Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3234332e302f32342d3234203d3e20323632343738.roa
File:                     3137372e34372e3234332e302f32342d3234203d3e20323632343738.roa (raw, json)
Hash identifier:          fzApX0c1/MPeZp+hm/tOoio+xOu6AdKQqx93M75S960=
Subject key identifier:   3D:16:7F:A2:76:95:EA:51:96:5A:93:2D:1E:22:A9:D2:B2:EB:12:8D
Certificate issuer:       /CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
Certificate serial:       59E63BA46907EFF702C58908D1CE1F13F52B5472
Authority key identifier: 83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3234332e302f32342d3234203d3e20323632343738.roa
Signing time:             Tue 28 Nov 2023 14:07:24 +0000
ROA not before:           Tue 28 Nov 2023 14:02:24 +0000
ROA not after:            Tue 26 Nov 2024 14:07:24 +0000
asID:                     262478
IP address blocks:        177.47.243.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 13:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e6:3b:a4:69:07:ef:f7:02:c5:89:08:d1:ce:1f:13:f5:2b:54:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
        Validity
            Not Before: Nov 28 14:02:24 2023 GMT
            Not After : Nov 26 14:07:24 2024 GMT
        Subject: CN=3D167FA27695EA51965A932D1E22A9D2B2EB128D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:44:7a:18:b1:13:98:c5:bb:f5:31:de:ee:
                    9f:b8:25:61:15:25:e4:61:e4:e8:49:51:bc:30:dc:
                    8f:70:ec:3d:9e:5f:b1:4a:c9:46:46:4c:e0:3c:6b:
                    55:c8:3e:c1:45:1b:c8:7f:f1:24:34:5e:4b:53:93:
                    6e:da:52:03:67:e9:61:61:e9:e4:71:5a:11:44:db:
                    37:d4:dc:c6:4e:02:32:cb:6c:d3:43:3b:40:86:4a:
                    e0:da:e5:a4:ed:d2:78:0e:04:d5:20:4d:08:a9:82:
                    92:47:a0:1d:24:89:f6:bf:ea:94:58:cc:cd:e7:2e:
                    08:52:28:7f:cc:cf:45:99:87:07:a2:f8:44:83:1d:
                    4e:8b:51:a5:6f:12:68:a8:a0:65:ef:63:63:a1:79:
                    f5:4b:e9:19:ef:79:e2:e9:4f:10:09:39:92:f2:1d:
                    08:6a:40:0f:38:9a:58:37:01:5f:a6:f1:c7:84:f6:
                    eb:d9:61:1e:61:c8:44:8c:06:a6:68:ab:5c:27:f3:
                    6b:b0:a9:a1:e0:d2:5b:dc:a1:70:8b:21:a9:ec:b6:
                    9c:9a:06:e4:f2:4e:89:b8:2f:dc:1a:25:a0:75:dd:
                    7b:7d:2e:bd:82:94:62:10:74:1b:c7:88:86:97:29:
                    9d:e2:74:49:e8:07:ae:e0:6c:ea:7c:64:c1:8b:1f:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:16:7F:A2:76:95:EA:51:96:5A:93:2D:1E:22:A9:D2:B2:EB:12:8D
            X509v3 Authority Key Identifier:
                keyid:83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3234332e302f32342d3234203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:94:95:b9:7e:85:27:be:0a:33:3f:d8:f5:7d:06:b0:a9:ef:
         13:19:83:ee:39:c6:dc:90:e5:aa:db:3e:f4:af:c5:3e:79:f9:
         3c:bb:8b:58:1f:d2:d6:cb:b7:2f:5d:1c:5d:7d:46:90:77:53:
         c9:c6:ef:48:5b:9c:aa:9e:a0:3e:71:f7:6f:f6:67:84:7d:47:
         6f:70:d5:62:94:a5:43:4f:79:7b:9f:d2:24:f5:d2:3a:88:b6:
         cd:7b:70:ce:7a:60:27:a6:1e:1c:43:b9:60:1d:08:31:5a:f0:
         ea:0f:da:0a:ab:05:5f:5c:80:c9:f9:b7:69:11:2e:c8:8a:3b:
         46:af:67:4a:d8:64:2f:10:4f:70:b5:cb:5f:db:94:55:8e:16:
         f6:d8:09:17:ed:13:e3:c1:ba:38:fc:77:3a:75:29:3f:7a:dd:
         3a:9c:fe:5f:99:66:b5:8b:b3:c5:54:5d:ff:11:6d:08:0f:df:
         08:b3:2d:56:61:6d:7d:b1:72:1e:9a:78:84:19:68:84:fa:36:
         58:cc:5d:ed:8d:d5:db:88:c8:6d:92:d4:b9:ed:af:21:d8:e0:
         06:0a:cb:88:d6:fc:23:84:79:af:cb:f5:cc:5e:c9:c9:21:0b:
         0c:92:90:40:d8:7f:56:2d:d4:e0:60:73:38:6e:53:45:05:c6:
         c1:43:ad:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 17:49:57 2024 by rpki-client on console-ams.rpki-client.org