Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3137302e38332e38322e302f32342d3234203d3e20323633303236.roa
File:                     3137302e38332e38322e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          b9bRe4fTXmxKyM6jeHzj3R1wusphNgoHmcMMiy/xPpc=
Subject key identifier:   F6:88:FA:23:3B:70:3E:B1:8F:35:04:A5:8E:81:AB:CF:CB:51:39:57
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       07F1A3C29973E8CF4A34E36398B17F860B25E3BE
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3137302e38332e38322e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:33 +0000
ROA not before:           Thu 04 Apr 2024 15:05:33 +0000
ROA not after:            Thu 03 Apr 2025 15:10:33 +0000
asID:                     263026
IP address blocks:        170.83.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f1:a3:c2:99:73:e8:cf:4a:34:e3:63:98:b1:7f:86:0b:25:e3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:33 2024 GMT
            Not After : Apr  3 15:10:33 2025 GMT
        Subject: CN=F688FA233B703EB18F3504A58E81ABCFCB513957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:62:a9:4c:1f:5d:a3:0a:8b:84:0d:c6:d2:
                    e3:58:30:de:c3:41:06:a3:f3:38:b7:f1:16:a5:78:
                    f0:60:cd:30:71:6b:08:2f:fc:2e:be:e3:17:fa:a1:
                    78:7a:ea:59:07:e5:e1:ea:6b:74:86:ed:48:6c:91:
                    14:79:f7:7c:54:cf:eb:e7:c2:73:9b:13:6f:ff:71:
                    4c:a2:d5:07:3b:18:a7:23:77:90:79:82:ca:cf:fe:
                    85:d3:c0:54:0d:fa:a3:b5:97:b4:ac:b0:92:4d:cc:
                    60:5d:ac:ec:60:9c:81:47:f1:a9:ff:12:5d:b1:2d:
                    1c:1f:29:30:51:ce:10:bb:38:d0:d4:d9:60:de:3d:
                    5b:b8:1d:71:20:e5:20:f1:0e:90:92:7d:10:a1:a2:
                    2b:99:66:db:41:a2:76:9b:59:94:37:ee:d7:76:81:
                    13:a2:db:99:fe:6c:63:7d:43:2d:6d:9d:04:84:6f:
                    b8:70:b5:52:fb:c9:af:d1:2e:e1:00:65:62:3f:03:
                    55:b7:c0:1b:fe:b9:66:4c:22:9c:9e:d3:d8:af:0b:
                    e4:d7:dc:4e:a3:a6:6c:a4:fd:b3:69:74:e5:ea:0c:
                    12:c7:01:e1:93:5f:1a:94:f4:f8:7b:1d:cc:d1:01:
                    dc:44:95:71:24:14:c9:94:fd:40:0d:c0:2e:f5:64:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:88:FA:23:3B:70:3E:B1:8F:35:04:A5:8E:81:AB:CF:CB:51:39:57
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3137302e38332e38322e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:35:6a:2e:4a:be:44:85:13:55:d3:42:36:67:ad:1b:bc:d6:
         fe:92:3c:f7:d4:91:ed:a2:c5:0a:4d:f5:b6:91:d0:31:47:ae:
         82:bf:a9:12:88:42:a4:8b:e4:79:ba:45:37:a2:02:eb:e5:01:
         76:b6:98:4d:38:83:25:16:c4:ea:7d:66:ae:36:b7:29:7b:26:
         fd:13:25:f0:13:88:b4:05:93:aa:0e:60:8f:22:be:1e:d2:44:
         cc:e6:3c:77:fa:9f:88:44:e6:76:20:94:4b:a4:b5:0e:01:4b:
         f7:6b:fd:66:70:2d:47:b3:c3:fe:9f:1c:6e:74:5e:ff:f5:6d:
         12:d5:4f:11:54:eb:26:29:89:45:f3:3e:c7:4f:48:7e:35:66:
         77:c1:91:ca:c8:31:eb:c0:4b:ca:fa:51:7a:9c:3d:a9:11:71:
         a3:3a:f3:bf:9b:c5:6b:e6:70:4e:1c:65:e7:65:49:84:58:59:
         dd:5e:a0:6f:08:83:32:43:11:c9:37:75:92:69:51:23:d9:27:
         bb:11:bb:c5:f1:02:af:5b:e1:39:2b:72:fa:31:fc:b6:ad:0f:
         d1:00:0f:1c:75:1a:40:07:42:3f:ef:f0:3c:3f:cb:2e:83:fc:
         c0:23:ca:1a:32:48:f2:44:b4:6d:30:b0:cd:8f:ff:33:a3:57:
         ad:4e:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org