Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3130382e302f32332d3233203d3e20323732313933.roa
File:                     3137302e3234372e3130382e302f32332d3233203d3e20323732313933.roa (raw, json)
Hash identifier:          6MmXskNOlomiYI47m6lra+LG4EMqmrjhcQmXJ62HNkM=
Subject key identifier:   B2:15:46:49:6B:F1:D1:8E:FC:5C:EB:56:1D:31:96:35:53:1E:83:92
Certificate issuer:       /CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
Certificate serial:       33CF230D78512CFD2777304E0AD98FB96CDF159B
Authority key identifier: 55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3130382e302f32332d3233203d3e20323732313933.roa
Signing time:             Fri 23 Aug 2024 18:30:15 +0000
ROA not before:           Fri 23 Aug 2024 18:25:15 +0000
ROA not after:            Fri 22 Aug 2025 18:30:15 +0000
asID:                     272193
IP address blocks:        170.247.108.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cf:23:0d:78:51:2c:fd:27:77:30:4e:0a:d9:8f:b9:6c:df:15:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
        Validity
            Not Before: Aug 23 18:25:15 2024 GMT
            Not After : Aug 22 18:30:15 2025 GMT
        Subject: CN=B21546496BF1D18EFC5CEB561D319635531E8392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a0:fc:fd:5c:9f:41:d5:0b:d2:ba:c8:7d:60:
                    96:a7:a9:6e:fe:b6:2e:42:ef:9c:05:5c:c8:9a:d6:
                    03:e3:98:74:40:f9:80:e7:84:4f:bc:9a:13:77:e4:
                    1a:8c:96:9b:91:2a:76:1f:7d:8e:db:a8:a0:a4:a0:
                    40:42:3c:4c:0c:36:6e:7e:31:4c:43:d2:b5:c0:b6:
                    65:4d:41:db:37:6c:c5:26:80:6f:a3:f8:49:f8:8b:
                    2e:9e:17:06:9d:34:10:82:a7:ca:6a:9b:ff:e0:20:
                    8d:a4:91:0e:4c:40:d3:4a:b3:e4:35:d3:5d:7a:e2:
                    c8:97:ee:98:d3:a4:2d:dc:c1:88:d5:09:39:1c:2a:
                    2b:e9:c5:f7:74:4f:38:78:c8:26:15:12:cc:e3:80:
                    c4:b4:4c:1e:48:4f:00:da:9f:39:4d:24:bb:94:6e:
                    82:37:0f:34:f7:41:ca:c4:7f:79:8b:22:b8:9f:a8:
                    e2:58:f8:53:64:67:f5:da:30:ac:77:21:87:9d:23:
                    26:6b:50:68:ea:38:30:1c:b9:bd:96:06:35:d4:12:
                    e3:39:26:74:60:64:87:db:dc:13:4c:36:a2:5f:4d:
                    38:b2:d2:5e:96:fc:37:c3:5a:da:6a:39:e5:8a:79:
                    d0:9e:07:bb:cf:ab:83:94:c2:dc:42:e7:95:bb:fb:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:15:46:49:6B:F1:D1:8E:FC:5C:EB:56:1D:31:96:35:53:1E:83:92
            X509v3 Authority Key Identifier:
                keyid:55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3130382e302f32332d3233203d3e20323732313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:f5:13:13:2a:53:6d:1f:16:25:c6:f0:ca:7c:6e:0f:df:07:
         23:1f:bb:88:22:11:63:83:cf:02:a1:e9:1b:71:5d:7d:79:96:
         1b:d7:6a:34:0a:8b:0b:f7:ca:2d:ff:35:e5:94:e6:2e:36:39:
         12:f9:28:ce:a5:9b:ff:90:09:6b:18:43:0f:ac:86:c5:a7:87:
         cc:74:0a:6f:89:c5:ff:40:61:5a:98:4d:57:4b:ab:e8:bf:fd:
         0c:1f:29:39:9a:8f:11:df:6f:22:f2:88:34:ab:43:70:15:21:
         b3:d4:a6:89:4e:97:a0:02:df:e7:f6:c2:72:e7:06:29:ca:3c:
         67:26:6c:c1:9d:46:e1:52:a5:d6:fb:d6:30:0b:e5:e0:8f:64:
         56:2f:4b:72:12:82:4b:d6:06:c6:c5:70:cd:9e:c3:98:09:64:
         78:01:93:41:02:ed:7c:c9:97:b8:6a:dc:10:6a:e3:e8:c0:55:
         d4:1b:1b:00:36:35:c2:66:f6:24:3c:a9:7b:10:9a:8b:74:89:
         e9:88:b8:07:e5:3b:59:56:1a:b5:01:96:12:24:a7:e5:00:f3:
         62:d8:93:39:44:3d:bb:93:91:06:c8:19:62:e0:b3:0e:d3:dd:
         a5:f9:2d:30:58:2c:3f:0f:f4:1f:cf:1c:8b:09:d4:61:f0:8f:
         fe:07:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 20:38:12 2024 by rpki-client on console-ams.rpki-client.org