Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230382e302f32332d3233203d3e20323637343230.roa
File:                     3137302e3233312e3230382e302f32332d3233203d3e20323637343230.roa (raw, json)
Hash identifier:          kG0wut9QerMocbkkZwvrjMQQAHdXS62Ux2f+xmx2l6M=
Subject key identifier:   30:0E:C1:17:78:FE:9E:B6:43:BB:68:1D:75:CC:CE:77:C4:96:D2:8D
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       7440BE4DC89C3236754500635539267A67411BCC
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230382e302f32332d3233203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        170.231.208.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 21 May 2024 16:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:40:be:4d:c8:9c:32:36:75:45:00:63:55:39:26:7a:67:41:1b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=300EC11778FE9EB643BB681D75CCCE77C496D28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:e2:25:f5:88:cb:91:a9:82:70:09:33:77:
                    5e:8a:52:67:46:55:26:a0:e2:6c:38:00:bf:41:3d:
                    f3:d3:22:0e:c2:d3:d5:f4:13:0d:b9:5c:7a:93:bc:
                    88:ad:ce:22:80:b4:6d:20:ce:b6:fc:2e:af:6d:d9:
                    f0:c6:b9:68:af:5a:87:73:28:de:b3:e3:fd:72:3d:
                    21:38:c9:54:6e:00:ff:39:a4:15:ac:fa:c6:3b:c3:
                    cc:8b:77:ba:dc:3f:0c:25:cf:2f:95:d2:87:12:48:
                    e2:1e:90:91:d4:99:bc:ce:36:61:44:15:77:f8:67:
                    bf:09:a8:da:5b:11:d6:18:ce:60:46:8b:bc:dc:c6:
                    52:3b:ab:69:cf:d2:c8:0c:9b:35:3c:87:fc:9d:62:
                    78:86:53:55:16:61:fd:d5:42:01:6f:cb:6a:3f:f8:
                    7e:1a:64:b3:fd:04:67:06:38:5b:9f:74:a7:ea:ce:
                    2e:2c:a3:c7:79:ad:ec:fa:76:6e:04:09:29:fb:43:
                    45:a1:76:75:0d:7b:d8:c6:3e:fd:d7:e4:67:68:5e:
                    6b:e1:0f:ee:78:04:95:a5:1c:d7:43:7a:ec:a9:b7:
                    b8:23:68:66:42:27:25:f4:25:d4:70:ad:cc:c8:88:
                    87:30:4b:43:14:48:29:cd:d8:99:70:a6:42:46:70:
                    cf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0E:C1:17:78:FE:9E:B6:43:BB:68:1D:75:CC:CE:77:C4:96:D2:8D
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230382e302f32332d3233203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:d3:00:61:9a:5f:50:42:aa:48:45:20:98:5c:32:8f:02:28:
         ab:67:be:56:a8:f3:26:c0:18:6b:8e:fd:96:ef:2a:e2:bf:fb:
         42:ab:c8:03:a9:f0:52:ab:82:80:3a:42:f0:dd:98:48:a5:a5:
         7e:49:ea:a8:a1:a5:28:e8:cd:ab:06:81:a0:e3:8c:b4:c7:fb:
         67:e0:95:1d:c9:96:53:10:b2:7a:c2:16:f9:04:92:67:19:20:
         0a:56:3f:f8:af:52:38:b8:47:14:29:d1:a1:dc:48:c5:50:a2:
         bf:37:aa:b3:2e:f2:51:ec:48:84:78:8d:14:bc:19:24:94:ed:
         f7:71:45:99:c6:76:d4:73:e6:f0:c3:a4:d7:8b:17:ce:3d:b8:
         9e:2f:5f:a5:d4:79:47:0d:56:47:48:15:d2:6e:03:8e:f9:c3:
         59:c4:81:89:1c:6f:09:9c:c3:da:a1:6a:af:29:4c:04:6b:9d:
         96:6d:0b:6c:57:69:1a:46:2b:b9:f3:bc:f0:22:97:7c:61:5b:
         74:7e:ae:6e:c8:68:cf:68:7d:36:52:a5:2c:83:57:5f:57:0f:
         8f:84:0e:69:94:f3:2d:95:a4:42:af:c0:cb:c8:2f:6f:4f:eb:
         62:dd:91:d3:7f:b0:ab:c0:7b:5c:d9:8c:5f:88:61:c1:f7:0f:
         5f:2c:37:dc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdEC+TcicMjZ1RQBjVTkmemdBG8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc2NDY0MjUwNTM3MDhDQzkzOEVDNDU0MEVDQkJGNDRC
Mjg0OTU0NDAeFw0yNDA0MDUwMTU1MzdaFw0yNTA0MDQwMjAwMzdaMDMxMTAvBgNV
BAMTKDMwMEVDMTE3NzhGRTlFQjY0M0JCNjgxRDc1Q0NDRTc3QzQ5NkQyOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb5eIl9YjLkamCcAkzd16KUmdG
VSag4mw4AL9BPfPTIg7C09X0Ew25XHqTvIitziKAtG0gzrb8Lq9t2fDGuWivWodz
KN6z4/1yPSE4yVRuAP85pBWs+sY7w8yLd7rcPwwlzy+V0ocSSOIekJHUmbzONmFE
FXf4Z78JqNpbEdYYzmBGi7zcxlI7q2nP0sgMmzU8h/ydYniGU1UWYf3VQgFvy2o/
+H4aZLP9BGcGOFufdKfqzi4so8d5rez6dm4ECSn7Q0WhdnUNe9jGPv3X5GdoXmvh
D+54BJWlHNdDeuypt7gjaGZCJyX0JdRwrczIiIcwS0MUSCnN2JlwpkJGcM/hAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMA7BF3j+nrZDu2gddczOd8SW0o0wHwYDVR0j
BBgwFoAU92RkJQU3CMyTjsRUDsu/RLKElUQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMS9GNzY0NjQyNTA1MzcwOENDOTM4RUM0NTQwRUNCQkY0NEIyODQ5NTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3NjQ2NDI1MDUzNzA4Q0M5
MzhFQzQ1NDBFQ0JCRjQ0QjI4NDk1NDQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzEv
MzEzNzMwMmUzMjMzMzEyZTMyMzAzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNzM0MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarn0DANBgkqhkiG9w0BAQsFAAOCAQEAsdMA
YZpfUEKqSEUgmFwyjwIoq2e+VqjzJsAYa479lu8q4r/7QqvIA6nwUquCgDpC8N2Y
SKWlfknqqKGlKOjNqwaBoOOMtMf7Z+CVHcmWUxCyesIW+QSSZxkgClY/+K9SOLhH
FCnRodxIxVCivzeqsy7yUexIhHiNFLwZJJTt93FFmcZ21HPm8MOk14sXzj24ni9f
pdR5Rw1WR0gV0m4DjvnDWcSBiRxvCZzD2qFqrylMBGudlm0LbFdpGkYrufO88CKX
fGFbdH6ubshoz2h9NlKlLINXX1cPj4QOaZTzLZWkQq/Ay8gvb0/rYt2R03+wq8B7
XNmMX4hhwfcPXyw33A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org