Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136332e302f32342d3234203d3e20323637323134.roa
File:                     34352e3233302e3136332e302f32342d3234203d3e20323637323134.roa (raw, json)
Hash identifier:          ikClqvxyYhUL5nof0mxmNUyGYxrWt0qGYQDHxIgC+dk=
Subject key identifier:   AE:8B:32:26:3C:C3:8B:95:7E:12:EA:32:9A:E7:AE:12:90:46:E2:2B
Certificate issuer:       /CN=A56E8A92F7DB96FA288D623B1F7EDE10694759CE
Certificate serial:       53D298951F0885E8E6569BA6633C5D223D683703
Authority key identifier: A5:6E:8A:92:F7:DB:96:FA:28:8D:62:3B:1F:7E:DE:10:69:47:59:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136332e302f32342d3234203d3e20323637323134.roa
Signing time:             Thu 20 Jul 2023 13:14:04 +0000
ROA not before:           Thu 20 Jul 2023 13:09:04 +0000
ROA not after:            Thu 18 Jul 2024 13:14:04 +0000
asID:                     267214
IP address blocks:        45.230.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d2:98:95:1f:08:85:e8:e6:56:9b:a6:63:3c:5d:22:3d:68:37:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56E8A92F7DB96FA288D623B1F7EDE10694759CE
        Validity
            Not Before: Jul 20 13:09:04 2023 GMT
            Not After : Jul 18 13:14:04 2024 GMT
        Subject: CN=AE8B32263CC38B957E12EA329AE7AE129046E22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:6c:75:90:a2:b0:aa:7e:31:73:1d:77:35:
                    97:ee:9f:3b:37:cf:24:b1:12:79:99:23:20:7c:00:
                    e2:b8:fd:bc:89:e5:24:bd:8a:f5:4f:29:5d:0f:6f:
                    39:ec:f4:a8:e4:1e:45:b2:e2:9e:1b:c0:09:f7:59:
                    b5:42:33:e1:b5:c7:42:c9:a0:cd:fb:37:d5:93:cd:
                    39:a4:9d:e1:fd:04:9b:c6:e5:7c:75:54:ba:89:23:
                    f5:14:2a:9a:65:54:48:e5:dc:b2:30:a2:d7:e4:c0:
                    9f:e7:42:e1:e0:47:01:a5:63:b2:e1:66:25:ec:aa:
                    cc:cf:50:98:86:16:45:10:c3:66:cd:93:e2:81:66:
                    d6:1c:cd:67:ef:63:73:70:d8:8f:f0:8b:17:e1:ea:
                    87:d1:1c:ad:1c:ea:91:c5:0f:e3:8b:72:bf:2d:93:
                    0e:3c:9f:2f:3d:60:ff:ab:68:00:5b:76:54:eb:bc:
                    8b:51:e4:df:83:5e:19:c4:9d:da:b3:15:b9:ae:08:
                    7a:cd:d8:aa:91:20:f7:b1:5b:ee:b5:bf:bc:91:0f:
                    c0:70:b2:00:d2:7e:13:3e:2b:67:80:c4:45:44:cf:
                    51:4c:b6:e6:7f:ba:dd:42:db:98:03:32:04:b7:d7:
                    c7:06:85:4f:61:6d:f9:84:a7:3b:8d:e4:2e:ac:0e:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8B:32:26:3C:C3:8B:95:7E:12:EA:32:9A:E7:AE:12:90:46:E2:2B
            X509v3 Authority Key Identifier:
                keyid:A5:6E:8A:92:F7:DB:96:FA:28:8D:62:3B:1F:7E:DE:10:69:47:59:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136332e302f32342d3234203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:a4:62:ee:80:64:83:83:d2:1b:ff:30:0a:27:24:22:39:76:
         da:86:8d:33:86:a2:b1:11:77:23:89:1b:78:34:13:ba:9b:84:
         a7:04:7e:5a:ad:2a:cc:fb:4a:6c:15:f5:94:a3:e0:85:cc:08:
         ff:cd:a0:71:bc:a0:fb:ed:5b:32:1c:d3:e9:7c:0c:8a:61:29:
         88:84:ce:85:e3:d9:7e:71:09:b1:12:54:62:07:fa:d7:8c:25:
         76:04:ec:f1:8a:f4:f9:5d:83:c2:b0:f0:0e:2b:28:06:8e:66:
         5a:2b:73:da:03:6b:7d:51:11:05:83:21:61:32:f5:75:d6:e8:
         f3:c6:70:87:6a:0d:f4:85:8f:84:5b:cb:0c:81:47:80:41:20:
         ee:b7:34:76:4c:ac:5a:c3:81:ae:21:aa:c1:2d:2a:48:91:28:
         70:b7:4b:ce:79:1c:0a:13:5b:30:77:f9:ea:e7:b7:7f:2a:90:
         c9:e2:12:c2:d6:6b:6e:19:32:43:d5:84:6a:71:08:ec:10:1b:
         09:e7:9a:41:eb:f9:6a:8a:76:c8:63:d0:95:3c:8b:6c:c5:ac:
         de:99:3a:a2:35:63:d7:f3:9e:3a:5c:f7:83:97:6e:c4:99:63:
         5d:4e:39:1d:de:8a:10:8b:98:bc:f7:e8:fa:48:58:c7:b0:d2:
         80:82:f8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 15:27:27 2023 by rpki-client on console-ams.rpki-client.org