Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3137302e38332e38332e302f32342d3234203d3e20323633303236.roa
File:                     3137302e38332e38332e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          ACP/tF/yVF/x4pNt/0NtULA+3xwr4RGrzHPjpHqUvDY=
Subject key identifier:   00:2B:5A:52:6C:45:0E:00:69:D2:0C:0C:9D:13:34:A4:62:06:F1:ED
Certificate issuer:       /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial:       4AEAE6D0A2C815DBDCA0C32D4D525DD66E66380F
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3137302e38332e38332e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 04 Apr 2024 15:10:32 +0000
ROA not before:           Thu 04 Apr 2024 15:05:32 +0000
ROA not after:            Thu 03 Apr 2025 15:10:32 +0000
asID:                     263026
IP address blocks:        170.83.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ea:e6:d0:a2:c8:15:db:dc:a0:c3:2d:4d:52:5d:d6:6e:66:38:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
        Validity
            Not Before: Apr  4 15:05:32 2024 GMT
            Not After : Apr  3 15:10:32 2025 GMT
        Subject: CN=002B5A526C450E0069D20C0C9D1334A46206F1ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:e3:e1:e3:c3:9a:24:26:a0:56:54:7b:d9:
                    b1:49:85:ed:37:0c:48:48:c5:a8:66:bb:2b:75:e4:
                    4f:d9:34:a2:31:60:dd:94:f6:dc:3f:30:81:b3:bb:
                    15:44:49:46:e4:0a:8a:e9:d9:fd:d7:da:61:88:34:
                    b3:a1:70:a3:f8:73:0a:20:86:b5:2f:4a:0c:16:1c:
                    be:a9:4d:4f:8f:54:54:46:bc:07:45:8a:ae:0e:9f:
                    53:1d:dc:05:bd:a1:51:78:44:03:94:91:e2:6d:8c:
                    1a:16:91:c9:49:f3:c7:c6:84:8a:3b:02:cb:ce:98:
                    6b:91:5b:cf:b7:1f:9f:50:8a:94:9d:04:de:83:c8:
                    22:eb:5d:26:3f:3e:bc:80:ac:ab:29:5a:ae:86:67:
                    e2:8f:22:3a:97:16:c7:1c:41:f1:28:27:30:0b:65:
                    31:c0:a7:63:7d:10:09:85:2b:ea:dc:48:e1:5e:0d:
                    be:e4:1b:c2:1c:7e:dc:e2:f4:e2:74:23:48:c7:3f:
                    b1:83:3a:fe:d4:9b:d1:db:21:36:b2:29:55:0d:c6:
                    ba:ac:29:86:1a:9e:ce:95:51:a9:a6:b5:de:d3:d2:
                    56:5f:59:e3:8f:64:7f:ca:f9:ad:df:5d:ff:6b:0b:
                    d2:97:a7:b4:c5:b4:c5:f8:35:64:47:19:30:06:bb:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2B:5A:52:6C:45:0E:00:69:D2:0C:0C:9D:13:34:A4:62:06:F1:ED
            X509v3 Authority Key Identifier:
                keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/3137302e38332e38332e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:ea:5c:82:ed:f7:f3:cf:b4:f2:2f:a1:b4:09:2f:a6:69:a1:
         89:4c:7f:72:8e:73:3e:0b:94:57:65:e1:af:87:14:18:c3:9f:
         e2:4d:1a:69:23:40:8d:b5:7b:05:ad:d3:f4:46:bd:45:f0:bf:
         29:d9:4c:4a:20:e5:9e:23:3b:94:e6:97:49:58:a8:bb:89:e6:
         62:b4:38:e6:da:24:09:4a:46:1a:17:83:38:21:b5:15:86:cc:
         3e:20:71:62:a3:45:9e:64:3b:35:53:47:f5:49:64:d0:d6:27:
         f4:56:a3:82:02:75:7f:9d:06:11:ba:5f:6c:35:b4:c9:43:f3:
         17:68:f0:6f:fc:89:90:02:c0:50:6d:90:74:ff:01:a0:9b:9e:
         76:36:ea:02:be:6b:6d:f0:58:c6:72:c5:74:9c:ca:22:ee:6c:
         1d:42:40:e6:fa:60:07:e9:e9:97:2c:89:45:35:55:92:b6:95:
         af:de:82:29:26:b3:4f:e1:92:25:dc:53:fb:7c:6e:19:b6:34:
         c9:63:00:f5:17:39:f9:3c:b0:a2:10:a5:71:2d:be:f5:6e:a5:
         8b:82:d5:c6:9e:f4:0f:8d:a9:d7:b0:5f:b2:45:d2:a1:fb:84:
         cb:4d:32:ba:31:a8:09:b7:ee:e1:91:d3:e9:75:7a:91:a3:ae:
         64:54:35:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org