Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36322e302f32342d3234203d3e20323730383733.roa
File:                     3137392e34332e36322e302f32342d3234203d3e20323730383733.roa (raw, json)
Hash identifier:          DvBkxgguONyAPoba+UhaIiQ2L1PvP4Xo03fa6CSn+O8=
Subject key identifier:   AF:90:57:C2:2C:A2:93:7D:5E:04:17:A5:C5:BD:91:EB:EE:43:15:CF
Certificate issuer:       /CN=46B712FDB1DD6EDE73EFEB711E11BCA6345B134D
Certificate serial:       A7DE61F3F49C32FE72047E5E0175164361EE4D
Authority key identifier: 46:B7:12:FD:B1:DD:6E:DE:73:EF:EB:71:1E:11:BC:A6:34:5B:13:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36322e302f32342d3234203d3e20323730383733.roa
Signing time:             Fri 05 Jul 2024 14:43:48 +0000
ROA not before:           Fri 05 Jul 2024 14:38:48 +0000
ROA not after:            Fri 04 Jul 2025 14:43:48 +0000
asID:                     270873
IP address blocks:        179.43.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 18:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a7:de:61:f3:f4:9c:32:fe:72:04:7e:5e:01:75:16:43:61:ee:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B712FDB1DD6EDE73EFEB711E11BCA6345B134D
        Validity
            Not Before: Jul  5 14:38:48 2024 GMT
            Not After : Jul  4 14:43:48 2025 GMT
        Subject: CN=AF9057C22CA2937D5E0417A5C5BD91EBEE4315CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:68:66:44:ff:ff:9f:9e:f4:1f:a8:8e:63:
                    57:36:b5:9f:be:7d:1e:ae:75:e9:5f:60:a1:b8:4d:
                    51:be:25:a2:33:7f:3b:1a:8d:d0:43:8b:74:a3:17:
                    b0:81:6e:a3:61:4c:8b:56:0a:29:da:b8:53:53:66:
                    35:d6:1f:95:fe:9e:13:3f:86:27:ef:59:e6:b4:9a:
                    4d:c4:49:6f:b0:7e:61:da:2d:b6:3a:3a:b0:1a:b0:
                    13:e2:1b:91:e9:4b:5e:34:ea:16:96:1d:1a:37:ac:
                    b1:af:b2:60:6e:f5:b2:a6:3b:fe:01:cc:d2:56:86:
                    e1:d9:e5:e1:9a:af:7b:ce:38:93:eb:9e:66:6c:48:
                    6c:a0:01:86:84:b1:f8:03:b6:92:eb:0c:43:2c:63:
                    22:e2:a3:b0:4b:a0:99:7b:d5:e5:b0:ce:cd:5d:7a:
                    8b:89:31:dd:5b:3e:0a:ae:88:c5:ad:8f:71:61:83:
                    7d:3c:8f:18:ca:da:90:cb:5e:af:53:bf:d0:6b:d4:
                    9f:7d:10:c5:18:35:0b:0e:12:8d:2c:43:6b:ea:15:
                    9c:3e:0c:5c:56:50:9a:07:f7:2e:5c:5c:b9:3f:7f:
                    d7:b0:90:08:59:f8:82:37:5c:84:3b:7f:25:ac:74:
                    f6:0c:74:a0:fe:e3:d7:f0:bb:54:b3:40:32:67:ba:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:90:57:C2:2C:A2:93:7D:5E:04:17:A5:C5:BD:91:EB:EE:43:15:CF
            X509v3 Authority Key Identifier:
                keyid:46:B7:12:FD:B1:DD:6E:DE:73:EF:EB:71:1E:11:BC:A6:34:5B:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36322e302f32342d3234203d3e20323730383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:16:80:3d:bb:01:d3:02:91:2e:78:06:fb:f6:68:7a:0d:90:
         a3:c6:53:1b:95:29:b8:c7:13:66:58:00:37:e5:56:c9:38:8f:
         9c:5f:cf:7d:61:79:55:17:2f:ab:58:f8:f7:96:e9:e1:8e:9a:
         90:ec:51:6c:2a:11:31:8e:fa:86:7b:1f:62:57:97:ee:ea:c1:
         9b:75:92:0b:17:52:d4:51:66:d5:ee:ea:37:5a:e9:ca:78:9a:
         2f:88:2d:be:ca:74:83:c9:9f:c0:56:55:c7:2a:f3:1d:60:1f:
         ff:e8:02:4a:2b:1a:fe:26:9a:7b:14:a4:1d:15:b3:e7:62:3b:
         35:94:c3:e2:b6:93:6e:68:8d:da:43:19:41:7d:2d:1f:ef:de:
         6c:00:93:24:d4:cc:cb:63:f6:84:c3:32:3e:99:4c:07:2c:25:
         83:76:0d:fd:ba:41:e7:eb:f2:60:10:78:90:e8:fe:2f:60:6f:
         88:98:ee:cf:fa:6e:86:c8:df:2b:b5:95:d4:88:7b:fc:36:dc:
         b0:24:43:90:45:36:82:2f:73:4e:7f:da:f9:f5:f7:c6:3c:ad:
         43:64:c4:f8:b0:0c:6f:58:6f:6e:99:d7:c7:16:73:f3:54:ac:
         cd:43:93:4c:e1:ad:46:a4:ee:ac:de:e3:fb:0c:71:b2:16:e2:
         cc:0c:fd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 20:37:14 2024 by rpki-client on console-fra.rpki-client.org