Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138302e302f32342d3234203d3e20323638343133.roa
File:                     34352e3136302e3138302e302f32342d3234203d3e20323638343133.roa (raw, json)
Hash identifier:          2ZjlxVwKWV5/uElrjxEOsTpeSVtpvdh6uySwr6L7Tug=
Subject key identifier:   A4:55:69:44:69:64:2D:26:38:76:16:C9:89:1B:9B:8C:0E:B0:E2:2F
Certificate issuer:       /CN=C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8
Certificate serial:       090276914868B4A8CCEE0005067DB643059DE75D
Authority key identifier: C7:EF:6E:14:93:EA:A9:C2:D3:64:7B:EE:A8:2D:FF:84:70:2D:21:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138302e302f32342d3234203d3e20323638343133.roa
Signing time:             Mon 11 Dec 2023 17:21:42 +0000
ROA not before:           Mon 11 Dec 2023 17:16:42 +0000
ROA not after:            Mon 09 Dec 2024 17:21:42 +0000
asID:                     268413
IP address blocks:        45.160.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 20:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:02:76:91:48:68:b4:a8:cc:ee:00:05:06:7d:b6:43:05:9d:e7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8
        Validity
            Not Before: Dec 11 17:16:42 2023 GMT
            Not After : Dec  9 17:21:42 2024 GMT
        Subject: CN=A455694469642D26387616C9891B9B8C0EB0E22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:b4:a5:7c:f9:4f:90:f4:66:3c:fb:38:24:
                    42:de:c9:29:f4:c6:de:ca:ee:05:55:93:62:14:81:
                    78:4e:5a:f6:c9:93:05:cd:96:8f:3b:f6:b3:c5:0c:
                    43:b0:93:5b:b1:35:c2:c0:de:b5:1b:72:02:44:d2:
                    59:10:d3:48:e6:5e:36:cc:2d:65:64:69:df:c1:46:
                    2f:36:35:c3:74:f4:26:68:a6:48:76:d2:0e:5c:08:
                    dd:7b:41:c2:dd:e7:58:a5:4a:83:2d:7c:e3:d1:80:
                    68:00:7c:e0:38:11:44:d2:d5:3d:e8:ad:b4:09:d0:
                    2b:a9:59:ba:5d:65:c1:e0:e3:6e:be:9d:47:6a:69:
                    c8:e4:89:82:79:66:fa:d7:ea:d3:d4:4e:97:d1:2d:
                    75:56:6e:81:43:cb:ea:22:c2:03:97:ca:12:d8:9a:
                    03:1c:05:a7:37:7b:ac:09:a3:15:00:75:ba:18:e3:
                    80:14:dc:34:be:62:98:b6:f0:62:59:2c:55:89:0a:
                    02:cd:09:7f:78:ac:f7:b8:39:32:7d:5b:a7:03:4c:
                    69:a8:87:23:67:f5:49:03:11:0e:cc:9c:f9:e7:35:
                    aa:0b:05:06:d7:05:55:8d:83:91:df:e5:05:a7:4c:
                    fc:37:c4:25:71:42:c0:6f:61:71:40:95:27:d8:93:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:55:69:44:69:64:2D:26:38:76:16:C9:89:1B:9B:8C:0E:B0:E2:2F
            X509v3 Authority Key Identifier:
                keyid:C7:EF:6E:14:93:EA:A9:C2:D3:64:7B:EE:A8:2D:FF:84:70:2D:21:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138302e302f32342d3234203d3e20323638343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:54:9f:4e:5a:a5:2a:e4:41:01:3d:ef:a5:8c:a6:b0:f1:
         7c:21:63:e6:58:96:5c:74:7a:f6:16:ca:1d:6c:17:91:a7:82:
         ad:3e:bf:c4:dd:1d:52:4e:96:2e:0c:6f:ad:79:4a:af:7d:26:
         63:4a:32:e2:68:f4:b5:af:89:4b:a0:05:c0:d0:a5:50:3a:47:
         7c:df:e0:88:18:ea:0a:bc:bf:4b:7f:15:11:16:cf:56:d5:fb:
         fd:76:cc:67:eb:88:4d:10:3c:81:a5:f3:4b:71:85:45:eb:fe:
         e6:95:2e:a8:08:b6:c0:63:64:79:e6:a7:36:59:30:fe:35:7d:
         b8:c9:61:05:82:05:bc:b4:f7:7b:f3:cf:a9:91:ff:07:e9:a2:
         73:77:af:a4:32:77:5e:9a:ed:4c:4e:4f:5b:a3:ca:ad:f0:1d:
         50:b0:72:04:a6:bc:1e:7c:a1:63:2c:b5:9e:57:76:5f:5c:3f:
         26:35:40:39:96:f4:9f:8f:80:e8:f5:b5:ea:9a:f7:23:4b:fc:
         6f:16:e2:7c:e9:e3:bd:64:28:a5:0d:c7:39:80:5f:b8:06:76:
         60:c7:e4:a5:bf:92:d5:26:53:4e:da:7a:b2:fe:fc:4b:99:13:
         b1:03:98:e0:d2:fa:4e:cf:1b:60:91:cb:ef:88:c1:49:92:c4:
         f3:3d:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 21:47:53 2024 by rpki-client on console-ams.rpki-client.org