Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230382e302f32342d3234203d3e20323637343230.roa
File:                     3137302e3233312e3230382e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          UAaJUDJ2Tpq7Vx/1IC+2sl01bP43VaEevTZm+KL3kXw=
Subject key identifier:   4E:F6:AD:41:50:63:17:E6:3D:AF:EB:BF:22:35:40:7E:A6:93:6D:E5
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       49CE9BEBB0F39B60A7C9D0F6539232F40C545F21
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230382e302f32342d3234203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        170.231.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 May 2024 16:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ce:9b:eb:b0:f3:9b:60:a7:c9:d0:f6:53:92:32:f4:0c:54:5f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=4EF6AD41506317E63DAFEBBF2235407EA6936DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:d7:86:0e:61:46:02:85:00:9d:4f:7e:34:
                    5d:07:da:c6:a6:51:61:a2:1b:31:46:af:d4:10:13:
                    a5:41:4d:f3:a3:f0:9e:a2:c2:4d:e7:3a:89:b7:9e:
                    18:0a:ca:80:b2:1a:0c:b0:21:78:28:9c:f0:7d:19:
                    83:2e:40:39:bc:e5:22:7d:1d:c0:6d:52:06:17:0e:
                    d6:5a:9e:e2:86:78:7a:fc:b7:ed:2d:1e:c5:45:7a:
                    4a:b1:1d:33:6b:43:f9:6e:9b:e4:e2:15:c3:d7:84:
                    59:a8:53:72:a5:49:62:d4:48:65:43:30:01:6c:e4:
                    3c:47:6b:a8:ef:99:fe:48:c1:c3:ed:22:82:e8:fa:
                    0c:d1:2a:b0:fe:50:b0:0c:09:c2:06:dc:04:6c:fd:
                    dc:ca:6c:0c:5d:9d:5c:ba:4f:59:c7:5d:ca:0d:e1:
                    ff:71:f3:f7:be:5f:ff:8b:b8:f9:3e:87:4d:2d:8a:
                    e8:15:4a:87:3e:fb:27:30:23:b1:99:a6:e4:4a:05:
                    fb:e8:e8:df:34:16:ad:4a:c0:59:4c:bb:f6:a0:ac:
                    31:fe:d5:00:9a:19:02:4a:f9:10:69:c3:1f:da:7b:
                    c5:d4:f4:6a:2b:2f:0d:91:57:c9:57:ae:85:b4:77:
                    35:d6:44:dc:f6:48:7f:14:97:83:0c:bb:49:16:e3:
                    e5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F6:AD:41:50:63:17:E6:3D:AF:EB:BF:22:35:40:7E:A6:93:6D:E5
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230382e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:a4:9f:d3:eb:44:6d:a6:68:7d:56:ad:c0:e1:d0:8b:ad:
         4e:12:f1:7a:55:19:f4:00:82:2a:43:9c:1a:43:0c:bf:df:69:
         16:97:d7:59:98:05:eb:ca:de:d0:44:a3:17:30:ab:b5:7f:c1:
         7b:3a:2f:23:30:a6:0a:20:e4:56:57:8b:c0:d4:fd:52:bf:b0:
         4d:eb:5c:4e:62:a8:c4:c8:ae:64:9a:eb:94:34:7e:b6:5e:7d:
         94:72:4d:f5:ca:37:52:ef:81:6b:de:35:e9:ce:f3:4c:64:88:
         75:33:c9:fc:4b:86:a9:5e:75:7a:39:ee:1b:96:8c:cb:67:8f:
         1c:c3:11:a8:78:62:83:b2:10:10:f2:cd:d1:01:a6:ad:e9:90:
         8c:eb:35:20:63:c9:c7:00:20:37:11:ba:9a:e8:93:20:f2:45:
         be:20:63:c3:4f:f3:04:5c:3e:6d:d2:04:3c:8e:20:36:73:ea:
         da:2e:d7:b2:9b:4a:2d:53:d5:6d:9b:f6:cf:ac:8e:91:7c:98:
         4f:05:b2:e9:0c:27:a9:7b:2b:c4:12:0b:cd:7c:d5:8d:61:6d:
         40:90:fd:29:1a:31:cd:44:ec:94:47:4a:28:2e:e3:45:e3:b8:
         7c:1c:5d:32:41:26:2e:08:c4:70:87:f5:01:2a:00:81:2a:e4:
         91:2e:0f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org