Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3233203d3e20323633343730.roa
File:                     3137302e38332e3230302e302f32322d3233203d3e20323633343730.roa (raw, json)
Hash identifier:          xAxHWPru7KSiVeO9xTQG2FQlvMerBg2ieEVy/84ZjkI=
Subject key identifier:   55:89:5E:24:C7:29:3C:E2:1F:0C:58:97:FD:48:F2:11:D2:25:7E:C6
Certificate issuer:       /CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
Certificate serial:       45819F5C6AF2EF93301D7B41B359536398D18B6A
Authority key identifier: 9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3233203d3e20323633343730.roa
Signing time:             Thu 16 May 2024 14:29:18 +0000
ROA not before:           Thu 16 May 2024 14:24:18 +0000
ROA not after:            Thu 15 May 2025 14:29:18 +0000
asID:                     263470
IP address blocks:        170.83.200.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Mon 20 May 2024 15:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:81:9f:5c:6a:f2:ef:93:30:1d:7b:41:b3:59:53:63:98:d1:8b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
        Validity
            Not Before: May 16 14:24:18 2024 GMT
            Not After : May 15 14:29:18 2025 GMT
        Subject: CN=55895E24C7293CE21F0C5897FD48F211D2257EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:0a:c5:fe:c0:8d:b4:23:a4:ba:10:35:e1:
                    65:7f:3a:d5:c5:37:69:d6:98:20:26:e2:d4:d8:06:
                    9d:65:eb:0e:a4:b9:be:0e:8d:c5:5e:9b:e6:b8:73:
                    4c:80:eb:6b:0f:1a:7a:c2:d3:8e:32:a2:93:04:b4:
                    1b:6a:b2:fe:f7:ea:47:7d:fc:f4:58:2b:4a:e0:1b:
                    42:96:ab:71:c8:d7:88:3f:b4:fd:4b:46:94:1b:28:
                    03:06:bb:69:4e:1e:39:c8:a0:e6:12:f5:80:45:48:
                    ee:1e:8c:96:88:44:9c:ef:dc:60:a7:ea:25:fd:b8:
                    31:66:20:c8:09:c1:df:e9:2a:ff:e7:43:f9:7f:10:
                    99:22:c0:9a:24:e7:69:9e:ab:12:00:8a:14:bc:c8:
                    b8:29:57:ed:87:1f:4b:b1:fb:0b:38:cc:6e:c4:26:
                    65:4e:43:86:cb:9a:8d:ec:56:46:89:14:95:27:fb:
                    9d:11:63:0e:c7:c2:31:36:a7:68:28:59:b0:ed:08:
                    b2:45:35:e0:45:40:6d:15:66:c6:05:44:27:13:aa:
                    0c:10:ab:74:93:b4:08:d7:4b:46:44:84:8b:c1:b5:
                    27:e9:34:0c:b4:4d:d0:e4:03:19:46:5d:59:b3:9b:
                    e2:94:7b:1c:47:4a:35:64:76:b7:94:14:3a:37:75:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:89:5E:24:C7:29:3C:E2:1F:0C:58:97:FD:48:F2:11:D2:25:7E:C6
            X509v3 Authority Key Identifier:
                keyid:9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3233203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:bd:cf:6e:46:1a:47:86:e9:66:82:5f:7f:0d:05:94:3b:aa:
         0e:83:57:26:48:ca:74:7f:89:62:5d:c4:1a:bf:dc:f2:d7:4a:
         5a:78:93:7e:99:d1:62:1a:49:99:32:8f:84:57:25:d6:79:f4:
         fa:56:b9:29:fa:15:66:1d:9e:30:fe:44:25:ea:2f:e3:7d:4c:
         6a:60:21:59:0b:02:05:7b:36:17:a3:3c:20:fb:90:e2:99:76:
         7a:c6:b6:8a:a6:19:93:57:3e:10:57:2a:7f:b2:0e:38:c6:b3:
         34:ca:81:4f:f0:28:97:d3:ae:4f:46:82:c8:cd:c2:cc:69:49:
         08:ab:8b:ff:dc:ab:08:2b:c2:29:93:87:ff:b1:88:6f:77:70:
         7d:d3:78:9c:3d:74:0f:60:84:b0:d6:0b:e0:22:5f:2d:04:81:
         b0:bd:ba:d7:66:cd:11:c7:3a:f8:ef:e2:8d:56:64:3d:84:5e:
         28:31:f6:5d:4f:3a:fc:6b:91:73:71:58:79:53:93:94:34:aa:
         2f:9d:83:32:25:2b:c2:52:44:46:38:44:46:de:4d:80:19:37:
         cc:c2:65:39:bf:1e:f1:35:29:97:37:1a:46:f3:8c:cd:42:55:
         fc:ea:3f:dd:af:80:64:d6:69:62:d1:2a:a1:31:61:af:69:1a:
         fb:e1:89:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org