Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3137302e38332e38302e302f32332d3233203d3e20323633303236.roa
File:                     3137302e38332e38302e302f32332d3233203d3e20323633303236.roa (raw, json)
Hash identifier:          3jtBlYJFgRH9edNf2gI5Ltu0Db/3IJCiCO/EK5fmoy8=
Subject key identifier:   9F:95:21:97:DE:E4:E2:32:28:F4:A4:FF:12:B3:6C:85:B3:57:05:AB
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       622D335A05D4B7E495FC2B18863866DD2895F04F
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3137302e38332e38302e302f32332d3233203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:33 +0000
ROA not before:           Thu 04 Apr 2024 15:05:33 +0000
ROA not after:            Thu 03 Apr 2025 15:10:33 +0000
asID:                     263026
IP address blocks:        170.83.80.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2d:33:5a:05:d4:b7:e4:95:fc:2b:18:86:38:66:dd:28:95:f0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:33 2024 GMT
            Not After : Apr  3 15:10:33 2025 GMT
        Subject: CN=9F952197DEE4E23228F4A4FF12B36C85B35705AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:44:b3:12:cf:d8:3f:54:27:21:6c:b6:23:
                    13:cf:ad:60:f8:3c:a8:0e:73:7b:41:ea:e2:57:17:
                    93:33:05:7a:53:c3:4e:6b:9c:dd:f3:01:e8:e8:b2:
                    c1:2a:ea:a8:6b:2a:ce:29:52:fc:85:92:49:07:7b:
                    11:4d:66:3a:66:77:08:82:4f:33:c1:2d:7d:3e:56:
                    96:59:d5:82:59:eb:27:52:7f:0e:45:97:d1:f8:7d:
                    9f:c6:7b:16:49:37:78:f1:c0:73:df:73:a0:ea:fc:
                    db:2f:ee:ad:27:d3:8a:cc:42:db:07:55:ed:30:70:
                    43:ed:a7:a9:f0:c8:49:7f:17:ea:8d:64:ba:05:62:
                    57:38:69:e5:6a:2e:4f:2e:ad:4d:81:f4:53:8f:dc:
                    e3:62:58:fe:48:fe:c6:fc:6e:61:c2:b7:4a:08:3c:
                    e6:8d:87:dc:96:ae:e9:9b:c1:ff:25:90:b8:b9:b0:
                    53:cc:fc:3b:c9:d2:94:05:80:7f:13:9c:31:62:ff:
                    a3:16:9f:9c:ea:47:c9:44:7e:4b:ab:5c:45:93:f5:
                    e2:cc:2d:f3:56:ad:89:a3:df:9f:73:af:5b:28:d9:
                    45:e7:da:65:7b:e6:11:8b:8a:42:f0:37:0a:cc:ae:
                    29:6d:45:46:c8:9c:45:db:a3:86:f7:91:d7:de:47:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:95:21:97:DE:E4:E2:32:28:F4:A4:FF:12:B3:6C:85:B3:57:05:AB
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3137302e38332e38302e302f32332d3233203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:e9:ff:8f:21:16:0b:fa:6e:d9:ca:ed:da:fc:2e:0d:f5:3e:
         47:68:82:22:cc:8a:5b:8f:1b:da:f7:4b:01:79:48:2b:b3:78:
         7b:e1:73:e7:50:de:89:b2:ca:f0:87:32:d2:af:d3:64:10:97:
         54:d9:3c:23:7d:d6:c5:29:25:b7:5b:f0:9f:bf:55:36:dc:59:
         84:c5:15:aa:5f:e8:12:4f:b3:ad:8a:a5:f8:83:cc:92:3f:c8:
         81:3b:3d:19:55:68:1e:86:71:81:59:d6:c4:ba:19:65:77:21:
         ec:83:99:54:02:04:32:bd:cf:73:c9:ef:f8:71:d0:3f:8f:68:
         50:c2:be:cf:e8:cd:dc:3c:6e:58:d5:f1:73:ec:e9:33:6d:a6:
         58:f7:37:14:42:36:87:c4:b6:9b:e5:a1:f2:1f:de:48:81:66:
         55:dc:e9:51:28:06:97:85:86:d2:57:f6:d7:ef:57:05:f0:1f:
         a6:34:de:cc:a5:1b:63:93:63:2b:43:4b:08:44:92:d6:76:d4:
         1d:98:af:3b:14:a4:45:9b:73:a4:19:f9:c5:2c:56:65:bc:8c:
         ab:ed:14:91:66:fa:46:9a:60:d1:42:37:11:60:30:67:d0:8b:
         5f:04:0e:08:c7:34:dc:ea:ba:21:1d:ea:a6:93:e4:ce:b8:6e:
         1b:93:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org