Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323635303830.roa
File:                     34352e3137312e3233312e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier:          Kq3YHrOzU/3AnwescftHsbysZf2ZqQNIBQilGgq8pWY=
Subject key identifier:   C0:91:81:1A:A4:39:8C:4D:AA:B6:DF:1E:6A:F9:93:86:98:4E:5B:37
Certificate issuer:       /CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
Certificate serial:       75FEF5CADF22BB8C98D6C71262CF67054281C9BD
Authority key identifier: CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323635303830.roa
Signing time:             Mon 18 Dec 2023 19:37:13 +0000
ROA not before:           Mon 18 Dec 2023 19:32:13 +0000
ROA not after:            Mon 16 Dec 2024 19:37:13 +0000
asID:                     265080
IP address blocks:        45.171.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fe:f5:ca:df:22:bb:8c:98:d6:c7:12:62:cf:67:05:42:81:c9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
        Validity
            Not Before: Dec 18 19:32:13 2023 GMT
            Not After : Dec 16 19:37:13 2024 GMT
        Subject: CN=C091811AA4398C4DAAB6DF1E6AF99386984E5B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:3c:65:90:dd:4b:04:96:d7:7c:89:99:0a:
                    16:f4:e5:bc:3a:2b:1a:34:7f:e7:e5:af:23:6f:45:
                    6a:49:1e:af:7d:a2:b2:0c:47:3c:53:82:e4:36:c2:
                    4d:8e:ed:e7:2e:78:8b:34:65:3b:3c:68:ce:bc:f8:
                    3f:fc:84:bd:d8:7a:4d:2f:db:21:d8:2a:89:f3:3e:
                    c8:1e:c2:45:34:bd:cb:94:4e:ff:1e:19:83:2a:39:
                    10:01:1e:1b:e0:51:ae:dd:aa:f7:19:8d:ce:0f:f4:
                    25:10:2b:76:07:f4:92:ae:44:9e:b5:84:7a:e8:91:
                    fc:77:2a:37:95:7b:fb:e0:30:d5:77:4d:3c:23:bb:
                    27:31:76:37:4a:14:04:0f:8a:1b:8c:91:ee:1e:f9:
                    cf:c6:e4:b0:88:0d:f7:00:db:66:61:48:be:01:06:
                    18:11:cc:26:6f:f3:68:6c:b8:ca:41:31:22:0b:0f:
                    38:72:61:47:b4:c0:33:04:e0:ea:10:9c:62:3e:ae:
                    c5:64:12:2a:28:1a:36:e4:6f:92:64:0a:14:68:78:
                    c7:75:a2:55:46:2d:ac:90:22:a7:aa:49:db:4f:91:
                    bd:37:a8:08:74:64:39:e4:0e:cc:fb:07:67:18:fd:
                    99:8f:6f:3e:e2:60:de:ec:41:de:d0:32:ae:06:25:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:91:81:1A:A4:39:8C:4D:AA:B6:DF:1E:6A:F9:93:86:98:4E:5B:37
            X509v3 Authority Key Identifier:
                keyid:CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:b3:fe:00:c5:10:f5:60:6e:ab:4c:ba:cb:ad:33:d7:38:80:
         37:c1:ce:6e:c3:bb:3d:70:4c:68:11:1f:6c:1d:24:2d:7b:b0:
         a6:c3:4e:0d:b6:b9:f9:a8:8c:f1:87:1e:52:f9:ed:89:28:96:
         61:cb:80:ad:da:ed:f1:74:1a:f7:c1:93:fd:eb:7e:16:59:47:
         f9:02:f7:85:64:13:24:ef:bf:8a:94:fb:83:9c:1b:10:bb:c6:
         29:58:38:91:3d:c7:a5:7e:25:b9:a1:26:27:db:32:0a:b6:e5:
         2d:60:80:4a:90:4b:1a:cc:1a:d5:f9:92:60:3e:36:56:63:27:
         b5:a4:78:65:23:ad:77:51:71:80:fa:44:e4:ee:16:9b:de:65:
         0f:15:62:4b:78:1f:82:43:3c:8a:49:ad:f5:87:18:30:26:a7:
         13:2f:e6:a9:d8:fe:02:26:6b:b6:44:f2:e3:41:de:db:f3:10:
         99:2a:48:06:35:51:a8:f4:3a:a8:35:d6:c8:35:37:54:22:94:
         8c:d6:c7:4f:18:48:f9:91:01:36:38:74:bf:85:a5:24:4b:d6:
         d9:03:10:a4:0b:3b:7d:1f:61:5d:40:ce:70:ef:24:36:9a:43:
         57:88:78:5a:37:43:9d:05:61:bd:98:dc:87:7d:3b:e7:76:bb:
         e9:f7:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 20:57:32 2023 by rpki-client on console-ams.rpki-client.org