Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/34352e3136362e32342e302f32342d3332203d3e20323637393530.roa
File:                     34352e3136362e32342e302f32342d3332203d3e20323637393530.roa (raw, json)
Hash identifier:          QIswOaSzIFDu+bL3seg9iS3K12fnsCAfwzPjIak/+pk=
Subject key identifier:   6D:19:E7:99:64:3B:23:C0:2B:47:37:20:B3:D1:48:7C:50:08:27:27
Certificate issuer:       /CN=4DD43D290C6B438D838E22B1B66200783B627EC5
Certificate serial:       5350A296C55F36D29FC07E8C85C12B5691291BB7
Authority key identifier: 4D:D4:3D:29:0C:6B:43:8D:83:8E:22:B1:B6:62:00:78:3B:62:7E:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DD43D290C6B438D838E22B1B66200783B627EC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/34352e3136362e32342e302f32342d3332203d3e20323637393530.roa
Signing time:             Sun 22 Oct 2023 16:02:11 +0000
ROA not before:           Sun 22 Oct 2023 15:57:11 +0000
ROA not after:            Sun 20 Oct 2024 16:02:11 +0000
asID:                     267950
IP address blocks:        45.166.24.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:50:a2:96:c5:5f:36:d2:9f:c0:7e:8c:85:c1:2b:56:91:29:1b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD43D290C6B438D838E22B1B66200783B627EC5
        Validity
            Not Before: Oct 22 15:57:11 2023 GMT
            Not After : Oct 20 16:02:11 2024 GMT
        Subject: CN=6D19E799643B23C02B473720B3D1487C50082727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:77:30:ca:f8:8b:b4:48:70:34:5f:ee:5b:
                    ed:30:e0:30:6e:9f:cc:14:7f:55:2f:07:c3:8e:f8:
                    9a:43:6e:eb:a8:79:ec:b8:f7:e8:6c:25:c1:2f:9e:
                    d2:e4:a9:d6:39:4b:82:6e:b5:f1:70:f8:7d:53:6c:
                    5b:5b:e0:10:0a:17:c3:09:15:4d:94:b8:e3:f3:58:
                    83:4e:02:78:4f:a9:b7:e5:f7:00:84:9c:e5:77:d1:
                    28:32:a9:b8:ea:1c:37:0a:ae:58:bf:32:c8:64:19:
                    07:b3:aa:ef:0d:c6:3d:07:b7:0e:12:59:4c:1c:17:
                    e8:40:b4:4e:94:00:03:20:ba:51:0f:0a:e2:e4:52:
                    50:f4:31:43:c8:a6:c4:d2:34:3a:89:22:8d:44:3a:
                    13:38:0d:71:a7:ee:56:95:4f:c4:f1:3d:ca:61:14:
                    51:3a:9c:68:a7:b3:23:90:44:14:e0:b5:0b:86:90:
                    b9:07:29:b6:00:c0:11:e1:02:7e:c2:f3:47:8a:bc:
                    71:34:9c:1d:2e:a5:a2:a6:c7:dc:94:4e:db:27:23:
                    b5:58:ac:ea:8b:5b:86:2f:e1:c3:da:e3:a4:e3:9f:
                    f0:40:6e:37:bd:83:97:86:a7:a7:81:b6:c1:0a:2b:
                    f9:43:31:16:28:77:9e:b6:f1:65:aa:bc:c9:e1:ad:
                    96:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:19:E7:99:64:3B:23:C0:2B:47:37:20:B3:D1:48:7C:50:08:27:27
            X509v3 Authority Key Identifier:
                keyid:4D:D4:3D:29:0C:6B:43:8D:83:8E:22:B1:B6:62:00:78:3B:62:7E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/4DD43D290C6B438D838E22B1B66200783B627EC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DD43D290C6B438D838E22B1B66200783B627EC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/34352e3136362e32342e302f32342d3332203d3e20323637393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:8b:a2:3e:b0:49:17:e4:55:03:d9:c3:bd:50:0e:2e:02:15:
         a2:a1:ea:69:19:9d:77:b9:2e:3e:70:59:65:85:c6:0d:f9:9e:
         42:be:ac:24:e7:ba:1f:8e:3c:02:59:00:65:4e:c2:16:cc:c6:
         83:eb:55:9b:66:01:64:36:35:a4:96:ac:10:19:c1:10:50:c3:
         91:42:fa:dc:2b:21:72:70:a4:96:9e:fc:16:eb:60:52:80:d8:
         1b:d7:07:42:d9:7c:9f:bd:fa:ee:2d:95:2a:e1:a8:67:f6:77:
         79:d2:e4:40:f0:28:47:eb:07:1a:f8:87:99:35:57:f4:4e:53:
         7a:96:89:0c:f6:78:9c:10:d5:64:4a:c3:c0:d5:a7:6f:1c:59:
         d0:ab:66:ee:b2:d9:d7:01:0c:e4:d1:2c:cc:7d:6e:82:4c:9b:
         c3:95:3b:69:d1:60:d1:5e:c6:52:fc:be:16:de:ec:e3:3c:c3:
         fe:c3:cf:28:fb:05:70:16:38:d4:8f:bc:4a:88:84:3f:f5:70:
         20:e2:e5:c9:03:a6:4d:6d:4e:bb:f4:fd:b8:c7:3f:af:96:3f:
         2d:51:56:13:0b:47:1b:d7:05:f9:66:66:fd:94:c2:90:b9:0e:
         12:2c:26:4c:57:a0:df:2b:6e:99:a1:d1:c2:86:1f:8a:9a:f9:
         fd:0d:4d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 14:45:12 2023 by rpki-client on console-fra.rpki-client.org