Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32332d3233203d3e20323633393830.roa
File:                     34352e3233322e3230302e302f32332d3233203d3e20323633393830.roa (raw, json)
Hash identifier:          Dw3pVSRq5q7YInNRfAs03wkUrHbHzZ0O+awQ+y/7akg=
Subject key identifier:   14:A2:29:FF:81:71:38:60:09:67:61:0C:9A:E1:49:C1:5D:0D:0A:48
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       17B90AA9DA8CF19A9355A8CB695E1AF9FFFA885B
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32332d3233203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:57:59 +0000
ROA not before:           Tue 23 Apr 2024 12:52:59 +0000
ROA not after:            Tue 22 Apr 2025 12:57:59 +0000
asID:                     263980
IP address blocks:        45.232.200.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b9:0a:a9:da:8c:f1:9a:93:55:a8:cb:69:5e:1a:f9:ff:fa:88:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:52:59 2024 GMT
            Not After : Apr 22 12:57:59 2025 GMT
        Subject: CN=14A229FF817138600967610C9AE149C15D0D0A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:79:46:bd:29:a8:ca:7a:38:cf:ca:22:75:ab:
                    36:62:20:04:26:c0:90:f3:f6:e2:4f:e9:2d:95:25:
                    bb:a3:0f:cb:a3:75:39:ce:bf:95:1a:69:08:fa:d4:
                    8c:a0:75:0d:f5:82:90:71:b0:7f:35:4b:a4:5d:be:
                    8d:3a:eb:ac:c9:c2:0c:db:3c:2e:28:1b:58:7f:f0:
                    98:8b:e1:76:c0:bc:ac:92:01:09:07:3b:89:22:dc:
                    c4:ec:8c:4f:e4:35:1e:ce:bf:d6:db:a7:68:6c:de:
                    d0:43:6c:a6:20:ea:18:c6:53:20:06:86:a0:62:a9:
                    1e:20:86:8f:e4:bb:58:12:af:b9:b2:f3:c6:71:3c:
                    3e:31:86:8e:49:3d:3b:71:da:39:ee:ae:11:4c:73:
                    5b:24:70:92:b1:a1:41:53:8c:70:29:1b:dd:e1:57:
                    1c:d1:49:00:ed:97:c3:51:1b:32:a7:d1:d7:f2:9d:
                    63:37:58:cd:ac:38:d0:50:a5:77:08:5d:1a:81:17:
                    e9:ae:ff:5b:3a:26:ab:88:a5:09:76:e2:84:49:40:
                    b7:51:af:bc:35:e3:6a:97:ac:63:e8:82:c2:37:13:
                    fa:db:1b:5d:e5:0c:fe:70:46:82:d1:48:66:51:43:
                    a4:75:8e:bd:7f:31:23:72:b6:d1:49:32:ad:52:c0:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A2:29:FF:81:71:38:60:09:67:61:0C:9A:E1:49:C1:5D:0D:0A:48
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32332d3233203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:ae:51:8e:8e:96:e7:c2:ef:f0:33:03:4b:a7:4c:83:a8:88:
         94:db:0b:65:5e:40:09:8e:b6:4e:fd:b8:b5:c7:80:bd:3f:c3:
         70:cf:16:9c:6e:5a:ac:04:98:8a:0c:d2:50:e5:e3:a9:dd:e9:
         9c:e7:c4:4e:f5:d3:1f:68:fa:cf:ee:04:60:93:d1:b7:5f:f0:
         68:7b:b3:5e:fe:ee:8e:7a:ac:0e:0f:9e:a1:0b:0b:ae:88:72:
         90:65:76:83:18:ad:69:7a:8e:10:31:aa:80:af:e6:11:b2:16:
         df:ad:f3:b6:9f:49:f1:62:86:13:ae:28:2b:b2:be:b2:47:a2:
         80:43:21:df:ba:33:2c:c0:20:b6:6d:19:e8:9e:41:98:b6:37:
         6b:e9:57:a8:16:b3:75:1a:8c:81:71:94:65:71:a4:c4:24:44:
         7d:ba:62:bc:a5:14:86:41:92:df:b6:c1:f9:76:1e:0f:98:0f:
         4b:95:56:fa:1e:bd:2c:95:84:09:b1:1d:44:8c:28:2b:f9:29:
         52:3c:25:b9:7a:83:42:6e:8a:f2:17:18:c3:28:cd:3d:31:f4:
         20:ae:aa:67:85:51:0a:fa:1b:ed:ec:c9:29:61:79:ce:0a:93:
         a9:66:02:00:f4:f9:5d:9f:09:bf:57:1f:07:2e:42:d3:dd:94:
         be:03:68:ac
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF7kKqdqM8ZqTVajLaV4a+f/6iFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEyNDQ3Qjg1NDI0QzhDRTMxNjlCMEU2N0NBQkFDQkMz
MzEyNEYxNjAeFw0yNDA0MjMxMjUyNTlaFw0yNTA0MjIxMjU3NTlaMDMxMTAvBgNV
BAMTKDE0QTIyOUZGODE3MTM4NjAwOTY3NjEwQzlBRTE0OUMxNUQwRDBBNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDseUa9KajKejjPyiJ1qzZiIAQm
wJDz9uJP6S2VJbujD8ujdTnOv5UaaQj61IygdQ31gpBxsH81S6Rdvo0666zJwgzb
PC4oG1h/8JiL4XbAvKySAQkHO4ki3MTsjE/kNR7Ov9bbp2hs3tBDbKYg6hjGUyAG
hqBiqR4gho/ku1gSr7my88ZxPD4xho5JPTtx2jnurhFMc1skcJKxoUFTjHApG93h
VxzRSQDtl8NRGzKn0dfynWM3WM2sONBQpXcIXRqBF+mu/1s6JquIpQl24oRJQLdR
r7w142qXrGPogsI3E/rbG13lDP5wRoLRSGZRQ6R1jr1/MSNyttFJMq1SwI9dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFKIp/4FxOGAJZ2EMmuFJwV0NCkgwHwYDVR0j
BBgwFoAUsSRHuFQkyM4xabDmfKusvDMSTxYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVXR2VNVWdla0hKZDg3M1pnSGRjSjk5c1dEbllRelZtSnlVck5QUHRE
OVMvMC9CMTI0NDdCODU0MjRDOENFMzE2OUIwRTY3Q0FCQUNCQzMzMTI0RjE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMjQ0N0I4NTQyNEM4Q0Uz
MTY5QjBFNjdDQUJBQ0JDMzMxMjRGMTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1V0dlTVVnZWtISmQ4NzNaZ0hkY0o5OXNXRG5ZUXpWbUp5VXJOUFB0RDlTLzAv
MzQzNTJlMzIzMzMyMmUzMjMwMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzOTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt6MgwDQYJKoZIhvcNAQELBQADggEBAIyuUY6O
lufC7/AzA0unTIOoiJTbC2VeQAmOtk79uLXHgL0/w3DPFpxuWqwEmIoM0lDl46nd
6ZznxE710x9o+s/uBGCT0bdf8Gh7s17+7o56rA4PnqELC66IcpBldoMYrWl6jhAx
qoCv5hGyFt+t87afSfFihhOuKCuyvrJHooBDId+6MyzAILZtGeieQZi2N2vpV6gW
s3UajIFxlGVxpMQkRH26YrylFIZBkt+2wfl2Hg+YD0uVVvoevSyVhAmxHUSMKCv5
KVI8Jbl6g0JuivIXGMMozT0x9CCuqmeFUQr6G+3sySlhec4Kk6lmAgD0+V2fCb9X
HwcuQtPdlL4DaKw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:00 2025 by rpki-client