:bd:cd:83:02:02:7d:94:d6:
                    b4:84:56:3b:51:65:7f:35:63:a7:89:02:65:79:b3:
                    77:3a:10:23:c1:fa:7f:42:7c:79:6e:5b:74:eb:ae:
                    04:c0:71:36:42:b2:d4:1c:5d:8a:48:dd:43:27:00:
                    1a:8d:81:81:a2:9e:23:ce:02:f7:73:e6:ed:3d:1f:
                    89:24:f2:94:3c:c2:d9:72:3f:96:09:c6:a3:7c:73:
                    e2:49:7d:9c:5e:e5:6c:ad:77:83:41:26:e9:6f:ef:
                    81:e0:8b:46:86:6a:88:ca:d5:23:ed:12:a0:00:ce:
                    3f:f4:42:2b:2a:a0:05:e6:e8:25:10:c5:bf:85:42:
                    36:b9:2b:f8:a8:4a:b7:b0:cd:1b:56:60:a7:bf:3f:
                    ff:08:e4:18:6b:23:4c:dc:3e:61:86:4c:50:e1:18:
                    ef:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:91:12:59:C8:63:E5:2D:DE:C6:1A:94:AB:49:25:C2:60:4A:FD:1D
            X509v3 Authority Key Identifier:
                keyid:46:B7:12:FD:B1:DD:6E:DE:73:EF:EB:71:1E:11:BC:A6:34:5B:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36302e302f32342d3234203d3e20323730383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:c7:0b:c1:2e:4d:d3:c9:ac:45:56:5f:82:05:8e:98:de:36:
         d2:43:ac:fb:73:de:9c:31:8a:6b:83:2d:34:eb:9a:af:fa:31:
         7d:2c:f7:d6:54:21:92:bf:c0:4c:9e:2d:8c:9c:04:a3:1e:c1:
         9a:2f:c5:34:46:f5:20:11:c3:c0:64:b5:05:b1:8c:da:80:d8:
         1a:e4:d2:6a:04:ad:9c:b8:5e:4a:18:7a:46:3a:5f:fd:87:9d:
         a1:83:cf:e1:47:6a:4a:13:f7:b2:86:9e:d2:b5:b2:61:e9:45:
         66:25:5e:f3:10:b7:f2:da:33:a6:2c:ce:99:23:9c:3f:2b:e5:
         d1:0a:9d:9e:ac:53:42:de:37:ff:8a:1e:55:5b:45:c4:2f:8a:
         21:bd:3a:e8:51:5b:94:52:91:67:06:3d:cd:7c:03:95:6f:36:
         2d:e6:d3:0a:02:4a:36:fa:9a:2e:62:8a:ae:27:84:f6:4c:5a:
         05:bd:33:39:2e:28:0a:64:ec:b1:8a:05:dc:50:29:36:3f:06:
         de:2f:f6:f5:2b:c6:a7:f5:02:16:be:a1:51:85:1c:aa:47:f9:
         0f:83:06:e8:c6:9f:57:18:d0:92:7c:a5:f0:7d:90:d1:2e:d4:
         2a:86:8a:54:23:49:84:90:c4:c2:eb:a7:17:ca:c7:b6:71:03:
         5a:c0:9a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 20:42:47 2024 by rpki-client on console-ams.rpki-client.org