Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/34352e3136302e302e302f32322d3232203d3e20323632343434.roa
File:                     34352e3136302e302e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          PoCib7i4LfoatuoBHxz5R6oXOJAPfQ2rdGPhRUHKw0M=
Subject key identifier:   EF:7C:A6:59:47:6B:59:99:E4:51:65:99:74:04:D6:F1:09:EC:53:6A
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       1C93D33530D377A678CEF0A1E163D19D0F2AC46A
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/34352e3136302e302e302f32322d3232203d3e20323632343434.roa
Signing time:             Mon 12 Aug 2024 13:53:30 +0000
ROA not before:           Mon 12 Aug 2024 13:48:30 +0000
ROA not after:            Mon 11 Aug 2025 13:53:30 +0000
asID:                     262444
IP address blocks:        45.160.0.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 15:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:93:d3:35:30:d3:77:a6:78:ce:f0:a1:e1:63:d1:9d:0f:2a:c4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug 12 13:48:30 2024 GMT
            Not After : Aug 11 13:53:30 2025 GMT
        Subject: CN=EF7CA659476B5999E45165997404D6F109EC536A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:22:78:49:08:7c:96:f8:43:d9:49:46:a5:
                    8f:e8:b1:9b:3b:75:47:97:5f:c6:35:ef:d8:09:f4:
                    f3:6d:85:32:0b:69:a2:b6:c9:7e:24:c9:55:10:68:
                    40:ab:fd:eb:6d:aa:6d:d5:2d:5e:a0:d4:f5:0c:89:
                    3c:41:db:29:35:8c:2f:ea:39:df:cf:5e:88:37:cb:
                    21:b3:dc:a1:9e:ca:b0:27:59:60:a8:f5:4e:72:18:
                    b4:3f:7c:72:68:e2:72:c9:27:2a:bf:a3:27:7e:7d:
                    c2:76:34:49:f4:f1:53:cf:3f:99:ba:13:c9:32:cf:
                    41:60:3b:13:b8:8d:75:37:9b:76:70:76:49:d3:cf:
                    93:38:26:b9:ae:7c:8b:d5:de:e8:75:99:e8:99:ec:
                    de:61:5f:bd:e3:be:90:04:3d:70:4d:4b:80:6a:a7:
                    26:df:32:94:9a:fe:cc:96:d4:53:ef:d6:b1:72:05:
                    71:36:15:b8:3c:de:c1:17:1b:cf:d2:e8:e3:3f:f3:
                    e2:38:28:a1:d1:0c:17:46:7c:6f:53:02:91:c4:5b:
                    21:db:26:26:fc:bb:75:9e:8f:ba:e8:b3:ff:86:0c:
                    db:ce:2f:de:ec:19:aa:71:bc:c0:e7:0e:2a:0a:76:
                    f8:4d:0a:18:ba:22:05:ff:54:73:ae:aa:be:c5:28:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7C:A6:59:47:6B:59:99:E4:51:65:99:74:04:D6:F1:09:EC:53:6A
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/34352e3136302e302e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:4c:7c:fb:01:2e:31:cd:90:30:63:8a:32:71:1d:eb:53:d0:
         a9:d0:f8:dc:69:31:ea:b4:89:cc:2b:a2:38:1d:16:37:5b:7a:
         18:db:03:9d:5b:36:0d:98:1c:3f:81:8a:dd:41:b2:85:a8:ce:
         fe:60:f0:00:a7:bc:f9:5e:72:9e:01:30:6e:9a:f4:9f:8e:61:
         62:dd:3f:1e:4f:2f:e1:8c:1e:ec:f7:d4:ca:af:9d:11:d6:47:
         20:39:73:ca:ca:cf:3a:fb:97:83:6b:7f:10:bc:d3:0d:c3:c6:
         de:f1:bf:55:97:1d:f6:99:ef:d9:81:37:4f:5b:4a:26:4b:04:
         d1:d2:f1:b6:8d:97:cd:d9:89:b6:a4:0d:ee:00:51:c3:81:00:
         69:c0:4e:14:0c:3b:dc:0d:4d:3f:e4:e3:e2:61:94:6d:64:e4:
         b2:15:32:02:46:42:14:c9:d0:51:6b:49:fb:fd:b0:38:98:ac:
         8f:3c:4f:d9:74:2d:fc:d0:f4:bf:27:f3:99:d5:78:62:b8:4a:
         38:a1:a0:ee:dd:a5:04:18:83:9a:d6:82:f1:9c:2d:f6:71:d6:
         87:a6:24:b7:96:7d:67:b0:fd:f8:f6:3d:05:dd:2c:dd:1e:9c:
         15:0a:8c:aa:b7:7e:e4:9c:1f:a9:cc:ec:c2:0b:d5:1c:2f:40:
         48:d3:6e:47
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHJPTNTDTd6Z4zvCh4WPRnQ8qxGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzUyOTIxODg0MEY0NzFFMzk4Q0Y4RjU4NUI3MUQw
MDdBMkIzNTAeFw0yNDA4MTIxMzQ4MzBaFw0yNTA4MTExMzUzMzBaMDMxMTAvBgNV
BAMTKEVGN0NBNjU5NDc2QjU5OTlFNDUxNjU5OTc0MDRENkYxMDlFQzUzNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTiJ4SQh8lvhD2UlGpY/osZs7
dUeXX8Y179gJ9PNthTILaaK2yX4kyVUQaECr/ettqm3VLV6g1PUMiTxB2yk1jC/q
Od/PXog3yyGz3KGeyrAnWWCo9U5yGLQ/fHJo4nLJJyq/oyd+fcJ2NEn08VPPP5m6
E8kyz0FgOxO4jXU3m3ZwdknTz5M4JrmufIvV3uh1meiZ7N5hX73jvpAEPXBNS4Bq
pybfMpSa/syW1FPv1rFyBXE2Fbg83sEXG8/S6OM/8+I4KKHRDBdGfG9TApHEWyHb
Jib8u3Wej7ros/+GDNvOL97sGapxvMDnDioKdvhNChi6IgX/VHOuqr7FKHrlAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU73ymWUdrWZnkUWWZdATW8QnsU2owHwYDVR0j
BBgwFoAUuINSkhiED0ceOYz49YW3HQB6KzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMS9CODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAwN0EyQjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM1MjkyMTg4NDBGNDcx
RTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzEv
MzQzNTJlMzEzNjMwMmUzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMjM0
MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2gADANBgkqhkiG9w0BAQsFAAOCAQEAPUx8+wEuMc2Q
MGOKMnEd61PQqdD43Gkx6rSJzCuiOB0WN1t6GNsDnVs2DZgcP4GK3UGyhajO/mDw
AKe8+V5yngEwbpr0n45hYt0/Hk8v4Ywe7PfUyq+dEdZHIDlzysrPOvuXg2t/ELzT
DcPG3vG/VZcd9pnv2YE3T1tKJksE0dLxto2XzdmJtqQN7gBRw4EAacBOFAw73A1N
P+Tj4mGUbWTkshUyAkZCFMnQUWtJ+/2wOJisjzxP2XQt/ND0vyfzmdV4YrhKOKGg
7t2lBBiDmtaC8Zwt9nHWh6Ykt5Z9Z7D9+PY9Bd0s3R6cFQqMqrd+5JwfqczswgvV
HC9ASNNuRw==
-----END CERTIFICATE-----
Generated at Mon Aug 12 18:21:42 2024 by rpki-client on console-fra.rpki-client.org