Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3137302e3234372e38332e302f32342d3234203d3e203631383035.roa
File:                     3137302e3234372e38332e302f32342d3234203d3e203631383035.roa (raw, json)
Hash identifier:          rRYDXpSkFwFbmJiOyvMxmVXjTbr6Fq/J/r+kNIE05wI=
Subject key identifier:   0C:17:C4:B5:83:6B:4E:F1:43:61:BD:77:20:F9:56:92:20:77:4C:EC
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       3F8575C8A6F830EE7D32A80C718E33A0E7830AAA
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3137302e3234372e38332e302f32342d3234203d3e203631383035.roa
Signing time:             Thu 25 Apr 2024 19:32:51 +0000
ROA not before:           Thu 25 Apr 2024 19:27:51 +0000
ROA not after:            Thu 24 Apr 2025 19:32:51 +0000
asID:                     61805
IP address blocks:        170.247.83.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:85:75:c8:a6:f8:30:ee:7d:32:a8:0c:71:8e:33:a0:e7:83:0a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Apr 25 19:27:51 2024 GMT
            Not After : Apr 24 19:32:51 2025 GMT
        Subject: CN=0C17C4B5836B4EF14361BD7720F9569220774CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:74:29:8b:1c:59:9d:7c:7b:6b:d1:9e:bc:
                    19:21:09:5f:7a:17:ac:52:6e:2c:5e:e0:0c:19:d7:
                    b8:63:0c:cd:d2:1c:19:0b:96:4a:cd:3b:58:4d:41:
                    28:27:1b:0a:92:13:7e:15:4a:2e:79:1d:d6:6c:21:
                    1c:71:98:c2:31:c9:e9:46:87:c9:06:f8:76:36:2b:
                    62:bd:bf:98:c6:5f:c9:0b:cf:6f:96:e5:50:2c:ee:
                    d8:d8:32:a0:36:df:01:80:94:db:27:ad:19:db:57:
                    2e:a4:a2:bc:1c:b1:d7:f0:02:cf:eb:fe:32:00:5e:
                    17:d4:af:a8:4f:6f:52:7e:99:c4:37:af:aa:78:ea:
                    a0:5d:a2:34:b9:1e:e9:15:d9:60:48:ba:ca:e3:90:
                    47:55:a3:2b:96:e3:97:fa:e0:fb:64:bb:f8:e4:f7:
                    2e:f8:2d:8a:db:6b:e5:3e:8a:3f:90:b3:c6:ef:0e:
                    80:a5:b3:74:88:45:46:1f:2e:5d:69:9c:77:ca:5d:
                    46:81:9c:53:eb:fd:70:17:99:63:cc:23:8c:90:31:
                    f9:90:ae:3c:72:4a:3c:e6:3d:b5:7a:5b:5a:10:65:
                    31:bb:37:f7:c8:4e:d6:e9:0c:43:37:43:bc:10:9d:
                    22:c1:09:0e:7e:52:0a:f0:23:cb:e7:c4:6a:9a:4f:
                    8a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:17:C4:B5:83:6B:4E:F1:43:61:BD:77:20:F9:56:92:20:77:4C:EC
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3137302e3234372e38332e302f32342d3234203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:b7:5c:cb:0e:4c:71:7d:1b:03:fa:56:c6:66:94:55:3c:17:
         a0:d5:2a:39:5a:75:1b:03:fc:ab:86:5b:21:15:9b:89:d5:1e:
         72:c7:bd:a7:5e:42:0f:4e:89:6f:73:57:51:7d:72:a6:63:f0:
         7c:7f:ca:09:79:2c:ba:7b:e1:22:bd:6b:da:61:04:c2:d3:38:
         a3:5e:ca:2d:78:6b:29:56:59:1f:30:f4:6d:1a:a4:02:48:46:
         a7:05:07:10:76:de:33:fc:9d:14:a1:a2:f3:6e:fe:8d:be:ee:
         0d:39:f1:b8:b0:14:1c:d3:b3:c8:ff:2e:94:e6:35:e0:a2:e3:
         a7:25:2b:22:a5:5d:ca:da:ad:46:ef:0a:62:5b:d1:fb:9a:e1:
         37:29:c4:19:2d:8c:26:be:c2:f0:c1:fb:a9:eb:19:36:f9:41:
         cd:8c:b2:2b:ff:69:5d:d6:79:ac:03:26:b7:42:8c:6c:57:74:
         16:9d:14:dd:6d:97:0b:67:25:68:7a:f0:79:81:14:79:5c:d6:
         07:f8:94:28:d8:ae:8f:64:21:9c:d7:f2:34:8e:77:c5:62:8f:
         29:c4:6e:a5:1e:14:75:18:05:4a:b5:6d:2f:b6:a0:80:15:2d:
         ee:17:49:97:73:1b:93:bb:cc:ac:b1:b8:de:b4:bb:3d:58:46:
         0b:e5:0b:36
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUP4V1yKb4MO59MqgMcY4zoOeDCqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU3MEJGNDgyMUIyMURDNTkwNUZERDc0RUQwM0MxMzZB
MTZBMjgzMDAeFw0yNDA0MjUxOTI3NTFaFw0yNTA0MjQxOTMyNTFaMDMxMTAvBgNV
BAMTKDBDMTdDNEI1ODM2QjRFRjE0MzYxQkQ3NzIwRjk1NjkyMjA3NzRDRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6HQpixxZnXx7a9GevBkhCV96
F6xSbixe4AwZ17hjDM3SHBkLlkrNO1hNQSgnGwqSE34VSi55HdZsIRxxmMIxyelG
h8kG+HY2K2K9v5jGX8kLz2+W5VAs7tjYMqA23wGAlNsnrRnbVy6korwcsdfwAs/r
/jIAXhfUr6hPb1J+mcQ3r6p46qBdojS5HukV2WBIusrjkEdVoyuW45f64Ptku/jk
9y74LYrba+U+ij+Qs8bvDoCls3SIRUYfLl1pnHfKXUaBnFPr/XAXmWPMI4yQMfmQ
rjxySjzmPbV6W1oQZTG7N/fITtbpDEM3Q7wQnSLBCQ5+UgrwI8vnxGqaT4o1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDBfEtYNrTvFDYb13IPlWkiB3TOwwHwYDVR0j
BBgwFoAU/nC/SCGyHcWQX9107QPBNqFqKDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzREWnQ4cEdoOUZYTU5XTDhNd3V1QXBzQnNBZDNMSFZ2THpka0Fxc1FC
OUgvMC9GRTcwQkY0ODIxQjIxREM1OTA1RkRENzRFRDAzQzEzNkExNkEyODMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFNzBCRjQ4MjFCMjFEQzU5
MDVGREQ3NEVEMDNDMTM2QTE2QTI4MzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c0RFp0OHBHaDlGWE1OV0w4TXd1dUFwc0JzQWQzTEhWdkx6ZGtBcXNRQjlILzAv
MzEzNzMwMmUzMjM0MzcyZTM4MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzgzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqvdTMA0GCSqGSIb3DQEBCwUAA4IBAQB2t1zLDkxx
fRsD+lbGZpRVPBeg1So5WnUbA/yrhlshFZuJ1R5yx72nXkIPTolvc1dRfXKmY/B8
f8oJeSy6e+EivWvaYQTC0zijXsoteGspVlkfMPRtGqQCSEanBQcQdt4z/J0UoaLz
bv6Nvu4NOfG4sBQc07PI/y6U5jXgouOnJSsipV3K2q1G7wpiW9H7muE3KcQZLYwm
vsLwwfup6xk2+UHNjLIr/2ld1nmsAya3QoxsV3QWnRTdbZcLZyVoevB5gRR5XNYH
+JQo2K6PZCGc1/I0jnfFYo8pxG6lHhR1GAVKtW0vtqCAFS3uF0mXcxuTu8yssbje
tLs9WEYL5Qs2
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:05 2025 by rpki-client