Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3232203d3e20323636343731.roa
File:                     3137302e38332e34382e302f32322d3232203d3e20323636343731.roa (raw, json)
Hash identifier:          qNhItgcmPs1G1+Nwmzy28Nq3rNXzsI5CipD880dCZAU=
Subject key identifier:   9F:2F:5A:D5:35:E3:F6:42:85:EB:7C:F5:1A:54:74:47:57:E3:33:46
Certificate issuer:       /CN=FB71928419F16147EADCA6AC70A8747BAFC50F8A
Certificate serial:       0654578929FBAE8660918566B96FFF924D313F24
Authority key identifier: FB:71:92:84:19:F1:61:47:EA:DC:A6:AC:70:A8:74:7B:AF:C5:0F:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB71928419F16147EADCA6AC70A8747BAFC50F8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3232203d3e20323636343731.roa
Signing time:             Mon 18 Nov 2024 20:42:20 +0000
ROA not before:           Mon 18 Nov 2024 20:37:20 +0000
ROA not after:            Mon 17 Nov 2025 20:42:20 +0000
asID:                     266471
IP address blocks:        170.83.48.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 12:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:54:57:89:29:fb:ae:86:60:91:85:66:b9:6f:ff:92:4d:31:3f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB71928419F16147EADCA6AC70A8747BAFC50F8A
        Validity
            Not Before: Nov 18 20:37:20 2024 GMT
            Not After : Nov 17 20:42:20 2025 GMT
        Subject: CN=9F2F5AD535E3F64285EB7CF51A54744757E33346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:12:2a:d7:11:5b:d7:68:b8:7d:b6:fb:da:1f:
                    76:68:85:66:e3:de:c7:97:ba:36:68:ba:20:21:0e:
                    01:8a:c9:37:e9:6c:85:c4:ad:fc:e2:52:d3:46:f9:
                    44:72:fc:61:b5:9e:54:97:eb:ff:36:ec:4f:a0:95:
                    70:84:c8:f8:12:13:e7:c2:71:58:83:69:06:77:59:
                    e9:04:dd:2c:e2:fb:b0:d7:8b:e3:6c:36:5a:0b:0b:
                    54:d2:58:54:d2:d1:a6:09:b2:da:5c:9c:5e:6b:62:
                    e7:e2:bc:8e:15:7d:7d:96:2b:c5:f2:60:95:d3:6e:
                    fd:43:d9:59:93:f6:4f:71:54:fb:f8:2f:98:27:d8:
                    78:50:1d:0a:56:1c:a4:4b:76:2d:1f:cc:00:93:54:
                    5d:56:d6:89:d4:d9:19:c5:4e:ed:36:44:09:c3:86:
                    a1:41:f5:45:0e:29:aa:9f:fe:b8:45:ad:2e:23:66:
                    21:83:7c:0e:ae:ef:91:58:0c:51:8c:8b:70:9c:5d:
                    38:ae:e6:24:7c:15:1f:06:6d:fb:5e:20:a4:5a:55:
                    bf:09:45:12:34:a0:53:0a:39:3a:48:6b:c1:33:27:
                    fa:60:b7:7e:35:85:61:06:24:c2:fe:f9:e6:f9:13:
                    9d:de:79:70:74:5a:4e:d8:09:cd:02:5b:ce:d4:b0:
                    8b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2F:5A:D5:35:E3:F6:42:85:EB:7C:F5:1A:54:74:47:57:E3:33:46
            X509v3 Authority Key Identifier:
                keyid:FB:71:92:84:19:F1:61:47:EA:DC:A6:AC:70:A8:74:7B:AF:C5:0F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/FB71928419F16147EADCA6AC70A8747BAFC50F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB71928419F16147EADCA6AC70A8747BAFC50F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3232203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:0a:ce:be:0c:aa:0f:11:31:a3:9a:13:87:fe:0f:0c:57:c6:
         2a:6c:01:8a:17:d8:26:90:30:e5:2a:59:fd:37:69:e7:a8:7a:
         79:4e:66:4d:33:88:04:f0:32:ee:b2:03:57:fa:46:8c:ec:47:
         5f:3b:03:78:e9:cf:b2:30:8b:89:ba:ce:87:b4:f1:56:be:fa:
         d5:bc:a3:1a:4b:80:96:c9:1f:dd:f5:87:be:6b:32:47:48:3f:
         34:40:46:0f:f2:f6:86:54:71:6c:e3:d7:08:24:93:42:27:85:
         b1:53:53:e6:b1:d4:7c:3b:8f:3f:78:84:6f:eb:e6:95:fc:e6:
         1e:70:f1:13:5c:85:36:23:f3:b7:44:7d:40:66:88:78:9b:18:
         df:b9:6a:6a:ae:c8:6a:99:75:0f:75:1f:7b:f9:f5:3e:83:33:
         e2:22:52:ab:89:ac:45:c9:7e:c1:da:00:57:b4:80:d6:0f:f7:
         fd:d8:06:d6:6e:bf:b8:29:83:60:33:66:e0:51:3a:23:ca:54:
         11:ec:1a:c5:61:1d:f3:91:12:11:7b:59:13:de:47:ff:f3:1b:
         15:1d:15:e6:c5:11:e9:77:11:6a:97:f9:f2:c4:f8:04:21:a3:
         c8:b8:c7:d4:c4:1f:ff:92:9f:d7:1f:b5:48:db:4b:ba:3e:82:
         c4:6e:df:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:48:21 2024 by rpki-client on console-ams.rpki-client.org