Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e35312e302f32342d3234203d3e20323633363334.roa
File:                     3137302e38312e35312e302f32342d3234203d3e20323633363334.roa (raw, json)
Hash identifier:          78uDFtbPDvoXHlij+7gtP7fuhGGMQR7q23p+wYwJS3E=
Subject key identifier:   1F:C4:E5:E5:FB:DB:9F:33:A7:74:0B:A0:4B:61:32:32:42:02:C6:EA
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       33E3EE436AC64CDBD3C300FFF72EFA0A65AF2547
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e35312e302f32342d3234203d3e20323633363334.roa
Signing time:             Mon 18 Nov 2024 13:47:03 +0000
ROA not before:           Mon 18 Nov 2024 13:42:03 +0000
ROA not after:            Mon 17 Nov 2025 13:47:03 +0000
asID:                     263634
IP address blocks:        170.81.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e3:ee:43:6a:c6:4c:db:d3:c3:00:ff:f7:2e:fa:0a:65:af:25:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Nov 18 13:42:03 2024 GMT
            Not After : Nov 17 13:47:03 2025 GMT
        Subject: CN=1FC4E5E5FBDB9F33A7740BA04B6132324202C6EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:a1:a2:f4:e2:29:d3:84:bd:f2:5a:44:e4:
                    ee:7c:4b:e6:14:cd:71:2c:9f:df:50:f7:6b:b3:1a:
                    a3:e0:8f:07:08:1c:0c:f1:ca:a6:96:06:5c:96:f9:
                    65:91:bb:93:24:b5:af:70:54:a3:d9:58:98:2b:fc:
                    8f:ce:73:d3:d0:6a:4c:3b:ac:2b:54:1e:f2:86:58:
                    6d:af:29:b0:fd:d8:7c:38:7b:95:83:e4:5c:70:3d:
                    92:c0:11:87:49:fc:37:da:f6:b2:2d:da:82:79:62:
                    73:87:aa:92:27:dd:e6:79:4c:45:b1:b6:10:f4:29:
                    ca:2c:5f:d9:5e:72:26:f0:91:fd:f3:e5:19:51:39:
                    84:af:20:9b:3c:60:d8:da:ce:ad:1c:85:54:78:24:
                    1d:54:35:95:cb:62:cc:d2:ed:a9:45:79:f7:2f:84:
                    42:d9:a3:51:56:52:c0:4a:b2:06:0e:ea:b9:35:af:
                    32:ea:54:ad:af:73:4c:84:eb:20:79:d4:b5:39:65:
                    f6:77:c9:d7:63:69:79:6a:f7:e8:6d:2d:a4:66:88:
                    d7:ed:37:3a:8d:46:a8:2c:6c:89:99:95:56:74:9f:
                    74:9d:53:9f:01:36:cf:96:a6:0e:91:cc:c1:ef:59:
                    84:43:79:0e:d2:ae:b8:db:04:4e:12:de:14:56:19:
                    23:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C4:E5:E5:FB:DB:9F:33:A7:74:0B:A0:4B:61:32:32:42:02:C6:EA
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e35312e302f32342d3234203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:14:34:b2:b1:bc:6a:cf:70:e5:05:25:dd:ed:49:2e:28:9e:
         eb:40:8a:9d:de:3a:8e:31:f5:cb:0b:64:f4:ab:71:d6:98:65:
         fc:32:d5:60:d5:1c:81:27:d5:3b:69:6c:7f:33:bd:31:c3:93:
         9f:51:17:6d:66:9c:04:25:67:42:43:e0:b1:1f:0a:01:cf:6c:
         7f:40:21:c6:9a:84:44:c0:df:bf:f8:a3:80:7c:33:be:7f:52:
         f8:c3:53:df:ee:f7:48:4e:f9:0f:df:4d:6d:e5:1f:ac:c2:3e:
         d2:1f:ee:f3:1d:72:4d:39:ca:de:3e:c4:bc:ef:ed:a0:b0:ae:
         21:56:c1:c4:ba:43:90:92:c0:4d:1d:a8:ca:fa:f6:cb:06:3a:
         5d:0f:15:f5:62:bd:9a:00:15:7e:70:e6:7a:45:e1:9c:10:19:
         2b:74:3a:83:2e:24:04:d7:57:14:18:2a:0c:10:f3:47:db:de:
         34:de:ff:8e:3d:82:0b:11:a8:59:3e:30:15:0f:04:da:a6:9b:
         de:e3:e5:18:f7:7e:58:99:3a:86:87:b1:34:00:36:ad:85:31:
         38:9d:63:31:02:84:4d:ec:73:56:e9:c5:c7:2c:8f:84:4e:24:
         b4:08:29:6b:21:6e:50:4f:ec:38:69:e9:1e:9b:8c:35:d4:64:
         3b:c1:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:14:14 2024 by rpki-client on console-ams.rpki-client.org