Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130302e302f32332d3233203d3e20323638383039.roa
File:                     34352e3137332e3130302e302f32332d3233203d3e20323638383039.roa (raw, json)
Hash identifier:          JM5Y5ue7IDb9HUrJGlYZnOwarDh0IbnOm93aiI9rAaE=
Subject key identifier:   A6:0F:CF:7A:68:F7:F2:53:EB:EE:71:CC:01:67:B5:21:E7:B6:52:38
Certificate issuer:       /CN=B37291E6021BB75C026BEA016CB480944391AEB5
Certificate serial:       07BBD114623B5559D109C6AEBD173BB5F066A806
Authority key identifier: B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130302e302f32332d3233203d3e20323638383039.roa
Signing time:             Tue 02 Jul 2024 03:55:03 +0000
ROA not before:           Tue 02 Jul 2024 03:50:03 +0000
ROA not after:            Tue 01 Jul 2025 03:55:03 +0000
asID:                     268809
IP address blocks:        45.173.100.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 05:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bb:d1:14:62:3b:55:59:d1:09:c6:ae:bd:17:3b:b5:f0:66:a8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B37291E6021BB75C026BEA016CB480944391AEB5
        Validity
            Not Before: Jul  2 03:50:03 2024 GMT
            Not After : Jul  1 03:55:03 2025 GMT
        Subject: CN=A60FCF7A68F7F253EBEE71CC0167B521E7B65238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f8:55:57:18:2c:a4:b6:64:ee:6c:6a:5b:3e:
                    24:26:e0:ac:17:91:07:0d:b7:aa:7b:e2:d3:6d:e5:
                    54:cd:89:a4:26:5f:67:69:97:55:a1:9e:38:44:2c:
                    1e:cf:26:c4:a3:ac:d3:25:1e:7c:77:c8:27:35:72:
                    d6:10:c0:25:e6:ff:6f:4e:0f:88:bc:7b:39:96:59:
                    ca:e0:1a:f2:ff:c6:5b:4c:cd:1e:73:7d:88:fe:05:
                    cd:38:27:01:e0:60:34:d0:cd:82:43:b1:32:9a:a6:
                    7b:38:c0:78:df:09:3b:57:cc:56:80:b2:d3:16:44:
                    4d:52:4d:9b:b6:a6:66:5a:c7:90:6d:b7:ac:46:05:
                    48:5e:ce:b8:ea:14:12:71:e4:7f:1b:4c:a7:15:7d:
                    45:0c:d0:e5:db:dd:fd:bc:4f:57:90:4c:07:b1:5c:
                    d2:f0:e6:d8:f2:12:ff:36:df:c9:7c:f1:b9:0a:5b:
                    68:df:20:f4:d1:2e:b8:cd:15:42:75:8b:b7:bc:4b:
                    53:9c:2e:33:1f:2a:83:47:5a:37:28:55:25:09:35:
                    42:04:f6:bd:1d:8a:d6:3c:34:73:43:8a:51:95:f0:
                    17:59:c5:d9:85:1e:82:64:07:6a:ff:93:99:27:67:
                    40:35:b7:2f:98:0d:e4:7f:55:91:99:42:90:2b:48:
                    ad:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0F:CF:7A:68:F7:F2:53:EB:EE:71:CC:01:67:B5:21:E7:B6:52:38
            X509v3 Authority Key Identifier:
                keyid:B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B37291E6021BB75C026BEA016CB480944391AEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130302e302f32332d3233203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:43:46:5d:45:5b:32:fb:f2:f6:c7:d2:df:1d:94:f2:10:26:
         38:ba:19:61:bb:09:25:e1:e8:89:e9:d0:8b:76:8d:64:df:e1:
         92:a0:36:23:88:43:dd:4b:74:9c:31:73:df:32:40:57:87:8c:
         52:bd:33:7f:06:6e:67:85:22:10:0c:98:20:fa:b0:57:69:73:
         8a:61:ae:d7:65:80:6d:e4:e7:92:92:5e:46:2f:16:0b:18:91:
         41:0f:6d:dd:45:33:66:8e:e0:39:ea:e8:cc:2d:36:d6:9c:cb:
         50:19:79:0d:65:05:81:9c:45:00:30:c6:50:cc:3d:4d:ff:e6:
         ef:a9:ca:b7:04:76:4f:f9:f0:78:cd:f3:14:b7:d8:4e:5c:e3:
         2d:87:10:8f:e0:78:89:b3:b8:f2:88:e3:0c:da:f6:13:84:58:
         09:1e:4b:05:45:7e:e5:8c:f4:85:b7:38:1f:13:be:37:7e:9c:
         e8:a5:fb:0f:f8:6d:b9:60:f9:fb:7d:68:10:97:f5:4e:64:3c:
         f4:65:da:ae:eb:59:af:a8:c1:a5:14:53:3b:1c:13:8e:65:48:
         58:ce:3b:2f:cf:60:2e:b2:27:a3:9e:9d:7f:98:52:6f:98:3d:
         23:b7:71:bc:9b:74:66:6c:40:f3:05:f7:4b:b6:f3:84:3d:f5:
         1d:4b:d5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 06:10:59 2024 by rpki-client on console-fra.rpki-client.org