Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230382e302f32322d3232203d3e20323637343230.roa
File:                     3137302e3233312e3230382e302f32322d3232203d3e20323637343230.roa (raw, json)
Hash identifier:          aHqFdGdYC7RcMpGsMxMAVoC3EWrxdFWf3MTDRWjnNkU=
Subject key identifier:   B7:B5:7E:C8:DA:97:8B:8D:7E:19:DD:04:E8:FC:14:7E:66:A2:1A:02
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       207D4FE6B8EDC519BE49D9987659B34F301953CB
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230382e302f32322d3232203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:36 +0000
ROA not before:           Fri 05 Apr 2024 01:55:36 +0000
ROA not after:            Fri 04 Apr 2025 02:00:36 +0000
asID:                     267420
IP address blocks:        170.231.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 21 May 2024 16:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7d:4f:e6:b8:ed:c5:19:be:49:d9:98:76:59:b3:4f:30:19:53:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:36 2024 GMT
            Not After : Apr  4 02:00:36 2025 GMT
        Subject: CN=B7B57EC8DA978B8D7E19DD04E8FC147E66A21A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:03:2e:7e:80:14:0c:9d:f3:d8:d8:9f:94:06:
                    6c:e0:51:f2:dc:4f:8d:ff:72:07:ca:17:11:68:4c:
                    f4:db:ba:05:18:ac:a0:b6:a7:87:42:12:23:1a:fc:
                    9c:86:3d:44:fb:9c:ed:e0:6c:47:89:2b:4c:18:1c:
                    93:7c:31:33:96:b5:0c:71:60:ff:39:c4:25:6b:9a:
                    02:90:cb:f6:12:92:13:81:99:80:ad:d5:8f:ab:00:
                    99:51:0d:57:53:a0:8c:0e:e3:c5:e9:cf:49:48:fd:
                    a1:0e:3b:44:a1:ca:e3:ba:3d:ea:c5:82:d2:f5:9b:
                    9c:2d:65:cc:67:c3:a3:27:7c:92:89:24:bf:2b:2f:
                    4d:66:2b:18:68:36:18:63:36:bd:a7:ef:61:7a:e5:
                    52:db:13:99:f1:0f:45:cd:16:60:18:9c:4c:bc:cb:
                    28:19:a6:67:b6:db:a4:8a:55:37:05:dd:c4:12:fc:
                    e6:4b:e0:98:02:66:57:ef:96:03:28:bf:b2:4f:b6:
                    7b:02:96:a8:63:24:9f:aa:c6:05:4d:f9:55:30:18:
                    05:35:63:39:c2:e2:2c:d6:a9:1e:e0:f6:20:dc:bc:
                    29:da:d5:46:c0:55:ce:f4:71:5e:39:7d:24:5c:25:
                    86:f1:45:42:91:c8:aa:76:c5:a9:b2:93:ef:73:4d:
                    fe:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B5:7E:C8:DA:97:8B:8D:7E:19:DD:04:E8:FC:14:7E:66:A2:1A:02
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230382e302f32322d3232203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:03:bb:55:4b:38:26:65:8c:1e:a7:1e:a2:82:9c:55:48:ce:
         41:5a:17:b0:e9:fd:f0:4f:6c:e9:0a:e8:0b:6b:ef:0b:38:6a:
         e9:fa:00:49:df:ea:91:c9:90:d1:a0:f6:e6:50:4c:12:48:53:
         b8:92:a1:a7:b1:a0:d0:f6:fe:d2:73:c5:07:01:e6:eb:03:a9:
         69:b7:af:43:1c:18:b9:08:77:ee:0c:d8:20:d9:da:fe:ca:b0:
         2b:a7:8d:ee:df:db:04:2d:b5:9a:ce:51:0a:2a:27:51:b7:30:
         e5:30:b2:b4:c4:4d:24:7d:b6:a2:34:f3:0d:a1:a7:df:df:dd:
         ee:ab:f6:92:3e:86:66:d9:dc:2f:77:e1:f7:2a:b1:c2:a7:5e:
         9f:63:9c:a1:fd:2e:17:c8:2b:2b:96:96:f9:73:39:af:9a:4c:
         16:22:9f:ab:75:4d:be:aa:92:24:4e:fb:7c:96:27:30:2a:e3:
         28:29:2a:7e:ad:26:a7:5c:9c:bb:a6:c3:66:ba:1f:2a:f2:aa:
         12:be:88:4a:3e:c0:93:16:31:0d:24:d0:d9:29:4d:3a:c5:ee:
         f6:ab:cb:04:34:ac:0d:f9:52:c3:f9:7d:22:20:6d:6d:7e:1b:
         fe:f3:13:0f:18:09:94:cd:cd:26:63:b7:d3:ca:84:b3:9a:9e:
         a6:70:65:0b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIH1P5rjtxRm+SdmYdlmzTzAZU8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc2NDY0MjUwNTM3MDhDQzkzOEVDNDU0MEVDQkJGNDRC
Mjg0OTU0NDAeFw0yNDA0MDUwMTU1MzZaFw0yNTA0MDQwMjAwMzZaMDMxMTAvBgNV
BAMTKEI3QjU3RUM4REE5NzhCOEQ3RTE5REQwNEU4RkMxNDdFNjZBMjFBMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAy5+gBQMnfPY2J+UBmzgUfLc
T43/cgfKFxFoTPTbugUYrKC2p4dCEiMa/JyGPUT7nO3gbEeJK0wYHJN8MTOWtQxx
YP85xCVrmgKQy/YSkhOBmYCt1Y+rAJlRDVdToIwO48Xpz0lI/aEOO0ShyuO6PerF
gtL1m5wtZcxnw6MnfJKJJL8rL01mKxhoNhhjNr2n72F65VLbE5nxD0XNFmAYnEy8
yygZpme226SKVTcF3cQS/OZL4JgCZlfvlgMov7JPtnsClqhjJJ+qxgVN+VUwGAU1
YznC4izWqR7g9iDcvCna1UbAVc70cV45fSRcJYbxRUKRyKp2xamyk+9zTf6pAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUt7V+yNqXi41+Gd0E6PwUfmaiGgIwHwYDVR0j
BBgwFoAU92RkJQU3CMyTjsRUDsu/RLKElUQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMS9GNzY0NjQyNTA1MzcwOENDOTM4RUM0NTQwRUNCQkY0NEIyODQ5NTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3NjQ2NDI1MDUzNzA4Q0M5
MzhFQzQ1NDBFQ0JCRjQ0QjI4NDk1NDQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzEv
MzEzNzMwMmUzMjMzMzEyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNzM0MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrn0DANBgkqhkiG9w0BAQsFAAOCAQEAEQO7
VUs4JmWMHqceooKcVUjOQVoXsOn98E9s6QroC2vvCzhq6foASd/qkcmQ0aD25lBM
EkhTuJKhp7Gg0Pb+0nPFBwHm6wOpabevQxwYuQh37gzYINna/sqwK6eN7t/bBC21
ms5RCionUbcw5TCytMRNJH22ojTzDaGn39/d7qv2kj6GZtncL3fh9yqxwqden2Oc
of0uF8grK5aW+XM5r5pMFiKfq3VNvqqSJE77fJYnMCrjKCkqfq0mp1ycu6bDZrof
KvKqEr6ISj7AkxYxDSTQ2SlNOsXu9qvLBDSsDflSw/l9IiBtbX4b/vMTDxgJlM3N
JmO308qEs5qepnBlCw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org