Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130322e302f32332d3233203d3e20323638383039.roa
File:                     34352e3137332e3130322e302f32332d3233203d3e20323638383039.roa (raw, json)
Hash identifier:          qg3bp2k+Hj2O3aoAeModp3JBdl1iIX5Kw/od9nomeEE=
Subject key identifier:   FE:B0:13:3C:BA:8C:3B:12:3D:A5:65:43:8F:98:48:D8:76:63:06:F6
Certificate issuer:       /CN=B37291E6021BB75C026BEA016CB480944391AEB5
Certificate serial:       753FD0FCC735FD2928DF0B869F3BF936BF8A726B
Authority key identifier: B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130322e302f32332d3233203d3e20323638383039.roa
Signing time:             Tue 02 Jul 2024 03:55:08 +0000
ROA not before:           Tue 02 Jul 2024 03:50:08 +0000
ROA not after:            Tue 01 Jul 2025 03:55:08 +0000
asID:                     268809
IP address blocks:        45.173.102.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 05:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3f:d0:fc:c7:35:fd:29:28:df:0b:86:9f:3b:f9:36:bf:8a:72:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B37291E6021BB75C026BEA016CB480944391AEB5
        Validity
            Not Before: Jul  2 03:50:08 2024 GMT
            Not After : Jul  1 03:55:08 2025 GMT
        Subject: CN=FEB0133CBA8C3B123DA565438F9848D8766306F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:81:7c:91:07:46:3c:a3:cf:d7:e7:a6:3a:fa:
                    53:6a:f9:4c:fe:5b:d2:2f:03:49:b5:c7:b6:2b:5a:
                    79:5f:cf:4e:f7:fa:3f:e1:8f:c1:69:05:0a:38:2f:
                    b6:2e:22:8a:95:b8:b1:a9:ac:07:8f:66:fb:83:cf:
                    3d:8a:14:af:d2:08:38:bd:77:5b:6f:fd:2f:34:22:
                    f6:4d:e4:12:94:27:75:94:6d:bf:63:bd:11:55:18:
                    4c:e1:79:84:eb:e4:24:77:84:45:30:8a:8b:9c:5d:
                    86:94:64:59:3c:37:e5:2e:a1:94:14:a7:ea:c9:40:
                    83:d5:a9:b3:0f:4e:52:f1:63:c8:97:89:c9:7e:77:
                    1b:64:04:f0:78:c7:a7:4b:49:f2:68:a1:4f:0a:7b:
                    b6:41:55:20:1a:65:07:72:c5:9f:a5:d3:a3:46:a8:
                    3f:5d:fd:1e:fe:bc:60:bf:a1:0b:18:11:ad:3c:89:
                    6f:1d:72:86:b9:dd:b7:37:e9:ba:0c:0e:3e:36:1b:
                    22:c7:7d:22:37:22:e0:33:35:bf:88:cd:39:20:24:
                    df:6c:22:78:41:fe:8f:8e:16:14:12:e2:d9:0b:40:
                    b0:71:b4:36:bc:f7:df:7f:c4:b2:e9:92:13:b6:47:
                    f7:66:c1:41:d3:bc:d3:85:e6:cf:e7:b3:b3:8a:85:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B0:13:3C:BA:8C:3B:12:3D:A5:65:43:8F:98:48:D8:76:63:06:F6
            X509v3 Authority Key Identifier:
                keyid:B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B37291E6021BB75C026BEA016CB480944391AEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130322e302f32332d3233203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:5c:32:d3:05:2d:d4:18:4f:76:80:6e:eb:e4:16:63:f1:79:
         a9:8c:8b:62:b5:84:37:dd:bf:1e:b7:fc:d6:2d:45:20:9e:87:
         dc:34:d8:73:91:08:f7:0f:97:67:30:a0:6c:64:42:a8:75:87:
         a9:de:fa:20:03:a0:27:52:32:3b:56:71:2b:85:87:48:6c:86:
         18:15:8d:9d:ea:50:1e:11:81:44:7f:79:6c:a5:3f:23:e5:bb:
         d8:5f:ff:2e:7d:d0:7d:e7:06:89:61:4c:53:0f:5e:57:82:74:
         fe:e6:38:2f:79:47:1a:30:16:30:86:28:32:cd:6f:9f:9d:fd:
         45:d0:58:03:ae:47:ba:3b:82:fe:fe:91:6d:5d:37:c8:32:70:
         d3:01:87:02:a5:13:55:0a:75:46:79:37:47:b8:c2:65:29:76:
         ca:2a:7a:6f:bd:44:db:89:6b:67:7c:18:35:17:69:1b:10:0a:
         a3:ee:96:9e:1c:a0:3d:79:b0:07:fd:de:45:cb:8d:00:82:f7:
         81:f6:4c:a1:72:33:d2:fd:1d:ad:ca:99:9d:1e:48:33:7c:98:
         0b:c0:aa:7e:f0:2d:9a:93:04:84:16:7f:ab:a4:7f:db:b5:3a:
         8d:79:e9:2e:44:50:b0:88:92:00:e4:3c:75:b3:9a:e5:bf:09:
         b7:3b:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 06:14:00 2024 by rpki-client on console-ams.rpki-client.org