Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3231302e302f32342d3234203d3e20323637343230.roa
File:                     3137302e3233312e3231302e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          LICSvE5yapQkdmGUBiBzZi5T5LPE8Ghz4IkXm/6Qnro=
Subject key identifier:   7B:C0:EA:BD:1B:7A:6C:52:FF:B5:2C:AB:EF:40:50:CC:6C:F9:02:42
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       2154E2FE9303E25B0C09CCB3D09D3042F45C11F4
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3231302e302f32342d3234203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        170.231.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 May 2024 16:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:54:e2:fe:93:03:e2:5b:0c:09:cc:b3:d0:9d:30:42:f4:5c:11:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=7BC0EABD1B7A6C52FFB52CABEF4050CC6CF90242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5f:96:ba:fe:28:1c:9e:a4:65:96:bc:4b:58:
                    0d:1b:c2:10:45:6c:a4:2c:07:53:2f:8f:06:38:69:
                    d7:9d:46:0a:42:e7:2c:21:70:3b:e6:7d:b1:7e:0a:
                    33:cf:9b:b4:38:ef:10:0a:7f:2d:01:13:fc:73:f1:
                    f3:4f:3f:83:23:7e:1b:16:96:b7:a8:ed:59:89:61:
                    4c:ce:d6:a6:30:a7:9e:9e:cf:c4:58:06:e9:78:9d:
                    e8:b9:3f:0d:6f:ba:ab:3b:61:7b:a9:70:56:70:5d:
                    46:0b:89:e2:c1:d2:f5:c5:f3:21:30:18:b7:8a:a5:
                    60:e3:af:eb:84:75:96:98:64:99:6a:5f:42:0e:fc:
                    06:e2:0e:60:38:46:68:83:ac:a4:f7:a5:ab:c4:24:
                    a3:71:3e:17:97:ef:b3:ab:46:ff:78:9c:24:60:25:
                    aa:5b:71:b7:00:3b:33:55:fd:d6:ef:7e:92:e5:73:
                    c6:08:2f:2f:cf:9e:82:25:a6:b6:b5:dd:ce:f7:52:
                    9e:f9:e2:86:c7:63:60:21:01:0e:06:ea:0a:7f:89:
                    61:28:56:bd:e8:c9:88:81:2d:2b:bd:98:8d:2f:1f:
                    21:fc:6e:7a:ea:c3:88:1a:2c:9c:01:a1:dd:b1:f0:
                    5f:d5:44:91:44:ec:b0:15:cc:30:4d:f6:25:3c:86:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C0:EA:BD:1B:7A:6C:52:FF:B5:2C:AB:EF:40:50:CC:6C:F9:02:42
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3231302e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:14:34:ce:17:eb:96:d4:34:5b:9c:4f:f5:57:3d:06:68:be:
         da:ba:c3:97:1e:b1:84:3b:8e:46:1f:19:a9:e6:3a:27:30:75:
         f9:f8:99:3c:54:5e:c4:f9:b4:1f:de:ea:2a:11:cb:7f:40:29:
         5d:28:dc:70:e4:5d:9f:ac:5d:2a:0d:e3:29:98:22:74:55:7a:
         24:34:13:4f:20:62:1f:94:3c:a1:a8:31:9b:ef:87:09:fb:37:
         ec:0f:70:fa:04:73:07:5d:69:af:13:a0:d5:92:5c:ed:6d:ae:
         b1:92:0f:31:78:ad:c6:02:29:3e:ad:86:6f:5b:ad:ee:61:26:
         71:de:af:61:fc:8a:ce:3c:c1:fb:8a:3a:a1:1a:c9:d1:02:7b:
         6e:00:3e:fb:b2:1a:ff:63:12:f9:ed:dc:27:85:3e:e6:fa:69:
         46:58:94:de:57:33:bb:92:68:ad:85:43:67:71:e0:3e:e5:e2:
         2c:19:bd:dc:02:1d:a4:41:21:3b:bb:d2:33:0e:8b:b9:f2:59:
         8c:b2:55:3d:96:00:5c:24:02:e2:8c:09:6f:38:48:6e:e1:97:
         83:17:dd:3e:cd:cb:e7:ca:36:61:36:96:22:87:77:ba:bf:50:
         bf:b5:9a:3a:06:9d:98:ab:09:de:ef:77:76:88:e4:71:79:06:
         d7:00:43:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org