Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3231312e302f32342d3234203d3e20323637343230.roa
File:                     3137302e3233312e3231312e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          OEO59YRQq+tjQyBBj5InHnXHmZw1mUHcX8Q/1houdTo=
Subject key identifier:   1A:D9:8C:1D:C6:13:27:B9:28:6A:D0:69:84:77:6C:F9:32:3A:DB:06
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       3501828D4663221FF539DA99D1FD531E4175DB69
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3231312e302f32342d3234203d3e20323637343230.roa
Signing time:             Fri 05 Apr 2024 02:00:37 +0000
ROA not before:           Fri 05 Apr 2024 01:55:37 +0000
ROA not after:            Fri 04 Apr 2025 02:00:37 +0000
asID:                     267420
IP address blocks:        170.231.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 May 2024 16:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:01:82:8d:46:63:22:1f:f5:39:da:99:d1:fd:53:1e:41:75:db:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Apr  5 01:55:37 2024 GMT
            Not After : Apr  4 02:00:37 2025 GMT
        Subject: CN=1AD98C1DC61327B9286AD06984776CF9323ADB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cc:f2:21:25:91:ea:f7:f5:bc:9c:27:76:a0:
                    f4:c5:9c:88:64:cc:16:df:35:5d:50:0e:3b:96:e8:
                    a3:25:6a:37:ad:05:73:ab:bd:2f:f4:05:6e:b4:38:
                    cc:dc:05:7e:8b:e9:19:55:ca:41:d3:49:4f:c3:24:
                    cc:27:86:42:8f:cb:a3:f9:b2:77:3e:6a:58:e2:dd:
                    98:47:75:c8:9b:dc:17:20:4d:18:0f:26:1b:50:3c:
                    c3:e7:59:be:2d:aa:c3:51:ec:66:e6:cb:0e:d5:82:
                    49:2c:c8:dd:30:75:29:1e:cc:23:8c:c9:a1:82:64:
                    96:d9:f9:4c:7b:13:c1:43:3c:a1:f1:a3:0b:78:02:
                    46:8b:d2:f5:5c:2c:e4:ee:86:0b:ce:0f:75:12:69:
                    f7:a7:93:dd:16:37:af:b3:d1:2e:9d:21:51:35:a8:
                    9b:e4:ac:4b:01:75:96:ea:70:bb:83:ab:86:45:d3:
                    d3:e7:5a:95:5a:6c:11:0e:c2:33:24:e3:2d:0a:23:
                    e8:bb:12:0f:2c:bf:d3:17:6d:16:66:c7:96:20:64:
                    dd:66:8e:d8:cc:d6:9e:c6:2f:25:6b:0b:c6:c1:52:
                    fe:ff:50:50:ac:b9:0a:be:5b:92:de:d1:49:f1:0b:
                    0b:e4:86:a1:3e:54:3f:fb:c7:8e:18:6c:77:f2:c5:
                    d5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D9:8C:1D:C6:13:27:B9:28:6A:D0:69:84:77:6C:F9:32:3A:DB:06
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3231312e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:06:72:46:fe:4c:4c:66:c1:e3:69:7d:80:1e:bf:b4:52:9c:
         84:ee:1d:c8:aa:41:6d:28:20:b0:e0:cb:9c:96:1b:c1:85:7f:
         23:7e:41:9c:f0:a5:25:01:dd:ca:fd:ad:f1:1e:3e:bd:cb:3b:
         6c:da:bc:3a:55:f1:7c:b9:d3:ca:0c:e6:4b:c7:5f:5b:73:42:
         d4:ea:1a:51:ec:80:ad:f6:87:7d:e6:dc:f0:75:e4:c6:a5:c2:
         ba:60:f4:cf:76:aa:a4:9a:c4:b8:82:91:75:5c:03:90:26:0b:
         0b:3f:05:32:a7:d2:45:33:4f:e6:5e:27:48:b5:3c:e1:ef:5b:
         ff:c8:10:e6:f4:8d:85:a0:98:dc:7c:ef:f3:30:5f:7b:55:c7:
         1d:91:71:fe:ce:16:5b:5d:ba:8b:46:0a:3e:cf:77:d7:ee:39:
         ca:7c:83:48:08:b0:c4:cb:8f:6f:71:f5:6b:a6:c6:e5:19:62:
         c3:eb:6a:b8:67:68:5a:34:5c:2f:33:1b:c5:a2:f9:4c:47:40:
         c2:20:a1:3c:ce:e9:15:8e:73:6f:1f:9c:bd:60:af:7d:3e:15:
         09:97:88:50:ad:51:ad:43:92:38:38:e0:b3:cf:50:8c:e9:04:
         75:24:f1:f0:94:ca:f2:7f:58:25:84:97:8e:cb:36:2d:e4:4d:
         0c:d4:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org