Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3234322e302f32342d3234203d3e20323632343738.roa
File:                     3137372e34372e3234322e302f32342d3234203d3e20323632343738.roa (raw, json)
Hash identifier:          aA9bboLtuhU2/RgnlPNGexGXrESK58g9Gu701alU5iQ=
Subject key identifier:   A2:64:C2:51:78:12:F5:24:B2:1D:26:2F:77:64:03:29:95:42:24:40
Certificate issuer:       /CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
Certificate serial:       0CDFE322504DE0D5CCA479736D37CE487E8DD532
Authority key identifier: 83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3234322e302f32342d3234203d3e20323632343738.roa
Signing time:             Tue 28 Nov 2023 14:07:25 +0000
ROA not before:           Tue 28 Nov 2023 14:02:25 +0000
ROA not after:            Tue 26 Nov 2024 14:07:25 +0000
asID:                     262478
IP address blocks:        177.47.242.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 13:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:df:e3:22:50:4d:e0:d5:cc:a4:79:73:6d:37:ce:48:7e:8d:d5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
        Validity
            Not Before: Nov 28 14:02:25 2023 GMT
            Not After : Nov 26 14:07:25 2024 GMT
        Subject: CN=A264C2517812F524B21D262F7764032995422440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:57:7e:13:a1:52:3b:2f:d6:49:82:40:58:
                    60:f2:08:ce:ab:80:50:06:86:ca:95:94:f3:c7:ea:
                    b4:7d:ee:2b:85:fa:4d:c2:5e:f3:2c:1d:c9:97:c6:
                    e6:90:42:59:de:65:5f:ca:40:c9:b9:d6:bd:bf:aa:
                    81:65:3a:04:f1:22:c6:0d:cf:6b:f1:70:66:a8:f2:
                    67:6a:66:f9:23:ca:1f:48:33:b7:a7:f1:f0:19:b4:
                    27:b1:b2:4d:78:78:63:c2:52:97:90:2f:c8:42:70:
                    a6:f2:18:29:66:82:bf:33:16:5d:d4:4f:0a:10:dd:
                    6b:a4:57:93:21:6f:b2:52:69:dd:1a:f4:c6:bd:5b:
                    63:e3:75:8e:81:d7:cf:c1:49:75:92:b3:19:ca:c8:
                    3a:29:5f:b2:cc:18:d0:74:e2:af:66:56:71:66:78:
                    40:a6:0a:20:22:03:85:5e:36:98:0d:99:0b:e5:2b:
                    eb:9b:f5:d4:15:8a:12:10:b1:a8:21:7d:b9:6b:69:
                    62:d5:1b:e3:95:23:63:5d:2d:41:02:bf:8e:b3:3c:
                    1e:05:db:4e:c1:66:f0:0b:cd:5a:05:ff:6b:37:ad:
                    77:82:00:04:f5:ba:74:ed:a9:67:5b:10:a9:06:c7:
                    18:62:04:99:d2:f7:bb:2d:07:45:9a:43:1f:1b:e0:
                    fb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:64:C2:51:78:12:F5:24:B2:1D:26:2F:77:64:03:29:95:42:24:40
            X509v3 Authority Key Identifier:
                keyid:83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3234322e302f32342d3234203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e9:ce:90:27:aa:d6:70:9b:b0:53:4a:7c:f7:c8:0d:71:03:
         a1:fa:98:6b:78:d8:9b:43:41:6b:cc:9f:7f:e1:a7:b2:61:42:
         b9:27:f9:8e:c3:91:e2:ab:df:8c:6f:ac:d8:ab:86:ad:21:17:
         87:f6:65:a4:04:0c:4f:41:d2:0f:28:c3:e6:b5:09:98:9c:f6:
         6b:7f:3a:6e:e4:da:96:b8:60:cd:f1:8b:0f:9d:46:13:5f:e2:
         9e:89:65:2d:ae:2a:06:c3:9d:1c:fa:a1:55:59:b7:ea:21:56:
         38:70:53:b1:51:ca:41:5a:fa:bf:a5:88:a6:31:96:5f:cd:9b:
         54:13:ef:71:34:f7:c2:cb:9d:e0:2d:0a:f2:45:3a:7e:c1:dd:
         11:00:07:8e:3a:f8:c2:cd:cc:a1:5c:a6:45:4a:a6:f4:8f:0b:
         59:c2:99:13:32:25:90:9e:2a:3c:0d:d5:0a:3a:1b:0f:d2:9d:
         06:44:2a:fd:1a:c2:68:e9:88:69:bb:a7:07:b5:1a:42:16:f8:
         a5:f6:97:d9:05:76:39:0f:01:97:78:8f:50:1f:81:89:c5:0e:
         80:b3:bc:1a:6d:83:33:79:99:95:33:71:1f:0e:e1:ed:2d:ed:
         69:14:21:68:09:af:f9:c8:93:61:5c:78:4b:a3:b8:d4:30:83:
         80:f5:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 17:42:51 2024 by rpki-client on console-fra.rpki-client.org