Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39342e302f32342d3234203d3e20323638333230.roa
File:                     34352e3233382e39342e302f32342d3234203d3e20323638333230.roa (raw, json)
Hash identifier:          8ncQFtMBhZ3Sq2bwAzHitJnJCbv0gFYr9ALTtqrgj20=
Subject key identifier:   69:E6:20:75:8A:A9:67:FC:7A:D8:4C:2B:96:CB:85:30:D9:C0:1E:7A
Certificate issuer:       /CN=D0436FEA91781D055687421CAEF481A6EC223F53
Certificate serial:       0A263F95D752C5A2D4854D5E162C08495BC145E4
Authority key identifier: D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39342e302f32342d3234203d3e20323638333230.roa
Signing time:             Thu 03 Aug 2023 17:00:46 +0000
ROA not before:           Thu 03 Aug 2023 16:55:46 +0000
ROA not after:            Thu 01 Aug 2024 17:00:46 +0000
asID:                     268320
IP address blocks:        45.238.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 15:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:26:3f:95:d7:52:c5:a2:d4:85:4d:5e:16:2c:08:49:5b:c1:45:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0436FEA91781D055687421CAEF481A6EC223F53
        Validity
            Not Before: Aug  3 16:55:46 2023 GMT
            Not After : Aug  1 17:00:46 2024 GMT
        Subject: CN=69E620758AA967FC7AD84C2B96CB8530D9C01E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:17:d5:b0:0f:1a:42:65:cc:d4:76:99:c6:
                    62:2d:f6:09:30:4b:55:fe:bd:b5:06:63:eb:f4:74:
                    07:82:d3:b3:0c:82:11:e7:1c:e8:d3:d2:26:4c:61:
                    77:ad:93:c5:ee:4c:72:d0:3f:5f:dd:97:6a:bb:13:
                    0b:be:0f:47:9c:d3:3e:1e:7e:4c:ca:e2:6d:c1:57:
                    11:27:88:56:e3:dd:14:11:9b:b9:6d:72:00:fe:67:
                    37:93:84:e5:9f:46:62:db:ae:59:90:b3:21:39:0d:
                    74:2e:31:e6:d8:7b:c0:94:56:53:bf:96:41:3a:68:
                    57:3b:bd:6c:c5:de:ac:6e:99:20:86:2d:7d:9d:b0:
                    76:57:6e:03:9c:17:53:93:77:11:51:fb:00:99:c7:
                    4e:15:db:38:35:00:4e:ea:76:7e:48:a6:99:af:8d:
                    44:78:9c:55:ec:a4:b9:16:a7:87:7d:31:95:b8:99:
                    b6:a4:02:cd:22:f7:52:72:c9:d8:7d:63:1b:90:ed:
                    76:da:a9:19:4a:6c:3a:5e:d1:69:f7:02:e9:bf:a9:
                    c5:de:ce:ff:fb:36:5e:2d:77:8a:34:ad:fa:e5:38:
                    c6:f3:0d:e0:75:8f:46:8d:4b:6a:de:6c:22:e5:26:
                    83:44:a2:1f:3a:d6:03:0e:79:c6:0b:a9:74:c2:db:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E6:20:75:8A:A9:67:FC:7A:D8:4C:2B:96:CB:85:30:D9:C0:1E:7A
            X509v3 Authority Key Identifier:
                keyid:D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/D0436FEA91781D055687421CAEF481A6EC223F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39342e302f32342d3234203d3e20323638333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:57:50:67:56:e8:7a:15:92:75:26:cd:87:89:f8:a6:5c:68:
         4e:94:9a:0b:35:8c:f6:e6:d7:45:13:c0:dc:17:2b:a4:fc:99:
         c7:ea:1e:e3:c7:b9:37:02:1a:96:e5:87:9e:1d:03:25:cb:4c:
         7d:44:86:ab:93:d3:34:f6:c9:39:93:e6:a2:eb:f2:55:05:4c:
         c4:76:96:f1:da:c6:5a:80:e0:bb:66:62:cd:66:b0:4e:f5:b9:
         b5:cf:e8:34:4e:a9:50:a1:7d:4d:54:2a:cf:d3:73:d3:28:a0:
         c7:e3:02:aa:56:4b:86:ab:6c:6f:73:62:fa:7b:45:75:ec:ae:
         83:4f:01:c4:fb:f6:68:f3:aa:1c:5f:13:e1:f6:f7:df:09:f6:
         5a:b2:6c:2e:13:21:04:e6:df:69:26:68:68:fd:36:18:4a:fc:
         a9:ec:bc:2b:7e:0b:8b:ac:d4:1a:61:ce:58:aa:b0:a6:a7:d6:
         d4:fd:10:ff:94:70:ec:b8:58:6a:fa:d9:2a:5b:cd:e4:ac:12:
         8b:f0:5e:2b:a3:7c:4b:f3:1d:d1:6b:ac:31:1c:9b:40:ae:f7:
         7b:ee:0e:9d:60:f4:ee:3d:5b:5a:05:1d:66:14:08:10:27:f4:
         ba:ad:99:de:c2:bf:64:72:e9:ad:af:2b:bc:c9:1b:70:44:d9:
         2b:74:e0:34
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCiY/lddSxaLUhU1eFiwISVvBReQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA0MzZGRUE5MTc4MUQwNTU2ODc0MjFDQUVGNDgxQTZF
QzIyM0Y1MzAeFw0yMzA4MDMxNjU1NDZaFw0yNDA4MDExNzAwNDZaMDMxMTAvBgNV
BAMTKDY5RTYyMDc1OEFBOTY3RkM3QUQ4NEMyQjk2Q0I4NTMwRDlDMDFFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaaBfVsA8aQmXM1HaZxmIt9gkw
S1X+vbUGY+v0dAeC07MMghHnHOjT0iZMYXetk8XuTHLQP1/dl2q7Ewu+D0ec0z4e
fkzK4m3BVxEniFbj3RQRm7ltcgD+ZzeThOWfRmLbrlmQsyE5DXQuMebYe8CUVlO/
lkE6aFc7vWzF3qxumSCGLX2dsHZXbgOcF1OTdxFR+wCZx04V2zg1AE7qdn5Ippmv
jUR4nFXspLkWp4d9MZW4mbakAs0i91Jyydh9YxuQ7XbaqRlKbDpe0Wn3Aum/qcXe
zv/7Nl4td4o0rfrlOMbzDeB1j0aNS2rebCLlJoNEoh861gMOecYLqXTC2+5vAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaeYgdYqpZ/x62EwrlsuFMNnAHnowHwYDVR0j
BBgwFoAU0ENv6pF4HQVWh0IcrvSBpuwiP1MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lndU10OXVzYmpiQ01oZnQ0b1dVZHVGQmZQa2RQbkdaMlFRWDJaNFpj
YmEvMC9EMDQzNkZFQTkxNzgxRDA1NTY4NzQyMUNBRUY0ODFBNkVDMjIzRjUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QwNDM2RkVBOTE3ODFEMDU1
Njg3NDIxQ0FFRjQ4MUE2RUMyMjNGNTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5Z3VNdDl1c2JqYkNNaGZ0NG9XVWR1RkJmUGtkUG5HWjJRUVgyWjRaY2JhLzAv
MzQzNTJlMzIzMzM4MmUzOTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALe5eMA0GCSqGSIb3DQEBCwUAA4IBAQBMV1BnVuh6
FZJ1Js2HifimXGhOlJoLNYz25tdFE8DcFyuk/JnH6h7jx7k3AhqW5YeeHQMly0x9
RIark9M09sk5k+ai6/JVBUzEdpbx2sZagOC7ZmLNZrBO9bm1z+g0TqlQoX1NVCrP
03PTKKDH4wKqVkuGq2xvc2L6e0V17K6DTwHE+/Zo86ocXxPh9vffCfZasmwuEyEE
5t9pJmho/TYYSvyp7LwrfguLrNQaYc5YqrCmp9bU/RD/lHDsuFhq+tkqW83krBKL
8F4ro3xL8x3Ra6wxHJtArvd77g6dYPTuPVtaBR1mFAgQJ/S6rZnewr9kcumtryu8
yRtwRNkrdOA0
-----END CERTIFICATE-----
Generated at Mon Mar 4 19:43:25 2024 by rpki-client on console-fra.rpki-client.org