Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa
File:                     3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa (raw, json)
Hash identifier:          WmSQXIt3xkBCjj5I3N46kh1O6PivAUTs2J8uMLveP+E=
Subject key identifier:   F5:CD:E6:61:70:15:7B:B4:74:96:18:7A:5E:B1:38:C8:09:49:67:19
Certificate issuer:       /CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
Certificate serial:       67DBD452605069AB52199A4A9C8C39B2B3B91098
Authority key identifier: FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa
Signing time:             Thu 04 Apr 2024 09:31:44 +0000
ROA not before:           Thu 04 Apr 2024 09:26:44 +0000
ROA not after:            Thu 03 Apr 2025 09:31:44 +0000
asID:                     263482
IP address blocks:        170.83.212.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 17 May 2024 18:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:db:d4:52:60:50:69:ab:52:19:9a:4a:9c:8c:39:b2:b3:b9:10:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
        Validity
            Not Before: Apr  4 09:26:44 2024 GMT
            Not After : Apr  3 09:31:44 2025 GMT
        Subject: CN=F5CDE66170157BB47496187A5EB138C809496719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:a0:17:10:87:a1:d9:b6:78:a3:88:85:74:
                    7a:fe:80:8d:1b:10:03:e6:00:1a:23:81:af:62:ee:
                    15:a5:80:2c:d2:f5:13:f4:d4:ea:66:bf:ac:5f:3e:
                    15:51:1c:38:99:2d:06:6e:a3:1c:07:4c:80:e8:23:
                    27:91:7e:18:7c:08:7e:17:03:91:fe:cc:82:91:2f:
                    c6:a3:ee:7e:5c:8c:21:c6:5c:4d:53:7c:c0:31:d4:
                    23:fa:88:2e:8c:01:4b:d4:3f:53:e8:0c:70:15:ce:
                    cb:e0:15:cc:9c:33:e7:e6:92:8c:94:15:f2:f9:b4:
                    3e:ae:13:b3:75:d8:38:d9:be:ad:f6:dd:dd:70:85:
                    e1:2d:33:e0:41:e2:1d:4f:d7:25:e7:32:c1:04:69:
                    33:c4:27:b1:08:be:0a:66:78:22:ba:de:7a:41:d9:
                    98:61:9d:c6:2f:28:97:0f:a9:a4:2b:38:f9:08:73:
                    92:6a:a6:c4:d5:17:4f:a0:b4:9b:9a:36:23:07:38:
                    57:e1:fb:b0:ca:64:3e:35:41:2e:d1:93:a6:0e:bf:
                    96:42:58:93:a9:12:f0:d2:0b:7d:59:da:f7:48:73:
                    57:7f:70:83:e2:23:36:fa:0d:38:d5:a2:e1:80:30:
                    c3:d3:99:58:80:a1:32:c1:a1:07:0b:67:6b:f6:f7:
                    ce:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CD:E6:61:70:15:7B:B4:74:96:18:7A:5E:B1:38:C8:09:49:67:19
            X509v3 Authority Key Identifier:
                keyid:FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:94:3a:93:a1:0b:cf:62:0f:96:d5:8b:12:79:4c:a4:b0:b1:
         cb:8c:29:26:dd:de:3f:8d:f6:78:ce:3f:19:0f:b6:05:3e:e8:
         70:55:12:b2:90:04:bc:a8:0c:20:d9:47:b8:47:6d:ac:ef:c7:
         93:9f:e3:e3:ea:74:8f:04:3b:d7:01:77:c9:8e:50:2d:1f:86:
         4a:ea:f4:99:39:01:86:ed:fa:f3:dc:e6:26:1a:a3:e2:45:e7:
         03:20:04:83:53:6b:a0:68:b7:ad:80:a1:c3:d3:29:8d:9a:8a:
         85:6c:6c:b3:6f:7e:bf:bc:52:03:a7:1a:4d:b4:e4:61:2f:1f:
         d5:2b:81:ad:8c:99:65:2d:cd:5e:83:3a:8c:9b:cb:1a:29:e4:
         81:62:09:5f:b8:e6:11:10:d4:bd:c0:bf:aa:42:5b:5a:4b:0a:
         eb:6e:a3:55:35:a4:20:22:79:ce:89:11:54:59:9e:43:b4:d3:
         d5:c4:29:b5:fd:bc:87:f5:78:44:db:28:43:1d:c2:4b:e6:7c:
         b5:b1:4d:b8:8a:1c:b5:24:81:f1:85:74:11:02:24:31:1e:de:
         22:cc:b3:b4:ca:5c:0a:d6:a3:f1:1c:ef:6e:89:ab:2e:b4:65:
         24:fa:cf:a8:76:af:c9:08:b7:99:b6:8e:fd:08:cd:28:dc:21:
         86:4d:b9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:25 2024 by rpki-client on console-ams.rpki-client.org