Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32322d3232203d3e20323633393830.roa
File:                     34352e3233322e3230302e302f32322d3232203d3e20323633393830.roa (raw, json)
Hash identifier:          TxX2fJZRnqnBIAyP2/+MJidFkQYcWuRzAvTVQ9k6S7M=
Subject key identifier:   5C:59:1A:CA:00:00:6C:E1:09:54:5A:F2:84:75:A9:71:AD:01:99:3D
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       1BFB8C8CD31FDC3F5B8EFAC2BB17DE4EB660B771
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32322d3232203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:57:56 +0000
ROA not before:           Tue 23 Apr 2024 12:52:56 +0000
ROA not after:            Tue 22 Apr 2025 12:57:56 +0000
asID:                     263980
IP address blocks:        45.232.200.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fb:8c:8c:d3:1f:dc:3f:5b:8e:fa:c2:bb:17:de:4e:b6:60:b7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:52:56 2024 GMT
            Not After : Apr 22 12:57:56 2025 GMT
        Subject: CN=5C591ACA00006CE109545AF28475A971AD01993D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:43:3a:2a:c8:04:76:a8:61:65:f5:8f:f5:
                    0c:a9:e8:87:73:ef:ee:ca:e1:aa:7a:ef:38:42:dc:
                    e1:ae:42:76:c8:5b:46:cb:72:41:c2:53:c4:2c:df:
                    34:5d:9f:84:04:98:16:70:60:27:92:7f:8e:04:ac:
                    9f:83:fb:c8:18:15:74:75:24:58:a5:c7:ef:5d:e0:
                    e7:1f:ea:94:98:d8:44:af:cf:5e:83:98:ea:01:a2:
                    10:35:f6:51:be:42:ef:79:e9:0f:da:d0:4a:5d:d4:
                    fb:b6:da:0b:ee:92:5d:8f:5d:1f:23:05:16:ca:f7:
                    89:cb:d1:ad:b9:97:60:61:42:e9:62:85:f0:89:db:
                    f3:4b:61:04:4d:25:d5:e9:d1:2d:b0:07:07:5f:4d:
                    fc:88:b7:d6:05:e0:75:61:81:87:7a:ce:c5:ce:69:
                    ae:fd:59:7c:af:d6:c1:3f:34:6f:4b:88:14:92:28:
                    25:8c:1c:ad:f3:3a:af:6e:1b:27:c3:75:8d:04:d4:
                    7c:54:3e:0d:ec:93:8d:2b:9c:cb:da:7c:a7:fc:99:
                    05:24:79:7e:10:13:c4:b7:73:73:03:ef:0e:c2:c4:
                    bc:6d:31:2e:44:10:1b:51:87:a3:b6:d7:d3:54:0a:
                    85:90:25:f9:33:d5:1b:d6:39:9a:32:20:86:e0:4c:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:59:1A:CA:00:00:6C:E1:09:54:5A:F2:84:75:A9:71:AD:01:99:3D
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32322d3232203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:cb:d8:02:af:12:aa:b4:70:ea:6f:c0:f6:f0:85:20:61:19:
         d5:d8:36:c2:c8:da:de:24:db:c0:90:1a:b6:2d:da:39:49:50:
         54:b1:62:e2:3f:4e:95:4c:1a:fc:d6:91:e1:b5:2a:dc:be:ec:
         a1:ad:bb:c6:66:82:c6:73:10:55:37:cd:16:09:19:f8:90:52:
         3b:b2:fd:ab:9b:85:0e:97:ef:17:43:62:10:3e:b1:03:98:96:
         fe:3e:ee:81:b6:fc:2a:4b:fe:7b:a3:3a:4a:b3:62:7a:8f:3e:
         a4:9b:c7:ec:2d:d9:e8:e2:ba:d6:d4:4d:2a:01:81:11:30:06:
         1f:8a:27:5a:38:cc:72:78:8c:4d:54:97:9a:75:e7:96:35:aa:
         df:e3:d4:2a:78:64:8f:1b:d9:21:19:0e:fd:d3:30:54:3b:3f:
         62:a5:85:0c:dd:68:22:53:3b:10:02:84:69:22:a5:c6:80:4c:
         7d:be:87:ae:c4:54:07:d9:dd:e6:d1:52:6a:00:fb:44:c0:e9:
         63:1a:55:61:2e:cb:d1:7d:3d:65:fc:62:f9:85:1d:e0:b4:7a:
         e1:f6:2d:30:65:0f:4f:5f:11:51:48:63:84:20:7c:04:87:ca:
         a5:19:5b:cf:ab:07:b7:cf:a6:56:2d:ef:16:4b:a0:ae:9a:d1:
         d5:5e:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org