Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa
File:                     3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa (raw, json)
Hash identifier:          laqN1taaMKstmchJLoFYYVpXpJ1eKv5c+kDqtsqt5eU=
Subject key identifier:   36:E8:CF:C2:C1:40:9C:7A:D1:9B:37:79:9D:62:DC:FD:41:EF:A7:5A
Certificate issuer:       /CN=83F0276570C6F4420470E10FE5542F0F878F7D89
Certificate serial:       29821EA092B5A1A0EAADA445E1CB330812FBCD0E
Authority key identifier: 83:F0:27:65:70:C6:F4:42:04:70:E1:0F:E5:54:2F:0F:87:8F:7D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa
Signing time:             Mon 03 Jun 2024 14:49:09 +0000
ROA not before:           Mon 03 Jun 2024 14:44:09 +0000
ROA not after:            Mon 02 Jun 2025 14:49:09 +0000
asID:                     61792
IP address blocks:        170.247.236.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:82:1e:a0:92:b5:a1:a0:ea:ad:a4:45:e1:cb:33:08:12:fb:cd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F0276570C6F4420470E10FE5542F0F878F7D89
        Validity
            Not Before: Jun  3 14:44:09 2024 GMT
            Not After : Jun  2 14:49:09 2025 GMT
        Subject: CN=36E8CFC2C1409C7AD19B37799D62DCFD41EFA75A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:db:31:84:47:b6:d4:67:ac:1c:a5:2b:dd:07:
                    bf:44:68:6d:12:45:03:f6:e1:c3:11:56:6d:31:6f:
                    5e:d9:73:03:27:a5:ce:ad:4d:83:52:f1:74:ff:15:
                    01:7b:db:e9:a7:24:39:d8:ae:07:4c:7f:37:a1:98:
                    0a:ee:e8:c7:f0:b8:c4:47:48:1f:0b:4e:21:03:73:
                    fe:cd:6a:36:e4:06:0f:b5:6e:76:c9:0b:60:b1:50:
                    51:24:85:3b:ee:e0:6d:05:53:d0:13:28:f5:02:71:
                    b3:83:91:3f:e3:68:c9:8b:a6:b0:6c:cf:3a:df:85:
                    0f:e2:f3:b9:59:de:ca:d5:6e:96:a7:eb:f0:d4:7f:
                    ab:c6:26:84:39:72:56:bf:cf:b3:b0:52:71:18:09:
                    b0:2f:9f:53:fb:14:25:ea:c5:e7:5e:17:94:2f:4c:
                    d6:07:92:d7:26:89:02:86:b1:96:b1:7f:4a:f0:a9:
                    58:16:90:18:33:22:49:27:90:6e:41:0e:3d:c5:09:
                    e1:01:69:11:97:20:1d:a5:69:ee:ba:f7:28:09:15:
                    2e:e2:48:c9:70:32:9b:7e:34:d5:a3:67:82:a4:04:
                    db:08:75:59:53:b8:ac:8c:16:00:11:a7:dc:fe:2f:
                    a4:f9:96:ba:a1:bf:0a:91:2f:52:36:e5:84:9a:b0:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E8:CF:C2:C1:40:9C:7A:D1:9B:37:79:9D:62:DC:FD:41:EF:A7:5A
            X509v3 Authority Key Identifier:
                keyid:83:F0:27:65:70:C6:F4:42:04:70:E1:0F:E5:54:2F:0F:87:8F:7D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:f3:5c:5d:24:d2:30:ff:55:57:68:fa:bd:9e:18:09:27:cc:
         9e:c7:4f:e8:8e:69:8f:09:e7:6b:ca:72:63:4c:5e:d8:c3:7f:
         ed:97:7a:e3:4a:db:55:e0:10:ff:e7:b0:f8:3a:d1:77:3e:0c:
         5e:38:81:62:f5:14:19:3e:1a:d7:89:69:df:9a:51:4f:71:7f:
         7c:20:25:b5:f6:28:3a:1f:ee:12:ac:6a:ec:ce:4a:92:78:ad:
         b9:80:c2:7c:44:3d:b0:a7:e1:4d:e6:9a:40:a9:dc:da:10:a8:
         72:16:fc:d5:6c:52:41:51:e7:53:bf:75:f4:9f:0c:5e:e3:d7:
         0e:ba:58:15:71:fd:b2:a2:85:1b:e5:93:4a:49:97:b4:7c:ee:
         0a:7b:55:f1:62:21:19:6c:9c:31:a1:5e:57:f3:33:7c:df:91:
         31:86:9e:85:5e:c8:cb:0d:35:3f:1a:45:c3:c4:23:8d:e2:0e:
         9b:8c:66:2a:a8:6f:41:7e:80:2a:74:e8:af:40:84:bb:6a:26:
         2a:58:dd:50:d7:25:39:34:54:b4:60:d0:95:4b:5d:69:14:81:
         8b:69:51:6b:dd:af:7c:14:30:50:b3:59:a0:a5:af:90:9f:ff:
         2b:a3:be:2e:4d:55:10:32:e3:d8:c0:e6:3b:1f:e4:54:b8:fb:
         21:ea:95:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org