Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3332203d3e20323639353432.roa
File:                     34352e3138382e3232342e302f32322d3332203d3e20323639353432.roa (raw, json)
Hash identifier:          hn5QCkcFcMUKkQDALCFdGfc69M9PzQ2/1PRkAcn/GzE=
Subject key identifier:   F6:F7:CC:0B:72:BC:01:31:38:C6:68:D5:0D:B5:F2:35:76:DD:64:1B
Certificate issuer:       /CN=529BE7B6998248B0AC8DB5BAA8E3959769E181A1
Certificate serial:       55A8D04FABEB536D0126B2DACDD85A47434EA247
Authority key identifier: 52:9B:E7:B6:99:82:48:B0:AC:8D:B5:BA:A8:E3:95:97:69:E1:81:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/529BE7B6998248B0AC8DB5BAA8E3959769E181A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3332203d3e20323639353432.roa
Signing time:             Fri 02 Feb 2024 18:12:31 +0000
ROA not before:           Fri 02 Feb 2024 18:07:31 +0000
ROA not after:            Fri 31 Jan 2025 18:12:31 +0000
asID:                     269542
IP address blocks:        45.188.224.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Tue 06 Feb 2024 16:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a8:d0:4f:ab:eb:53:6d:01:26:b2:da:cd:d8:5a:47:43:4e:a2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529BE7B6998248B0AC8DB5BAA8E3959769E181A1
        Validity
            Not Before: Feb  2 18:07:31 2024 GMT
            Not After : Jan 31 18:12:31 2025 GMT
        Subject: CN=F6F7CC0B72BC013138C668D50DB5F23576DD641B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fb:96:f4:f6:17:ed:18:5f:a2:3b:51:87:fb:
                    15:71:c4:c0:aa:39:1d:75:02:9e:ed:cc:b9:fe:e9:
                    e8:31:b5:4d:fc:cd:9b:49:9e:ce:32:db:0f:0a:04:
                    89:55:48:4e:7a:6b:c6:ce:8d:a1:1d:8c:83:0d:c9:
                    2c:e1:d5:fe:8f:dc:6b:37:99:d7:2a:b1:b9:b5:db:
                    84:e1:77:6f:98:0c:e2:d6:28:af:f1:ba:2b:2f:66:
                    98:5e:44:b5:f1:a5:77:19:56:fe:e3:07:24:a1:01:
                    95:c2:6c:6f:d5:17:ee:34:b7:a0:a9:2b:b0:c1:87:
                    cd:5c:86:f6:ec:42:19:c5:0f:19:db:82:bc:25:e4:
                    14:1e:3e:33:cd:23:cd:a4:49:73:4c:59:52:8f:33:
                    2e:36:1f:11:e1:03:2d:da:e2:6e:a5:5a:38:73:c4:
                    1c:b6:26:46:28:7b:2f:82:da:c5:c4:19:81:2f:ce:
                    e0:7a:77:b7:63:e6:50:c0:69:7e:3d:60:10:f1:2a:
                    d5:0e:90:a9:87:c3:cb:53:6e:ce:ff:52:e8:9a:62:
                    6e:20:21:b4:a8:36:28:92:7b:bd:19:2e:b9:2c:c8:
                    90:7c:2a:c5:89:43:e9:29:ba:01:4a:a5:ad:d8:0b:
                    98:38:df:1f:d3:e8:21:93:45:36:39:cf:75:ed:fc:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F7:CC:0B:72:BC:01:31:38:C6:68:D5:0D:B5:F2:35:76:DD:64:1B
            X509v3 Authority Key Identifier:
                keyid:52:9B:E7:B6:99:82:48:B0:AC:8D:B5:BA:A8:E3:95:97:69:E1:81:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/529BE7B6998248B0AC8DB5BAA8E3959769E181A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/529BE7B6998248B0AC8DB5BAA8E3959769E181A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3332203d3e20323639353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:0d:22:7d:e0:3e:94:80:07:e4:8c:74:d6:76:7f:aa:3c:62:
         ba:ab:8e:ae:ec:df:ce:5b:20:de:09:90:a8:89:02:ff:65:63:
         54:c5:0a:62:90:4b:ca:a8:9b:d5:b5:a4:25:ae:f1:ed:3f:af:
         5b:9b:e5:8a:a9:cd:1e:1f:1c:db:c7:86:41:ae:cd:50:94:0c:
         82:37:fc:65:c0:0a:c9:5e:b2:84:e3:88:2f:42:f4:d6:c0:41:
         b9:64:c5:d8:6f:24:46:f2:03:d6:cb:07:d9:85:30:45:01:56:
         f5:04:e7:eb:cd:2e:82:05:f7:ff:bc:34:40:18:b0:72:76:8c:
         83:ae:d6:26:25:15:ed:05:8c:93:53:71:9b:23:88:3b:d7:25:
         c3:c1:6e:e2:09:93:ec:a9:c4:a8:c5:86:3f:9b:79:31:5b:9f:
         63:b3:9c:81:d3:c6:e3:2a:3c:db:98:fc:7c:90:75:c9:35:7f:
         3f:6b:63:e6:d7:46:c8:b6:70:38:23:41:89:0e:0a:77:e6:c6:
         66:2c:61:4d:cd:d3:3a:9e:1f:b0:e6:49:41:e7:43:c3:5e:bd:
         87:6a:de:f0:85:e8:60:4e:98:0f:34:4d:f0:22:1a:71:3e:42:
         41:7e:a8:f8:b5:83:16:3e:e9:e0:c4:13:bf:a2:27:7f:f1:fe:
         2e:66:f4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 21:25:06 2024 by rpki-client on console-fra.rpki-client.org