Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32322d3234203d3e20323636313532.roa
File:                     34352e362e33362e302f32322d3234203d3e20323636313532.roa (raw, json)
Hash identifier:          yFla+fv0IXw8ShWLjFwcgSJX836qvKdngzGXxtfN6Iw=
Subject key identifier:   E9:BB:89:46:30:C5:D5:4D:B1:E9:C4:22:BF:86:2C:E2:2A:0F:D2:8E
Certificate issuer:       /CN=0D1F0EF9B6879F5981F0279711EDA3C940B65CC9
Certificate serial:       7ADDE853DEB337DAE3231DF91DFB6F5CB5305D42
Authority key identifier: 0D:1F:0E:F9:B6:87:9F:59:81:F0:27:97:11:ED:A3:C9:40:B6:5C:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32322d3234203d3e20323636313532.roa
Signing time:             Thu 04 Apr 2024 15:57:12 +0000
ROA not before:           Thu 04 Apr 2024 15:52:12 +0000
ROA not after:            Thu 03 Apr 2025 15:57:12 +0000
asID:                     266152
IP address blocks:        45.6.36.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 19:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:dd:e8:53:de:b3:37:da:e3:23:1d:f9:1d:fb:6f:5c:b5:30:5d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1F0EF9B6879F5981F0279711EDA3C940B65CC9
        Validity
            Not Before: Apr  4 15:52:12 2024 GMT
            Not After : Apr  3 15:57:12 2025 GMT
        Subject: CN=E9BB894630C5D54DB1E9C422BF862CE22A0FD28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:fa:a5:5a:1d:cf:c6:ab:ad:7a:04:08:1f:
                    46:b4:06:1e:2b:07:f9:6b:da:21:9c:56:38:15:6a:
                    39:61:68:90:d9:41:ea:e6:43:33:41:95:e4:58:26:
                    b6:14:70:7a:b0:52:b1:59:9f:2b:f1:53:61:ae:62:
                    f7:70:35:f2:47:fd:9f:5c:a9:1e:4e:6d:0e:73:47:
                    8b:f4:7d:7e:33:50:5d:36:27:35:88:05:5f:c7:dc:
                    85:52:43:cf:19:e1:0e:a9:8a:bf:19:63:1d:79:a7:
                    5f:21:2e:21:78:65:97:f2:7d:5b:c2:c1:d6:09:29:
                    64:48:91:13:f7:2e:95:46:7e:f9:4e:15:27:cd:56:
                    5c:56:cc:08:0e:8e:6b:be:c2:f3:ff:4c:ab:84:b9:
                    0b:64:d0:f6:20:33:66:3c:d7:62:52:4a:6e:01:45:
                    b2:38:cc:81:63:1b:2f:35:b5:29:69:4d:92:ed:2e:
                    0d:e0:0c:3f:0a:a6:4f:7b:c1:50:46:c0:8d:69:0d:
                    2b:d4:79:79:c7:5b:57:b0:77:e2:18:3c:22:cf:61:
                    d4:0f:60:58:04:ad:4b:16:50:8b:4b:44:60:de:e5:
                    6c:b4:10:6f:e5:f4:e0:c6:0d:95:7a:af:83:7d:20:
                    9c:c3:8d:36:11:26:fe:08:01:e8:30:a8:37:fc:d6:
                    ba:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BB:89:46:30:C5:D5:4D:B1:E9:C4:22:BF:86:2C:E2:2A:0F:D2:8E
            X509v3 Authority Key Identifier:
                keyid:0D:1F:0E:F9:B6:87:9F:59:81:F0:27:97:11:ED:A3:C9:40:B6:5C:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32322d3234203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:70:99:c2:32:d1:aa:c2:69:f3:5f:6c:8b:dc:de:28:b4:f9:
         ad:7d:1a:a2:06:ef:70:a9:a2:45:18:38:3d:2d:30:f9:47:81:
         98:b8:22:9c:3a:31:fd:59:68:41:a6:64:62:6c:e4:6d:e3:a9:
         1b:22:c9:90:94:5a:6e:1f:94:3f:87:e3:11:b3:aa:9d:69:16:
         15:d0:75:37:ca:d8:24:31:a1:da:48:e4:b4:a8:d8:56:ed:3f:
         26:25:1f:c3:17:13:9b:71:87:2a:ea:02:93:26:dc:6f:c0:37:
         8b:f5:c2:c0:cd:cc:e8:ca:b0:60:f3:76:b5:5d:60:43:92:81:
         8d:e1:b3:b0:bf:af:7f:10:65:dc:ee:84:38:46:80:00:40:90:
         e7:89:e6:c5:ba:64:29:0b:b3:55:37:8a:ec:45:4f:ff:06:4b:
         5a:14:a2:94:b8:ca:89:e8:0d:7f:3f:99:bc:f9:67:97:2b:47:
         1a:2f:f0:95:d9:63:c4:0f:7f:9e:8c:2d:95:c7:07:49:c9:51:
         52:32:a2:ea:45:af:eb:6a:bf:09:82:94:d5:e8:b4:c5:0d:5c:
         8c:51:0a:01:d7:42:f3:b5:88:dd:ec:e9:eb:b5:06:cc:ca:a6:
         fd:ed:e6:93:66:94:42:31:44:99:49:02:fb:ac:d3:7f:44:24:
         e4:eb:1c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 21:07:17 2024 by rpki-client on console-fra.rpki-client.org