Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3231302e302f32332d3233203d3e20323637343230.roa
File:                     3137302e3233312e3231302e302f32332d3233203d3e20323637343230.roa (raw, json)
Hash identifier:          YukPWntDW2K/r3/xu/0AvCOPDWMqzH2xPsy7YUiLOu4=
Subject key identifier:   A2:1F:70:35:C7:D9:EE:99:0E:69:7F:CB:AD:D8:03:CD:0B:4C:53:29
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       181744DF683EDB03CEED1CCA32F82BEC736EEC43
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3231302e302f32332d3233203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:38 +0000
ROA not before:           Fri 05 Apr 2024 01:55:38 +0000
ROA not after:            Fri 04 Apr 2025 02:00:38 +0000
asID:                     267420
IP address blocks:        170.231.210.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 21 May 2024 16:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:17:44:df:68:3e:db:03:ce:ed:1c:ca:32:f8:2b:ec:73:6e:ec:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:38 2024 GMT
            Not After : Apr  4 02:00:38 2025 GMT
        Subject: CN=A21F7035C7D9EE990E697FCBADD803CD0B4C5329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:53:85:f9:85:86:f7:5a:8b:28:4c:c1:f7:
                    0c:d6:78:f5:3d:99:ff:ed:33:c3:6b:b4:76:25:59:
                    5b:5a:86:05:d4:54:01:85:18:fe:6f:fe:82:73:16:
                    a1:41:54:84:8a:a7:b5:17:17:6e:9c:6b:c3:51:a8:
                    e7:11:a0:e8:78:fc:01:ce:a0:9d:aa:4e:1b:7d:10:
                    fa:8a:00:a2:22:da:20:8a:f7:2f:b1:e8:c2:de:54:
                    1c:1c:5b:64:39:1e:2f:6d:76:e4:bc:4d:48:4b:48:
                    b2:06:3b:a7:7c:74:80:bf:59:f1:74:2d:96:4f:fd:
                    0c:82:1d:44:f5:70:01:7b:5f:64:c2:81:a6:6c:75:
                    e6:5d:ef:35:40:6f:1f:95:ef:ea:c8:b9:34:de:66:
                    5e:2b:6c:4f:b7:f3:85:21:b7:6a:3f:cb:84:b5:aa:
                    4b:e8:f8:9e:e9:ed:fc:fa:23:fe:09:2e:c0:7f:78:
                    8d:b5:05:12:95:26:e8:b1:e7:da:27:b6:0b:76:80:
                    e4:50:bb:b2:c8:35:53:24:cc:49:31:72:b4:70:97:
                    89:00:00:fd:13:a7:ae:c0:e4:82:b2:22:87:13:ee:
                    6a:47:e0:61:86:8b:5d:03:37:77:08:d7:ce:03:c7:
                    47:c5:6b:5b:1e:b0:dd:4c:79:f3:71:90:72:2c:8e:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1F:70:35:C7:D9:EE:99:0E:69:7F:CB:AD:D8:03:CD:0B:4C:53:29
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3231302e302f32332d3233203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:95:ec:dc:aa:3c:a5:36:2e:43:d8:03:ed:aa:05:6a:57:
         65:eb:17:3c:80:39:f0:bd:d4:37:4a:3d:ff:d8:b6:34:32:82:
         99:e0:f5:9f:c6:8c:83:27:06:11:0d:44:0a:2d:e0:69:64:4b:
         c9:68:25:32:19:c5:92:30:ed:af:a1:f7:44:f9:84:1e:eb:78:
         5d:c2:f5:37:7b:b6:8f:43:0c:cb:d4:57:ac:19:c8:71:ef:58:
         95:38:b0:db:fd:17:cc:c9:dd:b9:b9:d2:e1:ac:d6:42:78:e8:
         0a:af:73:7f:01:a7:39:a4:28:e4:f8:3e:f2:7f:30:a2:99:16:
         1d:96:a5:e7:cd:ea:aa:5f:1f:18:16:c0:92:ef:bb:c5:2f:38:
         bc:40:bf:11:0d:1c:8a:8f:97:b5:4b:54:a1:0d:22:5a:19:40:
         5e:1b:f3:22:06:45:60:57:38:54:09:c6:9d:bd:e4:fb:f3:8d:
         08:92:b6:54:87:d3:ad:90:82:bd:60:af:33:04:c5:ed:cb:cf:
         ea:5c:be:54:37:bd:03:4d:20:b2:72:eb:32:9f:50:24:39:78:
         86:c8:b4:d4:df:9e:a4:23:99:f4:60:a4:fd:68:ed:23:ea:78:
         69:79:d9:3b:45:0b:ff:61:66:79:05:63:86:c9:5a:44:26:fa:
         8c:92:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org