Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3137302e38332e38312e302f32342d3234203d3e20323633303236.roa
File:                     3137302e38332e38312e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          6isNIHalDX3dixUmyV7D6QQc9NGLIBn4+6hyH1Rv880=
Subject key identifier:   D6:E3:12:D5:9C:CD:DF:BC:96:C0:14:4A:78:5C:17:BB:DC:06:D9:64
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       5C1FCDA0C4072373EA769682022A501154814A0C
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3137302e38332e38312e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:36 +0000
ROA not before:           Thu 04 Apr 2024 15:05:36 +0000
ROA not after:            Thu 03 Apr 2025 15:10:36 +0000
asID:                     263026
IP address blocks:        170.83.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1f:cd:a0:c4:07:23:73:ea:76:96:82:02:2a:50:11:54:81:4a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:36 2024 GMT
            Not After : Apr  3 15:10:36 2025 GMT
        Subject: CN=D6E312D59CCDDFBC96C0144A785C17BBDC06D964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:27:5b:82:df:2d:6c:59:3b:d1:0e:b2:4b:32:
                    81:c1:cc:1e:09:91:c5:cb:37:93:c5:7e:55:30:67:
                    35:cc:ad:f5:4f:7a:dc:60:56:0c:c9:3a:c0:c3:08:
                    ce:c6:91:b5:81:42:4e:1d:6c:29:42:ee:bc:96:dc:
                    9b:e8:f5:f6:7d:c4:2d:42:09:01:9c:58:34:f2:17:
                    bf:32:6b:86:42:07:93:c2:21:df:49:35:b0:61:ea:
                    63:a5:dd:9e:5f:bf:02:1a:03:0d:87:db:a0:39:45:
                    79:96:fb:2a:28:2a:08:13:c9:9a:e5:f9:34:8b:59:
                    8e:b1:f5:ea:68:9e:2a:9c:9e:3c:e7:bf:f1:1c:e8:
                    04:02:ca:2e:de:1c:f9:2f:b8:f0:0c:6d:ad:de:6e:
                    d1:6a:e2:36:32:c8:5d:b1:7c:89:53:5c:6e:26:87:
                    db:64:43:ba:d4:24:a0:70:d4:36:13:a1:f6:bc:ba:
                    84:a1:7d:00:2f:7a:1a:43:84:c4:04:36:9d:35:a3:
                    c5:7e:c6:ee:65:05:86:1e:2e:e7:10:5c:97:49:e6:
                    4e:c1:28:08:cb:29:6c:35:c6:72:5f:22:ee:5c:ac:
                    fd:18:be:d3:7a:ec:f8:6e:be:aa:3b:1f:3a:3b:e2:
                    b6:c3:aa:26:30:1b:96:01:5f:86:ce:f3:23:56:5e:
                    6a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E3:12:D5:9C:CD:DF:BC:96:C0:14:4A:78:5C:17:BB:DC:06:D9:64
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3137302e38332e38312e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:07:d8:4c:a9:fc:66:6d:38:7d:02:0d:79:71:a1:1a:8f:41:
         76:1e:0b:20:32:c7:04:cc:3d:c0:5c:80:c4:e7:c0:58:f2:8a:
         1c:d0:12:41:79:90:d3:27:ca:cd:94:1b:d0:06:d7:21:91:a9:
         44:7b:76:22:b5:d3:81:47:d4:6e:1f:95:b1:0d:1a:34:4f:c5:
         7b:ed:cb:2c:2e:8b:d8:46:60:2a:f2:c5:93:18:b5:06:b8:2f:
         b5:62:fa:ec:0f:bc:7f:f3:8f:69:56:90:bc:61:cc:d4:13:19:
         b7:5e:bd:da:f0:dc:6b:7a:98:77:49:fd:01:5e:c2:90:3e:7a:
         ef:a0:ce:a8:73:fb:5a:de:cf:99:de:0a:be:4d:32:66:f5:de:
         9b:2d:49:17:c2:21:99:80:50:6b:38:e3:2d:12:fd:36:cb:2e:
         3c:4d:1c:40:ce:1a:2d:c5:11:12:ab:54:d4:28:72:b9:ac:03:
         2b:a3:98:2e:a9:f1:e4:99:13:6a:e1:ce:2a:49:2d:da:c5:2a:
         95:63:79:a7:a3:e3:ee:c0:e2:12:95:34:80:d1:58:83:a8:c7:
         f1:6d:3d:9e:e3:b9:31:49:ee:bd:20:77:1b:dc:22:5e:db:20:
         00:71:12:46:0b:c7:d1:4e:cd:b5:be:7e:96:61:ba:31:9e:c7:
         d4:2b:fa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org