Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230392e302f32342d3234203d3e20323637343230.roa
File:                     3137302e3233312e3230392e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          FS8CT30nRDAaYppxASqy95pjiq3/4GHxvE8jv2P91Dw=
Subject key identifier:   F9:62:57:6F:90:54:3F:DC:B7:F5:B4:14:AF:08:85:B4:5F:51:F8:6D
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       3D9422647B0BC46805E3D23E2CC091680763174A
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230392e302f32342d3234203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        170.231.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 May 2024 16:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:94:22:64:7b:0b:c4:68:05:e3:d2:3e:2c:c0:91:68:07:63:17:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=F962576F90543FDCB7F5B414AF0885B45F51F86D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:b8:7b:b9:61:c1:e5:fb:ee:01:1a:99:ad:
                    42:5d:88:db:17:e9:57:6f:10:fa:44:cf:90:9b:b5:
                    92:8a:c0:2f:b1:4c:a3:f6:a7:3b:7e:9f:f4:7a:92:
                    92:fb:42:f7:28:ff:60:6a:ea:7e:d1:2a:22:6b:99:
                    5f:f7:0c:f8:1f:76:3a:59:13:2b:3d:4f:f2:90:2b:
                    cb:e3:ec:ff:6e:ab:92:3a:bf:c1:9f:f1:77:b1:27:
                    ad:5e:3b:80:7a:f6:bd:9d:7c:ac:68:b2:bd:2a:7a:
                    6a:13:e6:5d:73:8a:0d:04:16:9a:54:34:dc:51:45:
                    7e:f7:69:d9:ef:41:89:61:db:5b:93:da:a1:31:3a:
                    ee:3c:2f:47:b3:0d:7c:91:44:1c:66:21:ea:f2:9f:
                    74:6f:36:50:87:d0:5f:30:51:6b:f8:88:79:43:ca:
                    e4:a0:b1:bc:ad:e5:57:74:67:58:5b:52:b7:e3:95:
                    c3:31:19:ee:41:91:ac:22:44:98:48:6b:a6:a8:ed:
                    b1:3f:62:79:dd:b8:b7:3d:bd:f4:55:f3:56:f7:56:
                    ad:fb:d5:15:1e:f4:b2:22:e4:0c:10:2e:b1:fd:32:
                    e6:b4:c7:12:af:25:c6:8a:e0:eb:bd:fe:87:66:bb:
                    64:81:2d:e2:2f:6f:cd:64:34:20:b1:a8:a5:39:19:
                    ab:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:62:57:6F:90:54:3F:DC:B7:F5:B4:14:AF:08:85:B4:5F:51:F8:6D
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230392e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:17:e7:de:ff:97:3f:a7:95:10:17:43:1b:f4:b7:ef:3e:f6:
         5c:1d:31:45:60:64:e2:bf:a4:76:5b:ee:6b:d0:be:ea:12:3c:
         3e:58:f0:61:8e:65:02:a9:33:88:25:aa:03:51:38:98:7d:d5:
         d6:30:b5:4c:09:7f:88:41:7b:ad:70:2f:64:c5:99:32:11:e2:
         d4:7b:68:7f:8a:67:da:97:3b:66:cb:d2:75:4c:14:7a:d6:b3:
         77:f4:f1:82:db:1f:62:01:3c:71:80:3e:75:e7:b1:f1:6f:5b:
         61:70:88:23:7e:7e:4b:46:0c:10:34:a7:13:08:95:f1:d4:58:
         fd:b1:69:ce:6e:e7:e2:ad:69:18:db:4c:3f:f6:06:21:35:58:
         ee:95:e2:86:c9:45:1c:b6:21:32:b7:5a:bc:76:f5:e8:da:06:
         e4:33:9f:21:9c:7c:b5:72:b4:2b:6c:27:89:62:30:57:fd:32:
         9a:98:b6:27:54:93:18:ab:7d:d3:ce:7f:47:40:75:df:01:72:
         8e:4b:c3:a1:6a:be:f4:7e:f1:ef:50:bb:91:69:c7:c5:7f:7f:
         8a:87:32:38:08:5d:3e:ce:e1:5e:96:22:c5:da:88:bd:71:66:
         c5:af:e6:ee:98:f9:6d:2d:23:27:6c:bf:d8:77:ca:93:87:ae:
         55:dc:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org