Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3235322e302f32342d3234203d3e20323632343738.roa
File:                     3137372e34372e3235322e302f32342d3234203d3e20323632343738.roa (raw, json)
Hash identifier:          uNkq4KZiAipQOj81UP+Dnthr6TRPv6JfvZuVO5mWFxg=
Subject key identifier:   7E:2C:85:47:69:40:5B:F4:D5:40:E2:B9:C8:8C:2E:6C:9E:EB:F4:C0
Certificate issuer:       /CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
Certificate serial:       4E3B2967B65290B4FCDD1C4E63F679196A6F22EA
Authority key identifier: 83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3235322e302f32342d3234203d3e20323632343738.roa
Signing time:             Tue 28 Nov 2023 14:07:26 +0000
ROA not before:           Tue 28 Nov 2023 14:02:26 +0000
ROA not after:            Tue 26 Nov 2024 14:07:26 +0000
asID:                     262478
IP address blocks:        177.47.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 13:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3b:29:67:b6:52:90:b4:fc:dd:1c:4e:63:f6:79:19:6a:6f:22:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
        Validity
            Not Before: Nov 28 14:02:26 2023 GMT
            Not After : Nov 26 14:07:26 2024 GMT
        Subject: CN=7E2C854769405BF4D540E2B9C88C2E6C9EEBF4C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1d:79:32:af:c9:01:cb:ba:d1:4f:fb:08:c2:
                    c8:8a:33:93:00:29:58:d7:36:62:d0:77:03:97:88:
                    4c:c2:6b:3c:50:3a:cf:f3:9d:a3:f4:7f:41:91:86:
                    15:79:d4:fc:d3:50:bd:53:d6:5f:cc:9a:ab:94:44:
                    94:08:23:c0:f5:e1:d7:43:67:33:a5:0d:cf:9f:be:
                    42:2f:95:4f:16:df:2e:ba:5d:96:39:3a:25:1f:26:
                    4a:2b:b2:e9:15:e5:6e:e5:33:9c:3b:97:1a:ac:cf:
                    4d:fc:c6:a9:17:fd:3f:24:d8:75:87:0d:e3:23:bd:
                    d5:43:d1:7e:f4:1b:ee:2a:89:e1:6b:f8:9f:84:c6:
                    f8:f5:74:90:91:74:22:b6:9a:d4:b2:90:16:2d:e0:
                    92:49:57:ec:c7:4a:b1:0b:66:cc:36:80:7a:dd:d7:
                    a8:4e:8c:d9:8e:d8:38:37:ad:bc:38:c0:3f:76:a2:
                    7a:8a:e9:cf:00:c0:3f:85:83:b0:9e:49:4d:f1:8c:
                    49:ae:16:e1:29:e3:06:b8:9e:73:09:ca:e6:14:95:
                    72:13:31:0d:cf:2c:a5:01:ff:4e:bf:10:76:bb:25:
                    3e:65:2e:8e:3d:f2:fd:e5:29:1f:0d:b4:32:00:09:
                    fe:c7:82:9c:7f:6f:02:ba:db:11:f3:18:21:b2:4f:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2C:85:47:69:40:5B:F4:D5:40:E2:B9:C8:8C:2E:6C:9E:EB:F4:C0
            X509v3 Authority Key Identifier:
                keyid:83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3235322e302f32342d3234203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:bb:4c:c7:9f:af:59:d9:a5:f9:03:b4:be:2d:64:4e:a9:d3:
         d9:83:f1:c1:21:69:b8:9c:76:46:e4:0c:3b:fb:cb:5b:6d:c6:
         5a:07:3f:c3:ea:4c:03:7f:54:48:bc:28:26:a7:1d:be:b5:e2:
         f8:98:ca:0c:91:94:20:c0:c7:06:ae:99:ad:4b:e6:31:71:3d:
         94:3c:5d:60:fa:67:59:53:bf:2b:13:58:fd:7d:d5:6e:b1:cc:
         15:aa:4f:bf:3d:b6:54:55:3a:8e:c1:3d:44:6e:fb:6c:1c:e8:
         de:59:57:79:c4:29:09:b4:41:57:d6:78:9b:40:97:46:d6:7a:
         00:dd:de:36:b2:9c:e2:cb:78:c8:bd:6a:a2:cd:52:0e:ec:54:
         0a:1f:62:5b:19:2d:6f:d0:0f:ed:7f:da:84:13:f6:97:a7:75:
         34:08:0d:59:37:d1:c6:31:7e:b2:43:44:9d:d4:85:0f:e7:0b:
         d1:72:f9:74:4b:d7:ba:6c:96:07:e5:20:0d:b6:fb:9a:f6:5e:
         0b:ce:81:c3:a8:b0:f3:d1:9a:07:b6:38:87:a0:4e:c5:01:33:
         29:10:2f:57:42:39:9d:12:03:f7:ad:bc:26:c0:9e:48:90:4b:
         58:6a:96:60:40:fb:b4:1f:2c:7c:14:ab:0d:6f:b2:32:7e:b2:
         3b:3c:29:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTjspZ7ZSkLT83RxOY/Z5GWpvIuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNBQTE0NTRBNDQ3RDdFOEFDRTRCNzUwMkE0RUZGRDlF
Nzg5RjhFNDAeFw0yMzExMjgxNDAyMjZaFw0yNDExMjYxNDA3MjZaMDMxMTAvBgNV
BAMTKDdFMkM4NTQ3Njk0MDVCRjRENTQwRTJCOUM4OEMyRTZDOUVFQkY0QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdHXkyr8kBy7rRT/sIwsiKM5MA
KVjXNmLQdwOXiEzCazxQOs/znaP0f0GRhhV51PzTUL1T1l/MmquURJQII8D14ddD
ZzOlDc+fvkIvlU8W3y66XZY5OiUfJkorsukV5W7lM5w7lxqsz038xqkX/T8k2HWH
DeMjvdVD0X70G+4qieFr+J+Exvj1dJCRdCK2mtSykBYt4JJJV+zHSrELZsw2gHrd
16hOjNmO2Dg3rbw4wD92onqK6c8AwD+Fg7CeSU3xjEmuFuEp4wa4nnMJyuYUlXIT
MQ3PLKUB/06/EHa7JT5lLo498v3lKR8NtDIACf7Hgpx/bwK62xHzGCGyT9z5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfiyFR2lAW/TVQOK5yIwubJ7r9MAwHwYDVR0j
BBgwFoAUg6oUVKRH1+is5LdQKk7/2eeJ+OQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVdXeE5UWmR1NGpQOTRTZDY3cGRTa2ZMQ2R3TndVd3k1MXozQXhza2lL
OEEvMC84M0FBMTQ1NEE0NDdEN0U4QUNFNEI3NTAyQTRFRkZEOUU3ODlGOEU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgzQUExNDU0QTQ0N0Q3RThB
Q0U0Qjc1MDJBNEVGRkQ5RTc4OUY4RTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VXV3hOVFpkdTRqUDk0U2Q2N3BkU2tmTENkd053VXd5NTF6M0F4c2tpSzhBLzAv
MzEzNzM3MmUzNDM3MmUzMjM1MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxL/wwDQYJKoZIhvcNAQELBQADggEBAFm7TMef
r1nZpfkDtL4tZE6p09mD8cEhabicdkbkDDv7y1ttxloHP8PqTAN/VEi8KCanHb61
4viYygyRlCDAxwauma1L5jFxPZQ8XWD6Z1lTvysTWP191W6xzBWqT789tlRVOo7B
PURu+2wc6N5ZV3nEKQm0QVfWeJtAl0bWegDd3jaynOLLeMi9aqLNUg7sVAofYlsZ
LW/QD+1/2oQT9pendTQIDVk30cYxfrJDRJ3UhQ/nC9Fy+XRL17pslgflIA22+5r2
XgvOgcOosPPRmge2OIegTsUBMykQL1dCOZ0SA/etvCbAnkiQS1hqlmBA+7QfLHwU
qw1vsjJ+sjs8KYk=
-----END CERTIFICATE-----
Generated at Wed Jan 31 17:42:51 2024 by rpki-client on console-fra.rpki-client.org