Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130332e302f32342d3234203d3e20323637353637.roa
File:                     34352e37302e3130332e302f32342d3234203d3e20323637353637.roa (raw, json)
Hash identifier:          XeGkMGb9mG5zHObt18b0Hsfhu+FfQpXkyhka3M8VcZ4=
Subject key identifier:   CC:9C:93:D5:EA:B4:84:11:BF:FD:21:C4:8F:0B:46:79:D9:39:A3:32
Certificate issuer:       /CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
Certificate serial:       082FB66DA4C5F72557E813687E80E253F037544D
Authority key identifier: 3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130332e302f32342d3234203d3e20323637353637.roa
Signing time:             Wed 29 Nov 2023 01:33:02 +0000
ROA not before:           Wed 29 Nov 2023 01:28:02 +0000
ROA not after:            Wed 27 Nov 2024 01:33:02 +0000
asID:                     267567
IP address blocks:        45.70.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2f:b6:6d:a4:c5:f7:25:57:e8:13:68:7e:80:e2:53:f0:37:54:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
        Validity
            Not Before: Nov 29 01:28:02 2023 GMT
            Not After : Nov 27 01:33:02 2024 GMT
        Subject: CN=CC9C93D5EAB48411BFFD21C48F0B4679D939A332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:92:4e:76:8b:f6:75:a0:ba:2a:20:b0:93:
                    f2:a1:5a:47:f9:87:21:2d:be:6e:83:d2:19:69:a6:
                    67:06:ff:76:77:5d:86:6b:1e:3e:2c:f4:37:c8:5c:
                    9e:20:e9:b6:28:67:e6:b6:35:28:85:cf:07:39:84:
                    ec:48:47:ab:37:a3:19:cd:0c:49:28:16:ff:50:34:
                    c9:b9:88:71:62:ae:33:b2:ac:57:42:6b:8f:eb:8c:
                    fc:36:ab:28:a3:b0:f8:1e:b2:c9:7e:9b:54:63:c7:
                    88:6e:2c:60:29:8c:26:21:a8:c6:ce:58:ee:e8:49:
                    50:ec:d1:1d:1a:7f:1b:e8:93:35:f2:18:52:ae:79:
                    2e:d7:a9:bb:61:6c:02:a7:f5:2f:93:01:6c:45:35:
                    fa:39:95:dd:59:a7:0b:93:4b:18:c3:3e:44:66:8e:
                    bd:31:e7:0a:78:d5:f8:f5:25:02:60:ea:fe:84:ca:
                    34:49:70:98:10:e9:84:e7:8c:38:b6:22:20:91:a9:
                    3d:78:55:d7:31:ed:06:02:06:40:20:da:f8:5b:b1:
                    12:7d:5c:f0:65:2f:18:8a:11:79:30:c4:e1:ac:bf:
                    c9:47:68:93:c8:2d:2a:db:a1:fa:1c:26:6f:0b:25:
                    2c:d9:9c:3e:b7:ad:2d:c9:19:1a:73:b6:d3:a4:82:
                    7b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9C:93:D5:EA:B4:84:11:BF:FD:21:C4:8F:0B:46:79:D9:39:A3:32
            X509v3 Authority Key Identifier:
                keyid:3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/34352e37302e3130332e302f32342d3234203d3e20323637353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:ab:12:95:57:34:7c:3f:26:92:e9:72:a0:56:d2:ab:d0:7d:
         21:d4:66:fd:19:08:e3:6d:c7:0f:e8:d2:38:c2:a7:39:30:08:
         37:e3:36:58:54:88:dc:6a:6e:fd:31:0c:15:7f:7b:b4:67:90:
         db:00:b7:43:e5:63:01:bf:e0:aa:e3:7f:46:06:d5:aa:bc:7f:
         a0:94:ca:9a:7a:e1:c6:fb:5b:87:bb:57:50:0d:c6:7b:cf:03:
         f7:c4:42:9a:4e:f4:cc:ce:d3:64:d9:8d:19:81:15:0d:7a:ca:
         c3:7b:48:bd:ab:73:8a:83:29:82:34:a7:3f:85:3a:ad:a7:d4:
         39:fe:3c:7c:24:f3:4f:c3:ce:1e:18:fd:e7:73:ef:d1:dd:d7:
         ee:e0:a4:8d:af:d2:8e:bd:82:b8:87:f2:ee:2a:fb:b1:42:88:
         62:f8:d6:bd:fc:a7:50:7c:b3:4c:12:f3:9d:d0:74:af:d8:86:
         43:54:c1:b8:ab:9b:c6:93:3e:29:fe:4f:27:37:19:4b:31:68:
         ea:cb:00:fd:2a:fa:8a:7b:26:ea:bb:45:66:8c:1a:d4:01:e8:
         ce:92:07:6e:13:b6:fa:67:3d:e7:7c:70:96:d6:10:3e:c9:6e:
         94:d1:d3:d2:61:7d:31:a9:f0:6c:2b:de:2b:ca:e2:0f:08:cb:
         ca:ac:d5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 13:55:21 2023 by rpki-client on console-ams.rpki-client.org