Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33322e302f32322d3232203d3e20323634393532.roa
File:                     3137302e3234372e33322e302f32322d3232203d3e20323634393532.roa (raw, json)
Hash identifier:          4SIgfEC76tqctxdiXioBqr82Z2TDgIs7WXql9qqzY0Y=
Subject key identifier:   5D:39:6E:3E:B8:D5:E7:B7:11:71:AF:89:BE:95:15:77:96:45:EA:16
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       38BD01F42DFEDC5AD7C6CEA21FD22E5896011FC6
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33322e302f32322d3232203d3e20323634393532.roa
Signing time:             Tue 30 Apr 2024 15:13:14 +0000
ROA not before:           Tue 30 Apr 2024 15:08:14 +0000
ROA not after:            Tue 29 Apr 2025 15:13:14 +0000
asID:                     264952
IP address blocks:        170.247.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 13:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bd:01:f4:2d:fe:dc:5a:d7:c6:ce:a2:1f:d2:2e:58:96:01:1f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr 30 15:08:14 2024 GMT
            Not After : Apr 29 15:13:14 2025 GMT
        Subject: CN=5D396E3EB8D5E7B71171AF89BE9515779645EA16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:07:4d:a4:15:43:a5:0e:e7:37:5a:aa:d6:94:
                    3d:2a:8f:c6:be:2a:d3:5d:99:a7:e3:0d:49:82:57:
                    13:04:dc:0d:29:71:57:be:ad:a6:c4:e7:72:6a:21:
                    be:5c:a6:c9:4e:5f:a2:28:14:53:a2:0a:66:ae:84:
                    a8:da:a3:bb:8e:83:a1:d2:4c:c5:cd:1a:94:b4:b5:
                    9a:c5:19:f8:f8:ad:43:1e:22:72:cc:cb:d8:9d:08:
                    d3:3c:ad:53:49:37:9d:b4:03:a0:38:d5:4f:20:63:
                    b4:45:61:2b:f6:6e:ea:86:20:1b:9b:75:35:98:2c:
                    1e:11:3b:d5:fe:f8:25:f3:29:21:a9:71:95:78:fd:
                    97:39:54:8d:82:4a:97:c7:11:de:50:1e:10:52:c8:
                    e2:32:c6:a8:54:96:fb:ce:85:5e:a7:13:d2:25:83:
                    65:3d:74:fb:35:46:32:3e:83:41:f3:b3:11:e8:67:
                    b1:57:a7:e9:73:b9:4b:c2:e3:d4:f7:89:65:4c:0f:
                    d6:60:fd:69:b5:e5:d7:3d:d3:f0:73:b3:94:4a:1e:
                    32:26:e7:27:9e:19:63:d0:e4:fc:af:31:cd:f3:16:
                    cb:1e:f6:3d:35:10:fe:b8:c8:07:57:77:d0:9d:67:
                    e0:15:3f:a7:f0:e1:4d:29:a2:87:c3:32:02:7c:25:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:39:6E:3E:B8:D5:E7:B7:11:71:AF:89:BE:95:15:77:96:45:EA:16
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33322e302f32322d3232203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:ef:9c:d4:dd:84:6a:77:42:cf:ca:5a:ce:ad:4a:4c:7f:be:
         e4:d5:b4:89:da:35:51:75:48:33:70:67:b5:76:ea:24:3c:87:
         b5:75:44:10:b9:fa:32:68:6a:66:d2:73:82:dd:46:ce:c8:0c:
         8c:aa:e1:d2:07:d4:8d:be:b1:3a:22:cc:2f:18:7d:81:0d:61:
         69:b6:96:3e:51:84:85:ab:00:33:4e:3a:75:89:af:c7:c9:d2:
         51:e7:9c:aa:1f:26:71:aa:19:c4:33:c8:fa:03:f4:c8:22:7e:
         d1:db:51:9e:fb:91:b6:97:64:72:b8:d2:18:bf:60:99:a8:0a:
         28:40:f1:36:71:13:fd:e4:0f:5b:54:52:f0:2d:3c:0c:5c:28:
         6c:d8:79:ea:cc:14:5b:b2:62:63:b3:da:96:4a:60:01:87:c2:
         a1:f0:0f:53:4f:5e:e7:87:fa:4a:ff:87:ca:39:89:74:ef:26:
         4c:f7:3c:0a:36:0f:f9:5c:03:01:e2:e7:27:da:c9:fb:d8:93:
         8e:83:f7:98:4f:e9:5d:62:e6:aa:da:80:19:8d:38:a0:39:d3:
         ad:f5:d6:de:0a:74:5e:78:4d:60:61:36:7f:8b:f9:05:82:3a:
         16:a8:e2:c5:1a:59:12:7c:3f:8e:aa:89:8a:1e:57:50:65:14:
         a5:f6:ce:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 17:07:29 2024 by rpki-client on console-ams.rpki-client.org