Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36382e302f32322d3234203d3e20323637323232.roa
File:                     34352e3232392e36382e302f32322d3234203d3e20323637323232.roa (raw, json)
Hash identifier:          w/RREZvhy3h3jnsVHCGNoAs62kpjf74maLX9frqFaWY=
Subject key identifier:   22:6A:47:E9:B3:FC:C0:69:C2:90:DE:74:63:6D:5B:43:E3:D1:B4:DF
Certificate issuer:       /CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
Certificate serial:       131EE19CA765C8C557322FA6EF508A2EA3E1258A
Authority key identifier: 57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36382e302f32322d3234203d3e20323637323232.roa
Signing time:             Wed 23 Aug 2023 20:34:04 +0000
ROA not before:           Wed 23 Aug 2023 20:29:04 +0000
ROA not after:            Wed 21 Aug 2024 20:34:04 +0000
asID:                     267222
IP address blocks:        45.229.68.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1e:e1:9c:a7:65:c8:c5:57:32:2f:a6:ef:50:8a:2e:a3:e1:25:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
        Validity
            Not Before: Aug 23 20:29:04 2023 GMT
            Not After : Aug 21 20:34:04 2024 GMT
        Subject: CN=226A47E9B3FCC069C290DE74636D5B43E3D1B4DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:f1:42:64:51:25:2e:4f:de:94:4b:bb:8f:
                    56:a1:0e:16:e4:3c:e6:38:5d:4c:04:9c:96:d5:85:
                    7d:30:29:46:31:57:2c:d3:1c:1b:df:f0:21:f1:a5:
                    87:17:31:89:5a:ca:1e:fe:9c:31:ba:90:64:4b:a5:
                    db:16:0d:a2:ea:fe:6f:ff:50:8f:6e:af:52:8e:48:
                    4b:25:74:83:32:8a:44:bb:07:e9:45:af:01:a1:67:
                    2f:8b:f0:5e:da:88:41:d5:b6:39:a4:2b:d5:2d:b5:
                    cc:58:d0:01:f0:07:f6:58:2e:d2:c8:e1:0b:c2:64:
                    8f:a3:de:10:8a:5c:d2:3c:14:91:cd:27:a2:04:bc:
                    18:4e:a8:19:2b:1e:a0:c2:42:cb:c1:f5:2b:16:a2:
                    b0:ea:73:71:ea:07:8a:98:49:d9:5c:a5:e9:be:37:
                    51:13:31:c4:ae:75:7d:a5:53:34:b6:15:3c:ab:b8:
                    e0:68:e2:7a:e0:1f:58:26:03:22:c1:49:0d:8c:9b:
                    25:98:15:31:52:96:43:16:d6:06:37:19:93:a7:d4:
                    b9:26:ce:9e:09:61:3e:cc:22:0e:a8:01:16:80:65:
                    ba:66:33:32:8c:6e:b5:a2:64:25:f9:aa:12:aa:f6:
                    ef:dc:82:a4:8d:7a:8e:1d:d0:42:70:b4:29:ca:e3:
                    3f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6A:47:E9:B3:FC:C0:69:C2:90:DE:74:63:6D:5B:43:E3:D1:B4:DF
            X509v3 Authority Key Identifier:
                keyid:57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36382e302f32322d3234203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:c0:08:26:33:5c:a6:0c:39:5a:71:8f:b6:8a:b5:f3:e5:16:
         3c:29:10:5a:51:30:bb:03:e0:a3:64:ba:ed:d8:19:f7:2b:2a:
         d9:46:6f:77:77:0e:fc:23:7b:25:8c:05:2e:a3:e7:1c:a6:3a:
         38:71:93:03:b0:b0:89:cd:22:09:36:d7:00:40:fd:54:53:bb:
         49:95:56:71:f1:61:33:ff:8c:7a:a2:dd:0f:23:5f:ac:73:2d:
         27:bc:c9:25:f8:5d:dc:9d:ab:bf:1f:ce:5e:0c:df:69:e6:e8:
         2c:9b:d6:6e:81:ba:33:71:b8:62:bd:d4:a2:e6:f4:7c:12:62:
         14:0c:3f:bf:3b:e5:ff:d5:4e:56:4b:8e:4e:3d:26:db:8f:e6:
         67:dc:30:cc:ff:af:0e:dc:98:5c:9d:8b:2d:01:01:1c:d8:9e:
         d8:00:0f:e4:c6:74:d2:df:a5:b5:53:1f:ce:99:22:c9:b8:4e:
         5d:b9:d1:de:fa:fa:8b:8c:95:79:aa:07:2d:9f:83:bd:51:20:
         08:a0:55:3b:db:1b:e0:9d:0f:ee:6d:f7:7a:18:23:f6:2b:53:
         b5:35:06:3d:c6:f8:ff:3d:75:b3:63:36:aa:f8:9e:0f:32:96:
         50:fc:23:7a:e4:ff:38:a9:f3:8c:fd:fc:a3:df:4c:84:54:55:
         98:fb:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 15:26:04 2023 by rpki-client on console-ams.rpki-client.org