Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3232203d3e20323633363334.roa
File:                     3137302e38312e34382e302f32322d3232203d3e20323633363334.roa (raw, json)
Hash identifier:          VD6ToWwwS729nawhYb/7ccnFzlMC1n1jaFb6ahoFwyw=
Subject key identifier:   AA:BC:B8:22:BC:30:1C:AD:F5:8C:64:35:E1:A8:07:D7:AF:78:62:A4
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       77C1F108814FEC2D63357615CEF2D2A3155ACE05
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3232203d3e20323633363334.roa
Signing time:             Mon 18 Nov 2024 13:47:01 +0000
ROA not before:           Mon 18 Nov 2024 13:42:01 +0000
ROA not after:            Mon 17 Nov 2025 13:47:01 +0000
asID:                     263634
IP address blocks:        170.81.48.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c1:f1:08:81:4f:ec:2d:63:35:76:15:ce:f2:d2:a3:15:5a:ce:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Nov 18 13:42:01 2024 GMT
            Not After : Nov 17 13:47:01 2025 GMT
        Subject: CN=AABCB822BC301CADF58C6435E1A807D7AF7862A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:12:43:2a:f9:aa:b2:d9:3d:21:7c:25:6e:8d:
                    a4:92:72:61:bf:42:26:e2:3d:7d:11:59:12:09:b1:
                    25:86:03:66:5d:c6:ba:27:e4:c9:d5:16:bd:64:bd:
                    22:37:da:ec:4e:7c:b8:df:2b:fe:2a:8d:8d:4d:a3:
                    90:75:b4:9d:e2:bd:b6:69:94:b5:0e:4c:48:2e:f2:
                    bc:03:36:6f:f8:dd:e5:88:c2:38:3b:dc:ff:b3:c6:
                    d4:50:97:f1:59:9d:88:10:b5:11:ca:14:66:14:10:
                    61:e8:e7:52:c7:11:ae:df:0b:e0:26:6b:08:00:0c:
                    3a:22:eb:cb:fd:60:68:ee:1d:50:cf:b1:51:08:07:
                    ef:8e:6f:f0:d3:f1:55:3a:43:b6:19:be:86:1a:39:
                    b0:82:df:b5:a1:33:d0:b5:d9:6b:b7:8a:af:59:ea:
                    f6:9a:27:c7:9d:c8:39:62:cf:4a:3e:c2:2f:a3:3d:
                    0f:5f:75:82:92:3a:1c:1d:43:97:68:0e:e6:0f:74:
                    ee:dd:ff:a9:de:0f:c7:ce:0b:b6:08:18:ff:95:a5:
                    de:35:84:38:16:75:74:43:50:2e:1c:e8:53:f9:38:
                    be:c6:1e:0e:d7:37:6b:6e:10:e4:35:28:ea:20:f5:
                    56:c3:05:a0:e6:92:54:73:42:67:f5:a6:8f:3e:77:
                    3e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BC:B8:22:BC:30:1C:AD:F5:8C:64:35:E1:A8:07:D7:AF:78:62:A4
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3232203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:1b:b3:ba:5f:67:63:a6:3a:e7:0d:1e:ef:be:3f:32:3f:59:
         92:9c:0e:93:47:ad:43:a1:d9:ed:dd:2e:fc:a1:28:da:79:51:
         70:f3:5f:19:a5:99:58:ec:6e:aa:1c:91:1d:21:45:c3:16:e4:
         fe:4e:d5:da:8e:28:f3:ba:d8:93:eb:5f:ff:e3:74:65:c9:0a:
         46:2f:6c:41:94:12:ea:d5:af:07:ef:82:91:32:11:6a:99:24:
         c5:e4:35:59:62:f0:c7:f3:c4:77:0a:9f:57:81:20:2a:12:81:
         e7:54:81:f3:59:68:11:21:89:1a:22:aa:62:6b:c6:ac:9f:b0:
         91:e7:5b:ee:b4:b2:56:f5:5a:6b:a8:b4:87:6f:04:67:31:ac:
         c3:e7:9c:2a:70:a5:83:05:6c:65:10:2f:1d:d2:44:59:7b:14:
         ac:99:7e:0f:ea:36:bb:6d:0f:83:b8:d1:20:a6:3c:e0:2b:0d:
         3d:10:2a:dd:aa:12:d9:6d:1e:aa:97:01:93:02:98:96:0c:a3:
         f4:24:5d:9d:52:53:e3:b8:86:0e:db:2f:7c:82:31:22:07:1b:
         e3:2f:32:ec:ee:f6:9a:1c:ba:aa:28:87:db:f9:3d:b5:7c:19:
         41:90:cf:be:38:6f:0d:70:67:77:dc:52:d0:09:79:02:ea:11:
         95:8d:33:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:14:14 2024 by rpki-client on console-ams.rpki-client.org