Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3131302e302f32332d3233203d3e20323732313933.roa
File:                     3137302e3234372e3131302e302f32332d3233203d3e20323732313933.roa (raw, json)
Hash identifier:          I2e80fu+nugEmHSt81K+aniFbbyB21aQqsxUc30Vg3E=
Subject key identifier:   73:10:8E:36:EF:5C:37:AF:F2:41:57:AC:60:3B:D9:D5:E1:00:DE:AB
Certificate issuer:       /CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
Certificate serial:       0AA5722741CB1F89127B861157C9815B025CA97F
Authority key identifier: 55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3131302e302f32332d3233203d3e20323732313933.roa
Signing time:             Fri 23 Aug 2024 18:30:37 +0000
ROA not before:           Fri 23 Aug 2024 18:25:37 +0000
ROA not after:            Fri 22 Aug 2025 18:30:37 +0000
asID:                     272193
IP address blocks:        170.247.110.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a5:72:27:41:cb:1f:89:12:7b:86:11:57:c9:81:5b:02:5c:a9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
        Validity
            Not Before: Aug 23 18:25:37 2024 GMT
            Not After : Aug 22 18:30:37 2025 GMT
        Subject: CN=73108E36EF5C37AFF24157AC603BD9D5E100DEAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0a:b7:1e:d5:93:02:6c:d9:90:1d:c1:ee:ac:
                    6c:1f:29:f4:21:bc:a4:c1:29:f6:f4:7d:35:67:c0:
                    d4:32:f6:3c:61:d1:bc:5e:5f:15:e1:b8:ed:29:62:
                    5c:93:d0:b7:ec:e0:22:b7:f4:50:7f:64:72:45:72:
                    ba:a9:6f:0a:df:46:4e:ae:33:83:a3:67:43:7e:d4:
                    c1:24:a3:c7:f5:a7:8f:62:1a:db:94:ab:58:b0:45:
                    29:ff:f9:bd:72:e9:c8:1a:88:45:c9:e7:97:6f:fb:
                    e6:e9:32:36:6c:95:07:3c:ca:27:39:db:cf:2e:6e:
                    17:0a:5a:8b:c6:9e:51:fd:b9:17:3c:f3:03:7c:58:
                    2c:34:97:85:f0:fb:f3:16:49:e5:00:77:0c:7d:b1:
                    88:cd:a0:24:c6:de:d0:09:1f:ab:f5:37:48:35:9d:
                    62:27:db:1f:39:39:9a:6b:41:a7:ad:8d:f5:6a:39:
                    62:09:4b:db:5a:ca:a9:00:f0:f0:da:6c:f3:f6:df:
                    91:e9:7e:72:12:a4:04:c5:f0:33:37:92:c8:fd:b4:
                    6a:b3:b7:18:2f:74:98:93:c2:0e:d0:58:4a:68:a8:
                    89:69:77:49:18:ce:9b:c2:88:6c:88:ab:e2:96:ad:
                    55:21:03:ac:69:b7:aa:2d:9c:c9:17:c6:6f:71:00:
                    83:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:10:8E:36:EF:5C:37:AF:F2:41:57:AC:60:3B:D9:D5:E1:00:DE:AB
            X509v3 Authority Key Identifier:
                keyid:55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3131302e302f32332d3233203d3e20323732313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:37:d8:4b:7f:00:39:93:cc:45:8d:14:3f:94:32:bb:37:7e:
         29:b2:0c:e8:97:2c:b7:b5:2e:ce:80:21:80:26:2b:bd:dc:fd:
         6d:4b:14:93:e1:16:e2:4e:80:1c:a5:73:6c:a1:db:c1:f3:fb:
         2a:5d:da:7e:04:61:b4:9d:66:66:b7:db:25:ac:4b:4e:52:9c:
         7f:5f:04:b4:51:2b:93:24:44:aa:b4:9b:19:73:32:4e:d1:b1:
         34:4a:8d:de:81:a2:74:8f:7d:dc:05:7b:eb:f5:ed:34:bf:0c:
         b9:ea:b3:8a:13:aa:ea:e7:06:c6:e4:38:e4:73:89:29:f7:d4:
         5c:1c:67:6c:2e:d5:22:85:98:8f:0a:c4:d5:a0:0a:0d:98:fd:
         90:d3:ae:07:f8:2e:d2:72:6a:53:c9:61:0d:ef:4d:20:6c:e3:
         a3:e7:89:e4:ac:fb:e0:00:e2:f4:14:b9:78:2b:eb:1e:1b:b8:
         72:31:f5:78:c8:5c:76:d3:13:dc:32:2f:ea:b3:97:5c:e7:cf:
         99:c2:44:72:19:99:dc:d1:dd:02:33:1b:b0:e9:9a:c1:a6:dc:
         3d:81:ec:ce:24:09:d8:f1:1e:e0:30:c4:bd:87:8b:5b:19:da:
         6d:21:b6:8a:3d:78:18:b6:f7:65:f8:ea:f4:22:e8:5d:bf:04:
         09:c6:4e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 20:38:12 2024 by rpki-client on console-ams.rpki-client.org