Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3137372e37332e3130382e302f32322d3232203d3e20323633343731.roa
File:                     3137372e37332e3130382e302f32322d3232203d3e20323633343731.roa (raw, json)
Hash identifier:          oFth8j/pIdLJADFNaSvK3eCrKZbXX9KZVqux6vdX60k=
Subject key identifier:   6C:F8:A1:DB:27:1B:B6:FC:D9:B3:5D:19:75:0C:73:3E:CB:68:18:C8
Certificate issuer:       /CN=EA745FF35657420CF2CD31D74379F929ADDD10FE
Certificate serial:       290EFD8A78BCDA6D2C7E7AF4418FE91488EB6055
Authority key identifier: EA:74:5F:F3:56:57:42:0C:F2:CD:31:D7:43:79:F9:29:AD:DD:10:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA745FF35657420CF2CD31D74379F929ADDD10FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3137372e37332e3130382e302f32322d3232203d3e20323633343731.roa
Signing time:             Wed 24 Apr 2024 14:36:11 +0000
ROA not before:           Wed 24 Apr 2024 14:31:11 +0000
ROA not after:            Wed 23 Apr 2025 14:36:11 +0000
asID:                     263471
IP address blocks:        177.73.108.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0e:fd:8a:78:bc:da:6d:2c:7e:7a:f4:41:8f:e9:14:88:eb:60:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA745FF35657420CF2CD31D74379F929ADDD10FE
        Validity
            Not Before: Apr 24 14:31:11 2024 GMT
            Not After : Apr 23 14:36:11 2025 GMT
        Subject: CN=6CF8A1DB271BB6FCD9B35D19750C733ECB6818C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:9c:02:dc:bf:af:f2:ac:cb:fa:6b:7a:ad:
                    7a:3b:fb:f9:0e:5c:cc:58:95:e0:fc:90:9c:44:7d:
                    cc:ba:11:8f:1b:e1:37:bd:68:0a:74:a7:e4:ff:01:
                    53:d5:ef:a2:b6:0a:13:5a:07:b7:ed:bf:ba:30:06:
                    d7:a4:ea:f0:db:84:a8:4c:b6:40:51:70:28:49:7f:
                    d4:c4:5e:9b:dc:9f:20:ba:74:50:0b:2e:eb:fa:a4:
                    f3:ea:67:ea:c3:7a:ca:56:34:90:7a:fb:72:47:f1:
                    1b:c1:ce:a1:c3:ea:54:d2:ae:16:a0:0d:05:98:72:
                    43:8e:83:8a:3d:47:1b:bc:77:0b:3f:52:72:42:ae:
                    e9:70:72:29:a2:07:fa:ab:92:ac:82:e6:3b:73:b3:
                    3e:b2:67:3f:7b:be:bf:43:68:53:5e:24:e4:e8:eb:
                    1e:27:69:b4:17:a6:81:45:de:77:4b:45:fa:85:3c:
                    cf:81:e5:a0:5b:1f:1f:ed:0b:fb:d4:45:74:16:bc:
                    a7:fa:2a:88:d4:4b:7d:56:c4:b4:ff:35:9d:8b:c9:
                    22:db:e6:1e:86:36:db:1d:23:f9:43:51:76:98:a1:
                    73:9c:a6:f4:ad:ff:e7:e7:8c:8d:6b:6b:7a:67:98:
                    cf:78:b7:f9:5f:1d:43:47:b9:cf:ac:bf:1a:ae:09:
                    03:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F8:A1:DB:27:1B:B6:FC:D9:B3:5D:19:75:0C:73:3E:CB:68:18:C8
            X509v3 Authority Key Identifier:
                keyid:EA:74:5F:F3:56:57:42:0C:F2:CD:31:D7:43:79:F9:29:AD:DD:10:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/EA745FF35657420CF2CD31D74379F929ADDD10FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA745FF35657420CF2CD31D74379F929ADDD10FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3137372e37332e3130382e302f32322d3232203d3e20323633343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:36:63:f6:e4:0b:00:dc:81:f6:ff:4e:a4:ef:64:c9:68:b6:
         9a:a4:d0:0b:54:c3:2f:44:ae:a5:18:6d:ef:f4:f8:39:bd:05:
         86:cc:9e:ad:92:47:28:e1:ab:3a:56:71:87:0a:db:47:4c:59:
         fe:87:28:0e:76:73:ef:93:c6:22:89:49:2f:83:a0:ef:02:58:
         ab:e4:29:a2:9a:64:7d:03:3a:ac:95:eb:b9:9a:17:e8:f0:5b:
         c0:27:b8:5d:fd:e7:cb:4a:a9:96:a8:d4:95:67:d3:9c:3c:93:
         26:22:ed:f1:35:c6:7f:6f:c6:0e:b7:df:39:e8:f7:b4:60:53:
         83:16:6b:a7:ed:bc:a3:29:d6:c0:ce:74:bd:ec:93:39:6b:dd:
         b9:35:97:19:27:df:8e:b6:87:5d:b5:76:16:e5:02:63:36:13:
         98:b9:0f:49:5a:8c:4d:25:00:45:40:ce:f8:a8:c2:8a:80:00:
         4b:6c:1b:fb:d7:63:ee:18:b4:1c:ce:7c:ee:9e:bf:0c:5a:bf:
         c7:69:2a:10:68:e4:d5:01:54:b4:fa:64:5b:ba:81:8e:b0:b9:
         a4:0a:3c:f2:5a:f8:30:a0:52:5a:9b:c5:d4:73:5d:6d:c9:28:
         ad:d2:b7:49:4f:28:ea:5b:a5:d2:c3:ce:ca:b7:07:fe:9c:a8:
         5e:05:59:17
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKQ79ini82m0sfnr0QY/pFIjrYFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE3NDVGRjM1NjU3NDIwQ0YyQ0QzMUQ3NDM3OUY5MjlB
REREMTBGRTAeFw0yNDA0MjQxNDMxMTFaFw0yNTA0MjMxNDM2MTFaMDMxMTAvBgNV
BAMTKDZDRjhBMURCMjcxQkI2RkNEOUIzNUQxOTc1MEM3MzNFQ0I2ODE4QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJ5wC3L+v8qzL+mt6rXo7+/kO
XMxYleD8kJxEfcy6EY8b4Te9aAp0p+T/AVPV76K2ChNaB7ftv7owBtek6vDbhKhM
tkBRcChJf9TEXpvcnyC6dFALLuv6pPPqZ+rDespWNJB6+3JH8RvBzqHD6lTSrhag
DQWYckOOg4o9Rxu8dws/UnJCrulwcimiB/qrkqyC5jtzsz6yZz97vr9DaFNeJOTo
6x4nabQXpoFF3ndLRfqFPM+B5aBbHx/tC/vURXQWvKf6KojUS31WxLT/NZ2LySLb
5h6GNtsdI/lDUXaYoXOcpvSt/+fnjI1ra3pnmM94t/lfHUNHuc+svxquCQOxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbPih2ycbtvzZs10ZdQxzPstoGMgwHwYDVR0j
BBgwFoAU6nRf81ZXQgzyzTHXQ3n5Ka3dEP4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRuVERTR0paaHhmajJWWGY5dkF3ckEyR2RXVFlZOTRwYWdmUDR1WVR1
MWMvMC9FQTc0NUZGMzU2NTc0MjBDRjJDRDMxRDc0Mzc5RjkyOUFEREQxMEZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBNzQ1RkYzNTY1NzQyMENG
MkNEMzFENzQzNzlGOTI5QURERDEwRkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0blREU0dKWmh4ZmoyVlhmOXZBd3JBMkdkV1RZWTk0cGFnZlA0dVlUdTFjLzAv
MzEzNzM3MmUzNzMzMmUzMTMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNDM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxSWwwDQYJKoZIhvcNAQELBQADggEBAIE2Y/bk
CwDcgfb/TqTvZMlotpqk0AtUwy9ErqUYbe/0+Dm9BYbMnq2SRyjhqzpWcYcK20dM
Wf6HKA52c++TxiKJSS+DoO8CWKvkKaKaZH0DOqyV67maF+jwW8AnuF3958tKqZao
1JVn05w8kyYi7fE1xn9vxg633zno97RgU4MWa6ftvKMp1sDOdL3skzlr3bk1lxkn
3462h121dhblAmM2E5i5D0lajE0lAEVAzviowoqAAEtsG/vXY+4YtBzOfO6evwxa
v8dpKhBo5NUBVLT6ZFu6gY6wuaQKPPJa+DCgUlqbxdRzXW3JKK3St0lPKOpbpdLD
zsq3B/6cqF4FWRc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org