Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3137302e38332e3231342e302f32332d3233203d3e20323633343832.roa
File:                     3137302e38332e3231342e302f32332d3233203d3e20323633343832.roa (raw, json)
Hash identifier:          fRcaozE/BPp7dVk4g4uL/UyCnTUVbLLfDCHghfoRCVc=
Subject key identifier:   84:04:EC:8E:7B:63:1B:EC:2C:53:B8:3E:3F:4E:94:E1:41:45:24:3F
Certificate issuer:       /CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
Certificate serial:       3225458D52BAE5DFF387B8DB11E799CE16C8DA46
Authority key identifier: FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3137302e38332e3231342e302f32332d3233203d3e20323633343832.roa
Signing time:             Thu 04 Apr 2024 09:31:44 +0000
ROA not before:           Thu 04 Apr 2024 09:26:44 +0000
ROA not after:            Thu 03 Apr 2025 09:31:44 +0000
asID:                     263482
IP address blocks:        170.83.214.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 17 May 2024 18:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:25:45:8d:52:ba:e5:df:f3:87:b8:db:11:e7:99:ce:16:c8:da:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
        Validity
            Not Before: Apr  4 09:26:44 2024 GMT
            Not After : Apr  3 09:31:44 2025 GMT
        Subject: CN=8404EC8E7B631BEC2C53B83E3F4E94E14145243F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:39:c7:23:77:9c:87:e0:51:a3:f5:0c:0e:
                    b4:d0:20:b3:10:51:5f:18:4c:06:ce:f2:c1:73:e6:
                    cf:57:dc:42:63:de:3a:ca:c4:e3:ff:c2:15:57:90:
                    9c:be:30:fc:e7:90:9c:1b:43:22:5c:0d:64:9f:c7:
                    85:ea:f6:1d:77:1f:40:10:e6:5b:61:52:73:95:fb:
                    be:b7:54:14:10:4b:bc:b4:e7:20:01:e6:12:de:c8:
                    af:af:b9:3a:39:90:d6:6e:b4:80:a1:90:65:46:0d:
                    10:39:b8:6c:19:a5:55:5d:96:bd:43:ba:8c:db:66:
                    5d:16:8a:d7:3c:c7:11:28:51:91:20:97:d1:0b:a7:
                    04:5f:f4:fd:ac:4c:ae:1e:9d:ac:f4:59:df:8a:82:
                    ea:7e:ec:8b:2c:f5:0d:58:ed:b8:17:50:23:cb:61:
                    69:45:d5:f5:90:4b:24:31:08:21:9b:89:1a:54:7d:
                    92:74:af:5b:0b:af:07:13:32:07:17:a8:a4:18:f5:
                    85:8b:01:c1:1f:f3:0b:e5:6d:17:48:81:ba:ac:99:
                    48:41:ba:9d:c9:0e:5d:e8:89:66:1a:8e:8d:c0:23:
                    10:35:db:8a:e7:1e:1e:21:0c:08:30:7e:21:11:f5:
                    16:3c:4e:68:07:c5:be:41:f4:d4:a5:f6:4c:27:7d:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:04:EC:8E:7B:63:1B:EC:2C:53:B8:3E:3F:4E:94:E1:41:45:24:3F
            X509v3 Authority Key Identifier:
                keyid:FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3137302e38332e3231342e302f32332d3233203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:2e:e2:ad:e2:fd:ba:cb:6f:55:ce:0b:bf:e7:25:c3:be:
         aa:ed:24:c6:26:68:2d:6a:19:ba:03:81:ee:15:99:0b:34:e3:
         1d:3b:65:03:f7:18:21:80:f8:3a:a6:c6:03:8c:b7:95:81:e8:
         ca:f5:b7:06:4e:d7:fd:17:a4:8d:1f:88:db:f8:94:77:dc:68:
         d4:ab:2f:eb:75:47:26:38:55:08:f6:97:04:54:8b:38:6b:ac:
         c6:2c:7b:c3:0d:fe:a1:b1:d7:6e:85:0d:8d:21:14:89:de:e2:
         d7:14:2a:c9:4d:01:60:14:ba:5a:e3:dd:69:c3:86:d6:cd:4b:
         fd:61:aa:a7:6d:d4:21:2f:9a:73:74:cc:e5:80:4f:97:b9:a4:
         4e:c3:f4:1e:3b:94:35:f9:69:52:dd:42:be:1d:7c:cb:6f:70:
         a9:5e:52:c7:fa:aa:3f:71:e3:8a:de:fa:87:08:0f:c8:1c:8c:
         74:7c:4e:82:06:dd:d8:30:f2:a3:df:e0:63:62:69:61:82:47:
         4e:4b:46:6a:88:ca:43:7a:09:26:8d:e2:08:6f:24:2e:69:7f:
         0c:9b:4a:62:01:a6:65:19:5a:ce:03:d8:97:b7:59:cd:0c:6e:
         a4:a4:38:cc:ea:7e:04:c3:c7:a8:34:fe:df:54:87:59:15:4b:
         13:50:b2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org