Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/34352e3136302e302e302f32322d3232203d3e20323638333837.roa
File:                     34352e3136302e302e302f32322d3232203d3e20323638333837.roa (raw, json)
Hash identifier:          vmA1wx+cCDnuPTwWBF5DNyW3GyKqh7quuJotBGoIxqo=
Subject key identifier:   46:98:BE:26:48:21:99:0E:76:8E:09:5D:1F:FD:24:01:9A:A4:7F:87
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       2A0E7CB746C43C2A9FA4137B5B1A44D64A289135
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/34352e3136302e302e302f32322d3232203d3e20323638333837.roa
Signing time:             Wed 07 Aug 2024 13:14:41 +0000
ROA not before:           Wed 07 Aug 2024 13:09:41 +0000
ROA not after:            Wed 06 Aug 2025 13:14:41 +0000
asID:                     268387
IP address blocks:        45.160.0.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 13:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0e:7c:b7:46:c4:3c:2a:9f:a4:13:7b:5b:1a:44:d6:4a:28:91:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:41 2024 GMT
            Not After : Aug  6 13:14:41 2025 GMT
        Subject: CN=4698BE264821990E768E095D1FFD24019AA47F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:99:11:01:e5:3d:c6:95:65:cd:70:04:b6:
                    f0:84:fe:8f:8c:09:71:15:7e:32:67:aa:5b:0f:15:
                    ed:3f:2f:90:6f:7f:c3:0a:80:a2:50:21:fc:a5:2b:
                    61:bb:2e:69:6d:d3:a5:54:f9:67:48:93:b6:23:18:
                    70:1b:18:dd:4b:fe:29:09:5a:f9:c4:57:2c:c5:ef:
                    ea:bb:6a:02:62:b0:1e:7d:af:34:34:4a:e6:5c:72:
                    b9:a3:47:8e:6f:b2:d9:aa:4f:cf:fe:2d:22:72:4c:
                    f9:00:9c:53:43:a9:80:71:f3:6e:b2:50:c1:f8:62:
                    eb:61:d2:2b:81:23:59:46:65:f9:0e:08:c8:32:b6:
                    23:58:cb:fe:88:da:4d:7e:d0:00:c5:2e:d3:be:39:
                    ca:83:e8:e1:8a:9b:fd:35:e2:f8:3c:7c:d4:f3:4f:
                    9e:f4:23:9f:a8:28:1d:29:38:b7:b4:2a:1f:fb:57:
                    47:a5:c0:d6:bc:0b:f7:b8:82:1e:7c:fa:cf:e6:e6:
                    ed:cb:03:d2:a3:48:22:cb:b4:b5:1f:29:2a:86:21:
                    af:db:ad:c8:8c:84:f1:56:5b:a5:dc:1d:f1:9b:15:
                    47:95:c3:c4:ec:14:b1:29:7e:b2:f9:40:c8:b3:2e:
                    d5:e2:6f:c7:cd:74:44:08:26:40:8b:f5:75:7c:da:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:98:BE:26:48:21:99:0E:76:8E:09:5D:1F:FD:24:01:9A:A4:7F:87
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/34352e3136302e302e302f32322d3232203d3e20323638333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:63:43:cb:7b:94:20:30:39:77:62:cf:ca:07:bf:bc:57:37:
         32:97:b2:a4:a7:ee:a3:ee:e1:3b:87:d4:03:c5:cd:af:38:b1:
         9f:31:5d:1c:11:8c:3a:09:e9:2d:72:20:61:2f:85:54:51:7a:
         29:62:8c:de:58:34:2c:7b:c4:11:54:ff:68:69:d5:83:35:44:
         0b:91:5d:c6:67:82:c0:bf:c8:07:6d:32:7e:d4:64:f7:01:db:
         59:a3:7d:3d:ad:2c:52:6e:c4:86:71:24:3b:ff:82:4d:82:86:
         64:f0:0a:5e:ac:a9:79:10:ed:8e:cf:cf:ad:4e:e2:95:48:8c:
         af:0a:dd:f0:56:14:50:c8:a5:b2:79:7c:09:dd:ed:37:2c:f9:
         de:ea:dd:5d:e3:30:83:a2:d6:0b:9c:43:86:84:52:e5:68:ec:
         0e:a2:76:b4:c7:7f:6e:48:6c:71:f5:38:4f:11:3a:1e:f7:b8:
         24:fe:55:63:ff:75:93:b7:db:ad:b9:69:a4:4f:0e:6f:45:f0:
         f9:10:28:31:d4:9c:b0:13:49:c3:fe:9e:7f:ed:7a:6c:41:10:
         5d:7a:a2:c8:d7:fb:10:f7:c5:2c:64:38:81:3b:4f:00:bd:7b:
         73:a0:1f:83:a7:0e:d6:b7:01:56:72:c1:cd:38:88:ed:60:99:
         a1:1b:91:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 17:33:28 2024 by rpki-client on console-ams.rpki-client.org