Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3233203d3e20323633303437.roa
File:                     34352e3138382e3232342e302f32322d3233203d3e20323633303437.roa (raw, json)
Hash identifier:          tuVENm5Xty76CvdjKU/5rEALip/uEvyxfjbMlBKW5sY=
Subject key identifier:   32:74:79:58:3B:4F:08:31:32:E0:14:85:2F:BA:22:B7:B8:CB:94:78
Certificate issuer:       /CN=529BE7B6998248B0AC8DB5BAA8E3959769E181A1
Certificate serial:       588771C4436B662B409A588CF16D26B4B82FD136
Authority key identifier: 52:9B:E7:B6:99:82:48:B0:AC:8D:B5:BA:A8:E3:95:97:69:E1:81:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/529BE7B6998248B0AC8DB5BAA8E3959769E181A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3233203d3e20323633303437.roa
Signing time:             Fri 02 Feb 2024 16:39:27 +0000
ROA not before:           Fri 02 Feb 2024 16:34:27 +0000
ROA not after:            Fri 31 Jan 2025 16:39:27 +0000
asID:                     263047
IP address blocks:        45.188.224.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 18:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:87:71:c4:43:6b:66:2b:40:9a:58:8c:f1:6d:26:b4:b8:2f:d1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529BE7B6998248B0AC8DB5BAA8E3959769E181A1
        Validity
            Not Before: Feb  2 16:34:27 2024 GMT
            Not After : Jan 31 16:39:27 2025 GMT
        Subject: CN=327479583B4F083132E014852FBA22B7B8CB9478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:af:7a:37:2b:1c:00:f4:4d:e2:f2:df:cb:6c:
                    94:8f:d3:da:79:51:74:45:1f:6a:71:9d:7f:81:56:
                    52:1b:32:96:ea:23:ba:96:60:99:ed:81:9b:5b:b0:
                    b9:18:9e:8e:0d:c0:56:d8:e0:a6:52:d8:e2:8d:4f:
                    ca:9a:b4:a9:a4:17:08:91:97:a1:30:1a:b6:2c:e4:
                    a5:31:f9:a0:dc:6e:58:2c:0c:8f:e0:e0:93:2f:ed:
                    35:8b:39:df:e4:32:0b:f1:7f:57:08:ac:6a:1c:fe:
                    6a:80:48:fc:00:e9:21:d0:64:08:60:67:c6:47:f1:
                    65:6d:f0:92:6d:36:53:95:63:8b:6b:12:b8:41:12:
                    f1:41:93:36:e5:d7:9c:95:cb:61:1e:75:27:10:c1:
                    b6:60:d9:d6:54:2e:79:76:4b:fe:87:c3:ca:c7:72:
                    a6:ab:08:28:f2:6c:58:f6:9e:a4:96:a4:5b:1d:09:
                    92:68:37:fd:ef:76:30:c8:bf:b0:e2:0b:a7:a5:62:
                    c5:3e:ec:df:e7:f2:8a:dd:5d:3a:26:d2:ad:49:1f:
                    1f:cf:81:22:4e:ec:59:35:cb:7f:c7:82:67:71:52:
                    0d:5b:7a:28:f1:8d:40:f7:ad:2c:3a:af:73:05:da:
                    46:e5:a8:cb:05:b8:19:98:91:32:24:96:7a:c9:91:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:74:79:58:3B:4F:08:31:32:E0:14:85:2F:BA:22:B7:B8:CB:94:78
            X509v3 Authority Key Identifier:
                keyid:52:9B:E7:B6:99:82:48:B0:AC:8D:B5:BA:A8:E3:95:97:69:E1:81:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/529BE7B6998248B0AC8DB5BAA8E3959769E181A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/529BE7B6998248B0AC8DB5BAA8E3959769E181A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3233203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:e2:22:4c:5b:02:c4:a7:2f:0f:ae:14:d8:a4:0b:8d:87:70:
         f9:bb:9f:56:7d:6f:3f:5a:18:ab:5f:5a:3e:7b:c5:56:8f:bd:
         10:85:7b:42:12:7d:c0:ca:6b:a1:5f:b0:fe:dc:63:76:fa:1f:
         16:10:17:c6:6e:87:f4:05:d0:3d:26:c3:4a:a8:e3:ad:bb:63:
         c0:9d:00:59:e8:69:28:b2:07:e0:80:c5:1f:3a:70:c2:42:c7:
         9d:4d:f6:7f:de:f0:d4:40:a5:38:aa:3a:a4:15:3c:38:e8:db:
         0c:2b:bb:df:0c:c4:13:d3:fd:51:2b:8c:32:3b:9f:35:87:70:
         4f:4e:05:fe:3b:4e:4b:0f:a8:80:89:c0:64:c0:d5:2a:e7:4a:
         10:68:0d:a7:e9:5d:68:90:88:3b:ed:cd:7b:6b:fc:e7:87:fa:
         bb:95:84:7c:0f:cc:55:6b:bf:29:01:38:17:ed:06:9a:d4:76:
         55:60:ee:7e:42:93:9b:8f:e2:ba:5e:7d:3c:1f:6b:e6:94:43:
         e0:9b:a0:cd:e1:40:f6:b3:bd:33:85:68:36:64:9c:55:2b:0b:
         b2:fc:dc:5b:9b:09:80:c0:ae:c4:7b:ac:7f:64:52:03:60:be:
         e8:2b:d1:2c:f8:7d:32:fa:24:7c:b3:97:c0:5c:fd:69:f1:b7:
         f5:ad:ff:5a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWIdxxENrZitAmliM8W0mtLgv0TYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI5QkU3QjY5OTgyNDhCMEFDOERCNUJBQThFMzk1OTc2
OUUxODFBMTAeFw0yNDAyMDIxNjM0MjdaFw0yNTAxMzExNjM5MjdaMDMxMTAvBgNV
BAMTKDMyNzQ3OTU4M0I0RjA4MzEzMkUwMTQ4NTJGQkEyMkI3QjhDQjk0NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5r3o3KxwA9E3i8t/LbJSP09p5
UXRFH2pxnX+BVlIbMpbqI7qWYJntgZtbsLkYno4NwFbY4KZS2OKNT8qatKmkFwiR
l6EwGrYs5KUx+aDcblgsDI/g4JMv7TWLOd/kMgvxf1cIrGoc/mqASPwA6SHQZAhg
Z8ZH8WVt8JJtNlOVY4trErhBEvFBkzbl15yVy2EedScQwbZg2dZULnl2S/6Hw8rH
cqarCCjybFj2nqSWpFsdCZJoN/3vdjDIv7DiC6elYsU+7N/n8ordXTom0q1JHx/P
gSJO7Fk1y3/HgmdxUg1beijxjUD3rSw6r3MF2kblqMsFuBmYkTIklnrJkc9RAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMnR5WDtPCDEy4BSFL7oit7jLlHgwHwYDVR0j
BBgwFoAUUpvntpmCSLCsjbW6qOOVl2nhgaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlnYjc5RGhZMW95QW1zSFkzUXdpa2tuUUVCV2pDMUpXd3R0THhCRVM2
enUvMC81MjlCRTdCNjk5ODI0OEIwQUM4REI1QkFBOEUzOTU5NzY5RTE4MUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUyOUJFN0I2OTk4MjQ4QjBB
QzhEQjVCQUE4RTM5NTk3NjlFMTgxQTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5Z2I3OURoWTFveUFtc0hZM1F3aWtrblFFQldqQzFKV3d0dEx4QkVTNnp1LzAv
MzQzNTJlMzEzODM4MmUzMjMyMzQyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMDM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItvOAwDQYJKoZIhvcNAQELBQADggEBAGTiIkxb
AsSnLw+uFNikC42HcPm7n1Z9bz9aGKtfWj57xVaPvRCFe0ISfcDKa6FfsP7cY3b6
HxYQF8Zuh/QF0D0mw0qo4627Y8CdAFnoaSiyB+CAxR86cMJCx51N9n/e8NRApTiq
OqQVPDjo2wwru98MxBPT/VErjDI7nzWHcE9OBf47TksPqICJwGTA1SrnShBoDafp
XWiQiDvtzXtr/OeH+ruVhHwPzFVrvykBOBftBprUdlVg7n5Ck5uP4rpefTwfa+aU
Q+CboM3hQPazvTOFaDZknFUrC7L83FubCYDArsR7rH9kUgNgvugr0Sz4fTL6JHyz
l8Bc/Wnxt/Wt/1o=
-----END CERTIFICATE-----
Generated at Fri Feb 2 23:29:47 2024 by rpki-client on console-ams.rpki-client.org