Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32322d3234203d3e20323632323933.roa
File:                     3137302e38302e3137362e302f32322d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          V9xmcwjS/eo5V/vQwZMGJMMAv8Ub37bnik89CfPh3yE=
Subject key identifier:   35:24:EE:42:90:2D:CF:E5:5E:EE:4D:F8:D1:84:82:AE:C6:EF:0C:5D
Certificate issuer:       /CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
Certificate serial:       1ED81702C75098E92E0460B0B3704AB1C11EFF57
Authority key identifier: 8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32322d3234203d3e20323632323933.roa
Signing time:             Fri 05 Jul 2024 15:18:59 +0000
ROA not before:           Fri 05 Jul 2024 15:13:59 +0000
ROA not after:            Fri 04 Jul 2025 15:18:59 +0000
asID:                     262293
IP address blocks:        170.80.176.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 16 Sep 2024 08:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d8:17:02:c7:50:98:e9:2e:04:60:b0:b3:70:4a:b1:c1:1e:ff:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
        Validity
            Not Before: Jul  5 15:13:59 2024 GMT
            Not After : Jul  4 15:18:59 2025 GMT
        Subject: CN=3524EE42902DCFE55EEE4DF8D18482AEC6EF0C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:03:08:f4:25:e6:14:37:13:3f:2e:26:47:
                    74:b3:34:a5:f3:bc:87:21:4d:5c:a0:e9:14:93:ce:
                    ec:bd:fc:90:56:bf:37:bd:71:b8:82:0a:55:e3:f7:
                    36:8e:a3:1a:0c:a5:1b:b8:1b:51:5f:ef:c0:3d:23:
                    aa:dc:b1:1e:b9:40:03:df:5f:26:67:a4:34:04:93:
                    8b:06:b9:c1:31:fa:c1:37:6c:92:82:ba:7b:37:d2:
                    0b:1e:41:3b:00:c7:11:cd:31:77:8e:74:f7:9f:4c:
                    90:77:40:51:cd:ed:19:f4:1c:dc:b3:85:5e:d9:bb:
                    7a:34:b6:d4:f4:da:42:40:da:55:1c:61:f7:c2:37:
                    c0:d4:a4:78:5a:6a:02:18:f7:1c:d9:00:49:3c:c0:
                    c8:c4:4d:ea:7d:ca:c6:6a:cb:2e:ec:e6:72:00:99:
                    7b:3a:7c:57:ce:6d:2c:a1:c7:90:b8:83:1a:b6:a6:
                    9f:16:34:8d:63:b8:f8:29:7a:d8:0c:1b:e1:90:af:
                    44:14:9e:2d:22:d3:0b:d8:a3:2d:c9:8c:88:7a:54:
                    29:65:ea:b0:ff:84:cb:93:81:8d:91:fa:1c:c3:df:
                    a1:4a:64:a3:ef:9f:eb:38:c5:b1:9b:54:f2:f9:e0:
                    01:3e:4f:e4:db:de:39:d4:ce:23:62:5d:57:d8:42:
                    ea:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:24:EE:42:90:2D:CF:E5:5E:EE:4D:F8:D1:84:82:AE:C6:EF:0C:5D
            X509v3 Authority Key Identifier:
                keyid:8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/8EA97C26E58799D3765EA8E38C553BF596FE990E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32322d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:8d:1f:a5:3e:7c:a7:11:37:c5:18:2d:13:37:8a:87:13:
         c3:82:dd:72:3e:1a:c9:d6:e9:e7:69:13:78:f1:d7:f5:a9:7c:
         02:8f:fd:26:27:70:f7:d3:62:aa:8b:ae:c3:86:52:0d:5d:e4:
         c5:78:06:15:8f:79:85:71:cb:27:e1:b7:6b:69:70:ea:6c:d9:
         93:65:26:a1:49:c6:c2:8f:97:d4:0e:f2:db:c4:55:4e:d8:96:
         f1:b4:f7:05:18:27:48:c7:b4:dd:ca:16:63:ce:3d:28:f3:e9:
         39:84:29:70:15:73:f1:21:77:0f:03:3e:13:50:70:32:8a:ee:
         69:b9:9a:2d:1f:a8:94:42:68:5b:b6:0d:2a:d3:63:82:76:e5:
         4a:02:17:a5:c7:3f:4d:e7:bc:44:cf:1b:4a:64:d1:e5:ff:05:
         ec:98:98:3c:eb:53:39:8f:10:04:42:59:ca:76:0b:7d:b7:52:
         38:79:6a:1b:2d:49:61:97:c3:8a:d3:cb:0b:5b:8d:14:41:be:
         23:ff:07:10:fa:82:0c:19:66:a2:c9:24:2a:53:cc:6d:9a:08:
         4d:cc:39:6f:35:6b:0b:74:11:d3:cc:94:10:95:11:10:9e:4d:
         2b:32:23:d5:09:07:3e:9c:78:9b:76:45:63:a5:46:4f:0c:e6:
         ba:b4:ad:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 11:17:35 2024 by rpki-client on console-ams.rpki-client.org