Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e382e302f32322d3234203d3e20323632373733.roa
File:                     3137302e3233312e382e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          iagFcoQ1NAVj3s64Cymq37F/0/kSEldgDchxpGh7RO8=
Subject key identifier:   03:35:78:B9:F4:E4:09:C6:F8:AB:1F:44:7F:E0:AE:DD:5E:19:60:46
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       12AF3A09914AF5BB8F9129E1F5DD0086217E8266
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e382e302f32322d3234203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:22 +0000
ROA not before:           Wed 14 Aug 2024 12:03:22 +0000
ROA not after:            Wed 13 Aug 2025 12:08:22 +0000
asID:                     262773
IP address blocks:        170.231.8.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:af:3a:09:91:4a:f5:bb:8f:91:29:e1:f5:dd:00:86:21:7e:82:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:22 2024 GMT
            Not After : Aug 13 12:08:22 2025 GMT
        Subject: CN=033578B9F4E409C6F8AB1F447FE0AEDD5E196046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2d:4c:76:3e:04:68:8f:95:62:b8:1e:37:6c:
                    51:90:90:9a:f0:4d:8c:6c:e4:d0:e1:52:82:52:73:
                    c4:ff:d4:3e:9c:02:07:d6:05:69:a5:d7:58:bb:33:
                    69:18:b8:d6:12:a1:cb:88:9f:0e:48:06:d7:e4:59:
                    51:5e:cb:06:28:11:03:2c:61:36:d2:07:77:8d:f9:
                    b8:33:a4:63:5c:29:16:cd:9d:a1:90:12:31:aa:7a:
                    c0:19:57:55:ec:62:95:70:98:0c:56:ae:b5:03:ff:
                    85:71:af:7c:55:0a:ac:13:c4:bc:4c:69:88:1d:8d:
                    d0:c8:5d:6f:cc:b7:f3:a5:5c:0c:81:ca:6a:b9:82:
                    1b:c9:41:e6:51:67:bb:69:35:c5:81:f6:a4:dc:c4:
                    7c:34:92:ed:0c:4b:ab:f4:23:e4:02:8c:0a:74:69:
                    74:41:14:08:17:f6:ee:de:44:fb:18:c5:8c:10:d2:
                    b0:e4:f0:d9:6c:aa:ea:8d:27:57:e5:c9:7a:4b:2d:
                    c5:97:e1:f2:36:02:bd:1b:f7:58:72:44:ae:a6:c2:
                    9c:fb:89:f8:40:b1:13:7c:7e:f5:82:fe:ee:6c:49:
                    86:74:f1:75:f0:b2:72:ad:53:98:98:12:a2:f4:47:
                    65:ec:03:ce:5a:ea:00:bc:3f:46:25:62:02:d8:2f:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:35:78:B9:F4:E4:09:C6:F8:AB:1F:44:7F:E0:AE:DD:5E:19:60:46
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e382e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:45:8b:47:31:ef:f2:30:38:d0:a8:99:f8:59:13:9d:7d:8d:
         85:df:9e:45:9a:cb:31:c9:6c:a3:2a:3e:7f:db:8d:d8:5e:3b:
         34:83:79:9d:b1:ae:0d:b5:ee:d9:08:e2:3b:5d:99:a7:fd:7d:
         d2:d5:1f:51:64:0f:19:6e:24:51:6f:ff:82:f6:e9:10:d5:c8:
         47:f0:44:11:b3:8f:02:9c:8c:e2:42:9b:3b:ad:2d:31:96:79:
         8a:bf:83:4f:f9:71:73:d7:34:1e:23:04:c1:ff:f7:8e:ab:13:
         19:7f:9a:59:7e:be:bb:d2:68:b5:fa:4d:e9:e7:30:a5:c3:01:
         eb:1f:0f:37:ab:94:e6:a8:43:b9:a1:0c:59:4b:11:28:53:6e:
         3a:d1:b9:13:eb:4e:7b:36:f8:ce:c3:da:f3:00:32:f9:ac:b3:
         80:b7:70:db:ca:be:b3:f5:f6:7b:55:2a:62:08:c0:0c:6c:53:
         5a:61:20:cf:24:c4:32:c1:79:73:68:40:22:5b:8f:0d:be:bc:
         c5:da:dd:79:30:f2:4f:86:91:b1:93:7c:1f:08:cf:e6:f4:d4:
         09:32:57:d1:c5:30:c2:53:13:b6:2e:37:80:b4:66:77:d7:85:
         24:6f:88:e7:c5:ae:19:9e:d4:a8:98:72:68:d9:e8:af:6d:5f:
         49:1a:54:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:00:52 2024 by rpki-client on console-ams.rpki-client.org