Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137372e302f32342d3234203d3e20323731353030.roa
File:                     3138312e3233332e3137372e302f32342d3234203d3e20323731353030.roa (raw, json)
Hash identifier:          6utsh/tFYVYCpHkE/o2jiVoSsGd9GkVQjsM6a1RJqvc=
Subject key identifier:   6A:37:0B:BE:21:8D:65:86:15:79:72:ED:01:88:9F:91:17:92:EA:CA
Certificate issuer:       /CN=249982A414DC7818B3DD0BE08F54211F76DC2061
Certificate serial:       522F3FA4B1F56C6FD3083876505FCE8F80B7EBDB
Authority key identifier: 24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137372e302f32342d3234203d3e20323731353030.roa
Signing time:             Tue 30 Apr 2024 08:05:32 +0000
ROA not before:           Tue 30 Apr 2024 08:00:32 +0000
ROA not after:            Tue 29 Apr 2025 08:05:32 +0000
asID:                     271500
IP address blocks:        181.233.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 03:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2f:3f:a4:b1:f5:6c:6f:d3:08:38:76:50:5f:ce:8f:80:b7:eb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249982A414DC7818B3DD0BE08F54211F76DC2061
        Validity
            Not Before: Apr 30 08:00:32 2024 GMT
            Not After : Apr 29 08:05:32 2025 GMT
        Subject: CN=6A370BBE218D6586157972ED01889F911792EACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f0:61:35:d4:b4:bf:66:05:61:1b:64:98:69:
                    ea:dd:fe:7f:02:0c:cd:81:7e:59:bb:f6:51:a0:23:
                    0f:f4:c2:ed:cf:be:b7:01:51:c5:34:89:94:2d:40:
                    98:b9:d6:cd:04:55:1b:7b:a3:20:53:be:10:5e:aa:
                    4a:35:09:82:2e:61:c6:f5:a0:62:ae:e9:68:ec:48:
                    b8:13:7e:b1:3d:61:6f:de:ab:25:21:86:c4:53:ce:
                    02:85:ae:f6:8e:1b:0c:a9:40:fa:ab:38:63:71:65:
                    2c:5a:88:47:16:cf:c2:a2:e2:d8:f1:8a:be:9d:57:
                    eb:8d:12:d3:9f:57:47:2e:ee:f0:12:29:7f:74:48:
                    a6:66:1f:64:12:55:18:f8:16:5f:97:9c:d6:5d:5e:
                    53:da:2e:77:8d:22:9d:91:55:eb:1d:6f:40:9e:4e:
                    63:eb:71:f1:91:80:a8:d8:a9:b1:07:43:5a:4f:23:
                    b4:d9:30:80:d2:60:3c:f1:6b:b7:c4:9a:7f:f0:b2:
                    6f:f4:33:3f:ec:c1:9e:ec:b0:3c:1f:19:7f:a1:2f:
                    9a:fa:75:57:89:f2:30:b9:45:91:b0:fa:46:27:9b:
                    ee:48:c5:f6:96:d8:db:92:6a:01:b3:47:67:31:88:
                    eb:9e:51:80:fb:8e:50:81:eb:aa:ae:0b:97:54:9b:
                    50:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:37:0B:BE:21:8D:65:86:15:79:72:ED:01:88:9F:91:17:92:EA:CA
            X509v3 Authority Key Identifier:
                keyid:24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137372e302f32342d3234203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:02:e5:8a:31:cc:2a:a8:fa:05:6d:d7:28:5f:99:a9:e9:88:
         80:d5:33:2d:8a:d2:82:a1:08:8c:d7:82:21:d5:36:2a:0c:cd:
         42:27:b2:2f:08:dc:56:9a:65:36:32:16:5f:d6:c4:f4:0a:ee:
         02:0a:14:40:93:2f:51:99:a0:b1:cf:77:b1:34:41:26:c9:b6:
         4b:05:1c:1b:15:e6:e9:c7:08:f4:45:a7:77:fc:7a:3f:18:51:
         5f:2f:51:e7:35:e2:b6:a0:bd:46:a6:d8:c9:67:30:74:40:7a:
         82:2c:5f:54:5f:46:4a:ce:8b:ac:ac:06:6f:8e:92:c6:c2:59:
         e3:c9:d9:b2:a1:73:93:03:6b:8c:9e:ae:d3:03:25:5f:9c:07:
         3d:e9:bf:ec:c5:e2:e3:9a:bc:f6:dd:56:4c:69:3a:a5:6a:70:
         b9:aa:e7:65:6d:54:c7:9a:c7:d6:39:06:2c:84:f5:90:18:31:
         ba:cb:64:05:4c:f9:84:b6:2b:6d:41:1f:af:66:5b:69:f5:8a:
         13:1d:b2:2c:d6:11:67:48:35:40:ab:f2:25:2f:a7:3a:ff:78:
         0f:4b:79:e1:a0:77:0b:9a:b3:0e:41:70:7d:64:74:10:6b:16:
         1a:ef:6e:63:a4:5f:4c:da:95:86:07:3b:d4:b1:8a:4d:a6:1a:
         d5:79:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 05:08:21 2024 by rpki-client on console-fra.rpki-client.org