Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3234312e302f32342d3234203d3e20323632343738.roa
File:                     3137372e34372e3234312e302f32342d3234203d3e20323632343738.roa (raw, json)
Hash identifier:          JQOv+MJw1X86EF24bC8/Qup51hK6Y3oEDhzNS+PdTOk=
Subject key identifier:   40:0D:BA:08:79:9F:50:53:77:A9:89:7B:84:B3:C7:8A:F0:7E:7D:27
Certificate issuer:       /CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
Certificate serial:       6C9B30FA6C361399A149FBBA4ECAD7CA2122D5ED
Authority key identifier: 83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3234312e302f32342d3234203d3e20323632343738.roa
Signing time:             Tue 28 Nov 2023 14:07:25 +0000
ROA not before:           Tue 28 Nov 2023 14:02:25 +0000
ROA not after:            Tue 26 Nov 2024 14:07:25 +0000
asID:                     262478
IP address blocks:        177.47.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 13:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9b:30:fa:6c:36:13:99:a1:49:fb:ba:4e:ca:d7:ca:21:22:d5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
        Validity
            Not Before: Nov 28 14:02:25 2023 GMT
            Not After : Nov 26 14:07:25 2024 GMT
        Subject: CN=400DBA08799F505377A9897B84B3C78AF07E7D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:84:be:18:9c:95:2e:12:0c:e7:cf:b0:55:
                    39:a6:55:c2:5d:ab:c2:3f:7f:66:84:68:be:ed:f9:
                    2e:7a:96:b1:00:0b:95:3e:db:70:c4:42:6b:0d:fb:
                    ce:c6:58:fb:64:7b:26:d9:b6:5c:52:60:2f:7d:f5:
                    9e:dd:3c:f7:d5:f3:67:26:5c:af:e5:c2:bd:cc:ee:
                    5e:f5:81:30:66:78:19:3d:08:34:24:34:67:af:a0:
                    53:06:84:cd:7f:86:35:8b:79:54:b3:7e:54:51:97:
                    15:e3:8e:99:60:20:2a:2a:15:e9:c5:9b:fb:92:8d:
                    43:92:3d:e9:3e:59:a6:fa:6e:98:5b:ab:2e:45:f9:
                    b2:43:e2:23:00:d1:b0:67:7b:62:ef:dc:fb:3b:ff:
                    b6:fd:0d:66:98:61:4a:d5:8f:e0:ea:6f:eb:0b:67:
                    75:0f:4d:86:45:4e:77:60:84:f5:4e:b5:e9:65:f3:
                    60:7c:aa:e6:36:6d:a3:00:a6:df:5e:3d:54:b8:ea:
                    17:4a:57:6d:b6:f5:10:8c:20:a1:ae:28:e7:a4:21:
                    fa:92:7b:2f:ff:ed:e7:4f:bc:06:ae:6b:5b:35:18:
                    cb:87:54:9b:cb:b0:c5:d3:db:75:9d:56:ea:ef:ab:
                    b5:ce:d3:b0:ba:a5:d4:86:23:c4:78:ad:60:0d:83:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0D:BA:08:79:9F:50:53:77:A9:89:7B:84:B3:C7:8A:F0:7E:7D:27
            X509v3 Authority Key Identifier:
                keyid:83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3234312e302f32342d3234203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:26:3f:31:63:24:fc:9b:1e:f3:c7:6d:e4:d7:c8:68:98:ed:
         fd:6e:a1:a0:74:57:10:9d:84:90:4b:1f:c6:22:a9:ba:66:8d:
         74:50:e9:dd:e4:11:22:33:ab:60:71:84:1e:a9:8b:99:de:ee:
         3d:a5:34:a5:17:d4:ec:c3:e0:17:05:a2:b0:5a:ee:38:20:a4:
         21:cf:a1:58:c1:7f:ec:14:e8:57:e3:b1:f5:2f:b3:68:67:fc:
         59:f9:42:b8:d4:f7:4a:d0:7c:1e:8f:28:be:06:ca:72:d4:af:
         1c:c4:1a:aa:c8:ed:77:a5:bd:9d:cb:0a:8a:f9:d8:1a:da:a1:
         19:71:ca:05:4a:24:57:aa:b0:75:d0:0f:64:1d:bf:95:7e:51:
         08:07:7e:b5:26:dd:57:c0:8a:11:a0:4d:0d:86:e3:21:56:f8:
         09:6a:90:f9:d2:09:7f:7f:7b:7f:a7:37:6b:e1:c7:b7:46:ce:
         38:cc:97:a4:d1:21:79:45:2a:d5:f3:44:4e:79:dc:d6:9e:9d:
         51:72:eb:a4:e2:b0:3b:f0:5d:c9:85:1c:07:21:c6:7a:f8:cf:
         af:52:7e:e6:60:e1:ed:3e:49:cc:03:ba:9a:8f:58:0f:c7:82:
         2e:3d:a0:c8:3f:8c:47:f9:87:12:60:36:bd:b4:13:24:33:2b:
         49:48:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 17:49:57 2024 by rpki-client on console-ams.rpki-client.org