Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230322e302f32332d3233203d3e20323633393830.roa
File:                     34352e3233322e3230322e302f32332d3233203d3e20323633393830.roa (raw, json)
Hash identifier:          rxB/UUQX/jWERS9aD/r8kTLXUcnQswtM6oth2WzrM8Y=
Subject key identifier:   D9:44:2B:40:2F:D8:B2:7D:97:F8:79:0C:5F:24:D4:92:AD:BE:B4:9E
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       2B3AE4BFC77B637E627B7E9C3CC981416D3F401B
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230322e302f32332d3233203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:58:01 +0000
ROA not before:           Tue 23 Apr 2024 12:53:01 +0000
ROA not after:            Tue 22 Apr 2025 12:58:01 +0000
asID:                     263980
IP address blocks:        45.232.202.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3a:e4:bf:c7:7b:63:7e:62:7b:7e:9c:3c:c9:81:41:6d:3f:40:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:53:01 2024 GMT
            Not After : Apr 22 12:58:01 2025 GMT
        Subject: CN=D9442B402FD8B27D97F8790C5F24D492ADBEB49E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:f8:1d:c9:16:2a:ce:c1:d8:c7:48:bd:e1:
                    d6:4e:06:d3:7d:07:b4:6b:d3:88:16:fb:81:26:d0:
                    23:ef:a0:ab:04:ca:ba:9a:58:6e:71:0e:f3:52:9b:
                    a6:d0:7b:cb:af:ed:8e:01:55:ca:67:1f:86:ae:62:
                    7c:e5:fd:f4:65:5c:65:62:50:c9:b9:bf:1e:09:68:
                    74:ea:4a:75:20:14:15:9d:d7:39:df:74:41:56:4a:
                    89:0a:22:34:2d:65:87:2d:0b:45:2e:35:a8:af:78:
                    f6:86:8b:8c:51:72:16:ab:ec:d4:2e:3c:c8:40:96:
                    f9:e7:d0:bb:9e:a7:df:0b:7a:94:5e:ad:57:a3:08:
                    9e:e2:a9:c4:8d:a7:91:6e:68:37:a9:3c:68:8c:3f:
                    57:61:03:e2:86:a6:c8:6e:84:5f:22:d1:65:e2:16:
                    c3:dd:f3:1d:bb:81:6b:b8:2c:a7:0c:58:3f:c0:c9:
                    7a:e9:3c:c7:e5:14:40:60:57:cb:21:15:b8:58:ea:
                    8d:48:f2:b9:a2:ae:db:ad:bf:d2:3c:5b:78:71:0d:
                    e0:1d:c4:e1:1a:85:7b:83:4f:7e:b2:ce:e3:d1:a8:
                    ad:a9:61:34:42:8e:7a:e1:fb:41:6b:ef:7d:b0:36:
                    48:35:af:66:14:08:8a:8a:dc:7f:bd:21:86:02:57:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:44:2B:40:2F:D8:B2:7D:97:F8:79:0C:5F:24:D4:92:AD:BE:B4:9E
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230322e302f32332d3233203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:a6:30:d1:30:a7:28:06:b5:70:d3:71:4f:6b:6f:9b:38:ea:
         33:12:20:55:8e:33:a4:5a:c8:84:7a:2d:24:80:b3:1c:53:90:
         e2:59:c9:c3:3f:25:79:24:9d:ce:53:98:81:df:41:02:b6:0f:
         0e:23:eb:5c:19:f7:52:56:d2:ad:ae:a3:f7:9e:b4:f9:0b:e1:
         37:3a:ca:1c:e5:29:98:95:34:28:10:8e:a1:8f:8b:b5:b2:d3:
         5f:2e:8c:b2:05:81:81:78:2b:78:42:89:80:79:71:0d:1d:65:
         14:a2:86:a0:ed:d9:32:05:30:c3:a0:70:8d:5b:ab:69:b0:a0:
         4d:8d:72:cb:ff:21:54:f2:ab:20:1f:ce:1a:a7:df:a9:2b:37:
         c3:df:ba:ef:37:5c:11:c6:06:10:18:d1:fa:9f:3d:4b:41:48:
         e8:6b:0e:23:ae:fe:2f:62:9c:9b:19:5c:15:ab:b3:db:2f:20:
         33:37:83:ac:fd:bd:95:e2:a3:17:d1:25:a8:c8:e5:f7:5f:4c:
         a2:b9:36:18:c9:3b:ca:8d:5d:58:8a:fc:fe:72:de:76:80:cf:
         11:14:19:8c:2e:a8:22:51:a4:13:e5:09:30:b1:80:0f:11:95:
         73:f1:30:62:3f:b5:5d:9e:79:6e:ae:19:b8:5a:38:c3:cb:a6:
         61:05:5f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org