Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/34352e3232362e342e302f32322d3232203d3e20323636393533.roa
File:                     34352e3232362e342e302f32322d3232203d3e20323636393533.roa (raw, json)
Hash identifier:          1trUqMJQUXvHkOvIc0YKNqFnyqWF7Cmu/Uw8feu6F+k=
Subject key identifier:   28:46:BD:E1:30:4F:AA:E3:8C:06:82:7B:0C:43:79:7D:B4:89:06:0E
Certificate issuer:       /CN=1831D063E0344DB28842F9021C022493CC6A6192
Certificate serial:       7360D31136DCAC77BBE59179647F3817F095337C
Authority key identifier: 18:31:D0:63:E0:34:4D:B2:88:42:F9:02:1C:02:24:93:CC:6A:61:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1831D063E0344DB28842F9021C022493CC6A6192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/34352e3232362e342e302f32322d3232203d3e20323636393533.roa
Signing time:             Mon 23 Sep 2024 15:06:51 +0000
ROA not before:           Mon 23 Sep 2024 15:01:51 +0000
ROA not after:            Mon 22 Sep 2025 15:06:51 +0000
asID:                     266953
IP address blocks:        45.226.4.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 13:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:60:d3:11:36:dc:ac:77:bb:e5:91:79:64:7f:38:17:f0:95:33:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1831D063E0344DB28842F9021C022493CC6A6192
        Validity
            Not Before: Sep 23 15:01:51 2024 GMT
            Not After : Sep 22 15:06:51 2025 GMT
        Subject: CN=2846BDE1304FAAE38C06827B0C43797DB489060E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:e7:1f:1b:62:be:85:e7:c6:90:b7:93:4b:
                    02:db:29:21:90:10:c4:09:97:03:a5:ca:46:35:fc:
                    90:74:13:2f:17:ed:02:d4:16:53:c6:73:76:2a:50:
                    fb:98:3a:94:18:ed:e6:21:6f:87:77:a4:d6:eb:d4:
                    0c:94:cb:fe:42:6e:b5:b3:3a:46:ca:ba:3d:39:6e:
                    44:fb:82:0e:94:06:ff:bc:70:22:c4:63:c4:6e:1a:
                    8f:81:7d:9f:68:eb:4e:53:44:9b:40:d7:f1:a2:ca:
                    c8:cd:2f:ef:d3:30:e3:53:de:8c:d2:aa:56:e7:37:
                    15:1c:58:0e:0e:b1:bb:98:fd:ab:60:85:e9:5a:92:
                    1d:5f:8a:c7:5f:e4:52:1c:92:e1:73:76:d0:dd:d7:
                    60:2b:27:52:fa:73:58:9a:df:23:54:7a:58:2b:ce:
                    76:94:91:d7:0e:74:eb:09:05:c3:e2:e2:fa:11:5f:
                    11:ee:5d:0c:5e:b8:5f:96:25:ca:62:ee:76:30:a5:
                    ae:fc:0d:c1:91:f1:29:91:22:38:a4:6e:03:3b:32:
                    0c:7c:66:39:0a:0e:91:13:aa:09:33:18:c2:e9:88:
                    14:73:9d:69:17:88:75:68:02:50:7c:84:dc:6c:5e:
                    bc:3d:18:a6:3e:25:56:7d:51:49:b7:a4:8d:ab:8e:
                    d2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:46:BD:E1:30:4F:AA:E3:8C:06:82:7B:0C:43:79:7D:B4:89:06:0E
            X509v3 Authority Key Identifier:
                keyid:18:31:D0:63:E0:34:4D:B2:88:42:F9:02:1C:02:24:93:CC:6A:61:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/1831D063E0344DB28842F9021C022493CC6A6192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1831D063E0344DB28842F9021C022493CC6A6192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/34352e3232362e342e302f32322d3232203d3e20323636393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:b7:6e:0f:1c:cc:fc:fa:52:a8:35:75:6f:df:3c:1c:a8:ca:
         d6:92:13:8b:3d:7d:63:a0:5b:11:ca:26:3a:84:27:ce:91:9e:
         f3:28:bb:8c:65:c5:a1:2d:50:fa:21:3f:89:50:df:8d:03:a2:
         69:31:c4:d3:f7:6c:47:df:fb:e5:83:2b:29:e8:cf:f1:67:c0:
         51:88:79:79:5c:8b:bc:d2:95:15:17:81:7c:17:f7:3c:54:9b:
         de:d2:ff:5c:ef:f5:1d:ee:26:fc:48:2c:16:a0:58:28:99:b3:
         82:24:24:5a:44:5e:95:3d:8f:e7:59:aa:7a:b2:c4:65:6e:79:
         f3:41:09:0a:f6:80:9a:3d:de:a0:e0:ce:08:a8:b5:62:2a:7f:
         f1:4a:2c:b8:f7:d2:9e:59:27:e0:35:f4:8e:3e:3d:86:59:84:
         e7:79:a7:87:99:df:93:bf:0d:4e:73:bf:df:3e:6a:2c:01:27:
         cd:5f:21:aa:02:64:8e:82:3c:6b:a6:b5:e3:bc:7a:5e:db:1e:
         0d:5a:24:ab:f8:11:f2:b2:10:8a:2b:50:2a:77:7b:60:07:e9:
         24:68:a0:c0:6e:82:21:05:de:fc:75:b7:b1:38:a9:83:f6:07:
         12:d6:fd:2d:ce:97:82:67:e4:35:21:00:9e:4b:07:c1:7f:66:
         58:db:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----