Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3131312e302f32342d3234203d3e20323732313933.roa
File:                     3137302e3234372e3131312e302f32342d3234203d3e20323732313933.roa (raw, json)
Hash identifier:          +SjVxE29THt2Gt7I5lRW7MKcNUZFuNmkQ98i7ihV02w=
Subject key identifier:   77:44:20:52:C6:93:1B:9F:8A:CF:97:ED:7E:CC:EC:A6:D1:05:34:DB
Certificate issuer:       /CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
Certificate serial:       04354427B8C3C59CBF6DD1A605EF122DCAEA2C2E
Authority key identifier: 55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3131312e302f32342d3234203d3e20323732313933.roa
Signing time:             Thu 04 Apr 2024 20:12:51 +0000
ROA not before:           Thu 04 Apr 2024 20:07:51 +0000
ROA not after:            Thu 03 Apr 2025 20:12:51 +0000
asID:                     272193
IP address blocks:        170.247.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 18:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:35:44:27:b8:c3:c5:9c:bf:6d:d1:a6:05:ef:12:2d:ca:ea:2c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
        Validity
            Not Before: Apr  4 20:07:51 2024 GMT
            Not After : Apr  3 20:12:51 2025 GMT
        Subject: CN=77442052C6931B9F8ACF97ED7ECCECA6D10534DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:5f:81:6e:97:fb:e7:33:96:4a:b0:07:f8:
                    a7:31:1a:a6:75:d0:2e:9c:da:d2:4d:8d:33:82:6c:
                    cb:f1:16:3b:5e:29:9d:2e:a2:1e:f5:71:5f:67:77:
                    1e:5c:e7:3c:ae:2e:1f:bb:2c:f2:0c:09:f3:84:94:
                    9e:66:c3:7c:74:5e:fa:b0:47:00:39:16:da:28:ce:
                    1f:d4:fc:c9:a7:51:1a:12:a1:d0:53:07:4d:bd:01:
                    f2:ac:2f:30:94:77:0a:d1:af:de:37:83:8f:43:9a:
                    37:27:e8:b8:6b:70:07:bc:4e:58:db:4a:5e:95:09:
                    bf:8c:98:32:51:f1:d5:7b:9e:e7:fa:c9:42:c1:e9:
                    15:83:ec:cc:20:fd:16:57:00:06:93:bb:3b:63:9e:
                    6a:a4:2b:9c:7c:af:8d:53:8f:49:ed:30:44:f6:c8:
                    23:05:84:b1:38:e7:74:9c:d3:7c:46:2f:89:dd:2a:
                    2e:e3:b0:ad:18:16:73:91:3a:7b:13:b6:d1:f4:77:
                    25:23:ac:71:45:4a:ed:4d:4e:d0:af:b3:6d:0b:fa:
                    6f:b7:f1:87:bd:07:22:0a:47:3b:4d:d8:d5:6a:ce:
                    d4:69:df:f5:c9:0a:de:43:d3:2b:51:bd:7f:ea:63:
                    84:1a:69:c9:8a:16:e6:48:8d:ef:0a:0b:d1:44:af:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:44:20:52:C6:93:1B:9F:8A:CF:97:ED:7E:CC:EC:A6:D1:05:34:DB
            X509v3 Authority Key Identifier:
                keyid:55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3131312e302f32342d3234203d3e20323732313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:51:b1:8f:65:5e:21:27:94:f9:31:e1:aa:80:01:f7:ce:7a:
         05:91:66:71:84:85:df:65:af:6f:95:fa:1c:ac:88:30:ed:5b:
         6a:5c:bf:74:bd:50:c5:5b:8e:fd:8f:e8:6c:a3:76:1a:ea:20:
         48:f3:b3:6f:63:66:3c:b3:f8:b2:26:fa:aa:c0:f2:82:2a:0f:
         7c:bc:a6:0c:1d:2c:fe:75:96:03:8e:e3:53:81:29:23:8f:6d:
         71:d1:b7:5b:18:87:b7:01:a2:70:12:dc:8d:17:b7:91:d6:bb:
         5c:98:cd:38:10:1a:1e:ef:8c:89:3d:61:67:1f:f5:f8:07:c0:
         dd:bb:15:40:80:f5:b0:c2:a8:b2:df:9c:be:49:fa:14:9e:08:
         2d:60:3b:52:b7:85:b2:ea:7b:3f:48:91:be:2c:b1:d5:ae:e8:
         08:fc:21:d5:2a:47:f1:9f:0c:c9:54:f4:af:08:13:16:8e:79:
         3d:f1:c2:b4:e9:e4:cc:4d:50:58:49:e1:b2:7e:72:36:d6:0f:
         d1:6c:28:4b:3c:7e:0a:8a:5e:83:0c:69:72:33:64:1b:d9:c5:
         86:98:95:22:72:58:bf:12:1d:04:3d:0b:a9:af:5d:1c:74:a6:
         28:74:73:01:44:77:85:97:08:be:6d:2e:9c:16:30:78:a6:92:
         9a:dc:10:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 21:12:17 2024 by rpki-client on console-fra.rpki-client.org