Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232322e302f32332d3233203d3e20323632373733.roa
File:                     3137302e3233312e3232322e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          l/VSflX6HltL3QDoO7gfINIdwKIRj5M0A6Rd5Y2jt5o=
Subject key identifier:   A9:B8:2F:4E:E2:91:A2:49:DD:0A:51:6C:06:9D:34:F8:6B:81:DD:49
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       605A978B19D287AC707D649305AC20D77BED900C
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232322e302f32332d3233203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:25 +0000
ROA not before:           Wed 14 Aug 2024 12:03:25 +0000
ROA not after:            Wed 13 Aug 2025 12:08:25 +0000
asID:                     262773
IP address blocks:        170.231.222.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5a:97:8b:19:d2:87:ac:70:7d:64:93:05:ac:20:d7:7b:ed:90:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:25 2024 GMT
            Not After : Aug 13 12:08:25 2025 GMT
        Subject: CN=A9B82F4EE291A249DD0A516C069D34F86B81DD49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:08:c4:7f:92:1f:cc:69:c2:be:fb:cf:4c:
                    a8:69:6d:7e:a0:8c:48:f2:cd:40:eb:4e:ee:f8:53:
                    19:69:e6:6d:89:84:fb:82:f8:a1:dc:94:a0:35:f9:
                    c7:ed:44:60:18:56:12:bc:72:66:67:f0:60:73:ab:
                    ea:0a:ed:78:e7:c0:35:ec:25:40:9c:ef:73:1b:b6:
                    39:2d:0c:a0:f8:2c:08:c8:1b:8a:eb:60:ae:da:4f:
                    11:32:76:2d:76:0b:99:d3:76:de:63:fd:0c:ad:7e:
                    17:21:1c:6d:a5:82:0d:00:ff:f8:3f:7c:9a:2e:dc:
                    71:e9:ba:ec:36:26:2e:34:2e:07:b4:bd:f0:56:0c:
                    3f:7a:1f:e3:d7:4b:e0:ca:86:ac:38:e3:35:b8:ae:
                    b6:ec:96:92:ea:88:38:0c:b5:4c:91:40:d0:2c:e0:
                    a8:76:8e:c9:c1:c3:63:25:32:05:32:28:7a:91:2c:
                    a6:f9:58:09:d2:1c:da:fe:e5:2f:bc:9a:9f:7c:2b:
                    da:1b:a4:36:0c:cf:a2:71:09:bf:d3:8d:51:09:a3:
                    1a:94:1f:6a:5f:3f:94:37:8a:2a:96:8b:f5:c8:2d:
                    97:b2:ac:09:2c:ab:71:7e:84:87:99:a2:d2:f2:d7:
                    8f:60:38:92:05:45:60:ac:10:13:23:fe:76:90:f0:
                    22:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B8:2F:4E:E2:91:A2:49:DD:0A:51:6C:06:9D:34:F8:6B:81:DD:49
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232322e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:d8:69:17:ee:99:d9:74:68:67:bd:93:e8:8f:5b:4e:a8:
         95:74:0b:99:a5:23:93:b3:e5:9c:01:49:e3:4a:4d:6b:89:3d:
         32:70:b5:3d:e4:2e:ce:6c:31:9e:20:bf:4f:7b:7f:94:26:e6:
         e6:3e:35:32:f6:be:30:9d:25:2e:05:f7:06:e1:86:5c:60:1c:
         f4:3e:2b:45:14:ae:0c:03:f6:23:b1:0f:ea:57:e5:18:aa:13:
         7f:98:24:56:92:20:51:c1:0c:7f:6a:01:71:70:ff:04:9f:93:
         3f:7f:d1:0e:22:ce:cc:eb:d8:80:91:a3:cb:40:b4:7b:0b:f3:
         7f:34:d2:2f:0b:af:75:26:55:4c:a2:5d:e0:0a:1a:b8:36:c7:
         ef:82:3c:38:4b:98:30:b6:98:60:e0:5d:f1:db:23:6e:04:d1:
         2e:93:e2:31:63:72:2c:0b:d4:55:20:78:bb:29:08:f0:d0:28:
         37:44:45:6d:d1:f1:05:f6:c6:1c:9b:e2:93:f9:03:c9:6a:6c:
         74:2c:71:4e:a8:65:b5:38:c9:e2:97:1f:22:56:a5:3c:5b:4c:
         1d:18:c4:de:0a:c6:0d:25:1f:95:f2:9a:5b:dd:31:f1:dd:ee:
         91:81:6d:b0:45:e2:c3:24:87:d0:11:d5:fd:87:1b:a7:fb:be:
         bb:55:88:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org