Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136312e302f32342d3234203d3e20323637323134.roa
File:                     34352e3233302e3136312e302f32342d3234203d3e20323637323134.roa (raw, json)
Hash identifier:          XL4KXc/9t04o+pOgFxRR74lWxNkxfbMJRWNTtE1f/DU=
Subject key identifier:   F4:E0:98:3A:DB:20:5D:06:2B:4A:E4:39:5C:68:12:64:B0:80:DA:22
Certificate issuer:       /CN=A56E8A92F7DB96FA288D623B1F7EDE10694759CE
Certificate serial:       0A10015FBA05BDFAB4E1F696071F02DFF33648B7
Authority key identifier: A5:6E:8A:92:F7:DB:96:FA:28:8D:62:3B:1F:7E:DE:10:69:47:59:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136312e302f32342d3234203d3e20323637323134.roa
Signing time:             Thu 20 Jul 2023 13:13:19 +0000
ROA not before:           Thu 20 Jul 2023 13:08:19 +0000
ROA not after:            Thu 18 Jul 2024 13:13:19 +0000
asID:                     267214
IP address blocks:        45.230.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:10:01:5f:ba:05:bd:fa:b4:e1:f6:96:07:1f:02:df:f3:36:48:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56E8A92F7DB96FA288D623B1F7EDE10694759CE
        Validity
            Not Before: Jul 20 13:08:19 2023 GMT
            Not After : Jul 18 13:13:19 2024 GMT
        Subject: CN=F4E0983ADB205D062B4AE4395C681264B080DA22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:ad:a1:21:b5:3d:9d:b3:ba:ff:b0:c5:0e:
                    a5:94:c5:d4:c9:3e:1b:9b:03:f4:f1:80:ca:3d:9b:
                    87:8f:65:be:5a:c3:99:db:1b:b2:d7:d9:9a:c7:d4:
                    d3:68:2e:13:41:18:4b:e7:21:76:33:d1:6c:7c:a7:
                    74:12:7c:d7:d7:7c:4d:26:fc:4a:33:34:0c:df:7a:
                    71:1b:3f:25:34:0a:9d:0c:a7:d9:8a:ec:3b:71:16:
                    95:62:e3:60:43:2c:e0:24:aa:3e:4f:1a:4d:02:20:
                    82:c6:5a:2e:80:53:9d:ed:7c:ae:8d:c0:88:0d:d6:
                    af:59:c5:5b:05:7c:9d:d8:d2:6b:05:98:2d:0b:d2:
                    f6:2f:a2:04:92:95:c9:fe:40:16:1d:03:db:86:88:
                    d2:a5:f4:8d:26:cc:45:3c:76:a6:7d:ec:53:55:b1:
                    ef:b5:58:a0:e6:fc:17:c2:b3:01:26:18:27:a6:40:
                    2d:3a:c3:89:44:34:d4:4a:84:35:a4:3e:2d:9c:68:
                    a9:47:09:05:30:45:20:24:b3:43:73:b2:dd:1b:1e:
                    54:5d:90:21:16:0f:96:89:57:24:6a:d6:b2:67:db:
                    98:23:8b:51:92:04:68:ed:59:fd:39:fc:b7:80:bd:
                    85:c0:78:b9:3a:b0:a8:3b:bc:a7:8d:08:ee:af:4d:
                    ca:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E0:98:3A:DB:20:5D:06:2B:4A:E4:39:5C:68:12:64:B0:80:DA:22
            X509v3 Authority Key Identifier:
                keyid:A5:6E:8A:92:F7:DB:96:FA:28:8D:62:3B:1F:7E:DE:10:69:47:59:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136312e302f32342d3234203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:e1:ec:d6:d6:71:11:86:33:12:69:f5:8b:3d:39:b4:7e:3a:
         9d:e5:70:08:c3:fc:d4:42:10:9d:f0:d3:a8:57:88:81:00:1c:
         1b:a3:1c:6c:01:8f:98:1f:15:b3:55:5a:8f:00:58:4b:96:a3:
         6e:af:e0:7a:36:45:03:7a:7c:16:f9:46:bf:8f:eb:22:fc:21:
         1f:7d:74:d0:49:43:72:23:ed:54:bd:2d:ff:f6:9a:b4:88:b0:
         a8:3a:15:37:e4:07:c9:21:55:c6:97:69:51:00:69:49:f1:89:
         9a:e7:19:e7:e7:91:10:3e:53:3c:64:a2:ce:17:ec:5b:1f:7b:
         f7:2f:c1:c7:4a:fd:b7:1d:07:58:8a:74:f8:79:cd:ac:22:79:
         99:79:85:f3:ea:3b:4b:57:25:5c:fa:58:c3:16:0d:02:2b:3e:
         47:c6:67:a9:4d:56:4f:3e:f2:e4:5f:a0:e0:6d:ec:e5:f8:b6:
         49:6b:79:98:1a:16:36:cf:d0:0a:0a:e4:32:5d:72:f7:9e:b2:
         dc:dd:1c:e2:2c:65:00:49:ab:79:61:83:8e:e8:57:f8:c6:fe:
         0a:38:84:da:01:1e:51:fc:61:5f:be:ad:41:9b:25:34:d7:9d:
         33:a2:db:73:e5:33:d7:01:5a:ae:2e:ce:e0:af:4f:d1:31:0c:
         41:a8:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 15:20:10 2023 by rpki-client on console-fra.rpki-client.org