Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/34352e3138382e3134302e302f32322d3232203d3e20323639353332.roa
File:                     34352e3138382e3134302e302f32322d3232203d3e20323639353332.roa (raw, json)
Hash identifier:          Ufk7R90WIE9LnZ1AblEOF+2oekNnQnAFQRrxH0DeNYw=
Subject key identifier:   94:91:17:48:25:61:D2:5C:39:F1:8C:F4:88:63:7A:10:6D:4A:1B:9D
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       1AB12E60AA0056E878BE1D28F5ADDAB90496C80C
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/34352e3138382e3134302e302f32322d3232203d3e20323639353332.roa
Signing time:             Wed 03 Apr 2024 18:31:33 +0000
ROA not before:           Wed 03 Apr 2024 18:26:33 +0000
ROA not after:            Wed 02 Apr 2025 18:31:33 +0000
asID:                     269532
IP address blocks:        45.188.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b1:2e:60:aa:00:56:e8:78:be:1d:28:f5:ad:da:b9:04:96:c8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Apr  3 18:26:33 2024 GMT
            Not After : Apr  2 18:31:33 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:04:c9:ab:99:ab:74:e8:df:52:ac:bf:8a:
                    99:59:da:23:16:9f:96:16:f5:9b:c5:ca:8c:82:cc:
                    c9:3d:2c:02:88:27:4f:1f:f7:10:83:e8:0f:9a:43:
                    83:bf:a4:18:42:53:35:f2:be:83:9a:e7:8b:bf:f7:
                    6b:94:1e:89:29:43:b2:b4:ff:11:5f:f9:7b:fa:06:
                    a4:d4:86:27:54:ae:17:ff:9e:c9:59:26:ff:29:0e:
                    66:98:b8:23:70:7b:fd:60:6c:71:b6:19:7b:3d:f8:
                    48:b7:ae:75:7e:31:d6:3a:67:5c:2f:6b:03:27:40:
                    d0:8e:d1:c7:90:55:8a:1f:3d:54:24:d9:a2:dc:ce:
                    95:09:db:67:ec:6f:17:ad:0c:89:b2:ba:f4:7a:3e:
                    93:a2:38:9c:0d:0f:45:6b:6b:66:d4:3d:53:f6:43:
                    19:47:7a:b3:58:52:02:c0:e3:1d:d8:2c:5d:9a:45:
                    c7:a4:9e:a8:17:24:26:f2:c6:66:91:ab:97:c5:a6:
                    d1:0d:e3:fd:f2:ff:c0:bc:8e:2a:a2:cc:0b:6b:c2:
                    90:d0:cc:6b:bc:cf:0a:d2:d7:75:4e:04:4f:ed:d4:
                    4e:5a:f9:de:ab:42:c6:fd:84:74:b0:aa:2f:d8:15:
                    8b:74:25:5f:3e:cb:d0:bc:89:0b:3c:8f:22:2f:d4:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:91:17:48:25:61:D2:5C:39:F1:8C:F4:88:63:7A:10:6D:4A:1B:9D
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/34352e3138382e3134302e302f32322d3232203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:c7:20:73:f5:0a:90:bd:fb:91:ad:73:d4:a9:ff:51:7e:75:
         d4:3d:14:6a:dc:d6:31:c7:61:18:53:16:52:8a:d0:80:63:fd:
         34:15:44:5a:14:a4:7f:34:84:65:c5:95:d7:24:c9:20:87:6b:
         a2:b4:18:45:7f:4f:fa:2f:9f:eb:d3:45:a2:84:38:f0:2e:0e:
         29:38:06:31:ae:d3:01:df:3b:7b:ed:5c:0c:23:0c:96:4b:8c:
         b5:a1:ba:55:a1:43:96:ea:30:50:63:48:0e:d7:31:0d:40:a1:
         c2:5a:a7:27:05:e8:31:ef:f0:f0:1f:38:52:81:f0:24:e1:8e:
         02:8a:38:eb:d8:ea:c3:89:23:ab:6f:43:af:e5:c9:17:81:b6:
         5f:a6:49:ce:8d:26:82:73:e5:ac:c0:c3:bb:8b:3e:30:3e:f3:
         61:f2:71:17:7d:ef:d7:27:ad:5b:8e:2b:56:d9:31:38:50:a4:
         10:d1:07:7d:75:33:bb:55:86:a6:c4:31:58:79:c8:d2:c4:f4:
         45:1a:a5:54:1e:45:2c:88:24:e2:18:36:dd:32:6d:71:2e:cc:
         67:3d:55:69:cc:78:33:e6:26:8d:66:0d:57:58:6e:74:69:c6:
         b7:d5:d4:10:c6:20:e1:fd:7f:e5:5d:2b:a6:85:26:c2:b8:63:
         90:34:73:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 02:03:47 2024 by rpki-client on console-ams.rpki-client.org