Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/34352e3136372e3134382e302f32322d3232203d3e20323638303136.roa
File:                     34352e3136372e3134382e302f32322d3232203d3e20323638303136.roa (raw, json)
Hash identifier:          8zzl6QrReTnWc9AnJV3D69b/mwcUHpqn5Q0odu43/mE=
Subject key identifier:   7E:44:88:2C:D1:C7:71:B5:95:08:67:08:72:68:AA:5D:11:75:87:B9
Certificate issuer:       /CN=C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D
Certificate serial:       52849190E8B389B330B26F81F83AAE878ABB8518
Authority key identifier: C9:B2:EC:A5:8E:E7:8A:CB:4F:2E:6B:6E:1D:C2:A1:85:8E:60:FC:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/34352e3136372e3134382e302f32322d3232203d3e20323638303136.roa
Signing time:             Mon 27 May 2024 14:15:44 +0000
ROA not before:           Mon 27 May 2024 14:10:44 +0000
ROA not after:            Mon 26 May 2025 14:15:44 +0000
asID:                     268016
IP address blocks:        45.167.148.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 27 May 2024 14:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:84:91:90:e8:b3:89:b3:30:b2:6f:81:f8:3a:ae:87:8a:bb:85:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D
        Validity
            Not Before: May 27 14:10:44 2024 GMT
            Not After : May 26 14:15:44 2025 GMT
        Subject: CN=7E44882CD1C771B5950867087268AA5D117587B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:43:57:0e:4c:f4:48:cd:84:6a:03:ec:70:71:
                    4c:d4:26:63:9f:29:83:52:7b:3e:14:c2:82:52:5e:
                    07:15:f0:25:c8:fd:c1:74:86:81:3c:16:60:36:a8:
                    9e:6a:2e:fe:bc:7a:8c:74:28:7c:eb:46:3c:d5:75:
                    31:ce:a7:52:7d:51:84:e9:e1:d0:21:02:1e:28:83:
                    5f:59:b9:88:45:ee:52:ea:09:14:09:1a:10:2e:a6:
                    4e:f0:66:6b:a3:6c:32:f1:ac:91:2a:e4:a6:9c:20:
                    04:c8:5c:13:5d:fc:26:ac:bf:06:f3:12:dd:01:32:
                    9e:9c:1c:aa:e6:2b:03:e0:63:16:b3:6f:23:47:bf:
                    27:58:06:f2:22:fc:b7:a9:0b:80:8a:eb:15:d1:e1:
                    00:7c:e5:ca:cc:6b:8c:1c:39:90:ad:d0:a9:e4:ca:
                    1e:2f:aa:95:97:d7:d9:b2:ed:c4:c4:8e:74:fe:c0:
                    fb:f2:a1:9a:7e:d2:3a:ab:fc:3d:5a:8a:9a:5d:98:
                    ff:ae:e0:54:3c:88:01:c4:a8:77:88:2e:07:24:35:
                    78:c2:f6:dd:6d:93:b0:f6:10:f4:a7:99:43:5e:e1:
                    d7:e7:8f:a8:d2:27:5a:20:d6:03:6e:ac:a4:66:b7:
                    64:96:bd:86:52:f0:86:61:17:b1:e9:6b:8f:d5:76:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:44:88:2C:D1:C7:71:B5:95:08:67:08:72:68:AA:5D:11:75:87:B9
            X509v3 Authority Key Identifier:
                keyid:C9:B2:EC:A5:8E:E7:8A:CB:4F:2E:6B:6E:1D:C2:A1:85:8E:60:FC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/34352e3136372e3134382e302f32322d3232203d3e20323638303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:6d:f3:4c:a9:f1:54:12:29:2f:41:3f:ac:89:c1:f5:1c:e7:
         9b:4c:32:af:76:37:ea:f4:c1:ed:43:80:93:40:12:5e:5f:20:
         8f:52:17:d6:bb:4c:31:6f:77:79:9f:fd:0a:42:59:9e:57:45:
         11:14:c6:e7:6d:ba:20:3e:de:ac:93:26:ed:4c:83:6d:e4:fc:
         36:93:f9:1e:8a:fc:3b:b8:c0:cf:07:6e:f4:fa:d4:da:d0:6e:
         7e:93:f1:96:6e:1e:a1:c9:a4:0a:f9:1c:d7:20:86:1d:1b:d8:
         0d:fb:8b:22:d5:e3:ad:50:d8:95:ef:e8:54:35:3b:f9:8b:53:
         85:83:2a:8f:26:3d:1e:84:e3:a4:0c:15:9c:f0:cc:a1:5a:38:
         1a:33:39:63:41:b2:2b:79:53:64:2f:c7:93:d3:2f:29:19:cb:
         7b:a7:ba:ac:f2:82:af:6d:03:59:2b:71:36:00:58:6e:2d:b4:
         c0:ef:5a:83:33:4e:70:83:0b:cd:1a:d0:0e:b1:3c:78:19:49:
         9a:29:43:24:6d:54:06:12:13:95:4a:2c:42:5f:cd:2e:84:a5:
         8a:3c:a3:ea:e4:73:4f:40:c4:32:bb:07:cb:fc:d9:4e:00:bb:
         4d:75:5e:18:ed:8d:0e:4e:ff:cc:df:8f:0a:7c:42:85:a7:13:
         d5:5c:a9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org