Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233372e302f32342d3234203d3e203631373932.roa
File:                     3137302e3234372e3233372e302f32342d3234203d3e203631373932.roa (raw, json)
Hash identifier:          j4W5BD0f2e+70jMeUkTD270rGAqONTk+ABYLA0ZO07Q=
Subject key identifier:   63:10:31:DF:93:30:46:44:27:C4:02:80:CB:44:38:8C:DD:6D:D3:08
Certificate issuer:       /CN=83F0276570C6F4420470E10FE5542F0F878F7D89
Certificate serial:       3A562ECA9DD32A583C9F2C3B1CE705E56F4631DE
Authority key identifier: 83:F0:27:65:70:C6:F4:42:04:70:E1:0F:E5:54:2F:0F:87:8F:7D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233372e302f32342d3234203d3e203631373932.roa
Signing time:             Mon 03 Jun 2024 14:49:15 +0000
ROA not before:           Mon 03 Jun 2024 14:44:15 +0000
ROA not after:            Mon 02 Jun 2025 14:49:15 +0000
asID:                     61792
IP address blocks:        170.247.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:56:2e:ca:9d:d3:2a:58:3c:9f:2c:3b:1c:e7:05:e5:6f:46:31:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F0276570C6F4420470E10FE5542F0F878F7D89
        Validity
            Not Before: Jun  3 14:44:15 2024 GMT
            Not After : Jun  2 14:49:15 2025 GMT
        Subject: CN=631031DF9330464427C40280CB44388CDD6DD308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:de:30:4d:bc:1b:6e:eb:c8:6c:94:ee:4d:
                    02:90:62:76:c2:17:43:93:19:89:c6:3d:4c:03:36:
                    47:b4:ac:58:e8:67:06:4a:5b:2c:92:73:c2:57:1d:
                    51:50:5c:51:3c:33:f6:f0:fe:72:ad:5e:a2:57:9c:
                    92:74:c8:43:89:00:9e:17:30:ee:8b:2e:2e:64:73:
                    68:4f:9a:de:02:92:46:70:aa:61:e3:cb:1d:4e:f7:
                    26:dd:10:c6:9f:ad:e2:2a:67:e5:36:a6:a7:4d:71:
                    34:7d:8a:4c:f1:5d:c3:9b:b7:74:bf:3b:fc:97:59:
                    9b:34:d5:28:47:07:5c:5a:94:2f:46:bc:4a:fd:e5:
                    1d:2b:3b:f3:a2:6b:6e:07:74:9c:c8:2d:a5:58:53:
                    4a:1d:71:a8:0d:e9:cf:e5:67:54:e7:6a:4d:36:8a:
                    40:82:81:bb:7f:a3:42:da:fc:aa:57:eb:0e:3f:dc:
                    61:f1:d0:e9:31:b3:dd:dd:22:15:89:f4:cd:54:e0:
                    30:86:39:22:f9:19:31:58:d1:50:a2:78:30:b8:10:
                    5d:da:86:0b:bb:b0:92:d9:13:a8:bf:de:21:22:57:
                    cf:42:16:6c:79:3a:dc:c8:99:c6:55:df:8c:97:6f:
                    49:07:5e:22:d2:6a:b7:6a:14:cf:85:04:22:98:e2:
                    a9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:10:31:DF:93:30:46:44:27:C4:02:80:CB:44:38:8C:DD:6D:D3:08
            X509v3 Authority Key Identifier:
                keyid:83:F0:27:65:70:C6:F4:42:04:70:E1:0F:E5:54:2F:0F:87:8F:7D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233372e302f32342d3234203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:6e:cd:3a:3f:0e:5a:2a:9a:5b:04:78:18:0c:87:3e:ad:14:
         ec:ad:79:85:3e:c0:86:5e:4c:a1:0b:f3:5f:bb:2c:61:34:16:
         af:94:1e:c2:8c:ec:4a:b7:26:78:4d:50:61:f1:c2:71:15:77:
         41:3e:0f:6f:8c:5d:5e:ec:8d:96:8f:7b:18:ba:ac:10:e9:c0:
         73:a3:dd:04:c5:d8:30:94:87:fc:d3:f3:15:61:ab:34:4c:7c:
         66:96:b5:a7:6c:dd:8d:fc:ed:cc:92:8a:5d:73:35:18:ce:89:
         13:30:8b:24:4e:c4:81:6c:c9:98:c8:55:76:5f:f4:c3:88:17:
         ac:ef:50:9e:3c:75:97:3a:41:cc:e8:41:b6:72:fe:28:33:85:
         33:3d:c1:32:cc:8c:38:3b:5f:7f:f1:bc:5c:22:03:43:f8:56:
         ef:19:0c:88:6b:f8:e1:94:f1:94:97:63:67:4f:2f:23:74:db:
         99:6c:2b:f4:03:0e:5c:e2:b8:7d:3f:b3:3b:4b:51:f7:db:c0:
         d7:29:6e:54:d3:ee:58:63:3b:12:9d:33:f2:49:e9:07:8e:64:
         69:af:e9:30:26:a9:e4:f2:17:1d:7d:97:55:a1:2a:82:a9:4a:
         db:3f:c0:3c:a9:47:b9:6d:04:b5:3e:df:16:9a:1a:97:22:ce:
         22:04:7b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org