Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/34352e3136302e302e302f32332d3233203d3e20323638333837.roa
File:                     34352e3136302e302e302f32332d3233203d3e20323638333837.roa (raw, json)
Hash identifier:          1kd70cO/9d98Fm9DTOnjLVf+qz5t8i8AwAhn+YkQv+c=
Subject key identifier:   8A:10:9D:DC:8E:9F:F4:72:6D:3A:4B:96:19:4E:73:D3:A2:FA:00:EF
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       14FE560F67DEE7F1552BD7CDA6051552CBBC5547
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/34352e3136302e302e302f32332d3233203d3e20323638333837.roa
Signing time:             Wed 07 Aug 2024 13:14:36 +0000
ROA not before:           Wed 07 Aug 2024 13:09:36 +0000
ROA not after:            Wed 06 Aug 2025 13:14:36 +0000
asID:                     268387
IP address blocks:        45.160.0.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 13:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fe:56:0f:67:de:e7:f1:55:2b:d7:cd:a6:05:15:52:cb:bc:55:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:36 2024 GMT
            Not After : Aug  6 13:14:36 2025 GMT
        Subject: CN=8A109DDC8E9FF4726D3A4B96194E73D3A2FA00EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ee:9b:9d:89:43:34:50:6e:93:72:cc:ad:ee:
                    a7:b5:20:95:58:26:19:d3:11:30:76:83:a8:b4:f7:
                    a0:d4:e8:42:28:4a:c0:0f:4b:f6:1d:26:0e:00:09:
                    94:4d:7b:92:17:59:3d:72:95:a4:8c:ca:f9:46:1b:
                    ee:ad:b8:cf:ab:94:25:a4:b4:bb:ce:fb:d6:0f:16:
                    9d:1d:82:e9:ca:bb:96:a6:56:99:59:8f:8b:48:98:
                    7f:1e:7d:b3:fe:f1:48:3e:b7:4c:64:37:f8:0e:51:
                    38:2f:3a:21:ad:ca:87:ac:82:d2:b7:3a:ac:26:7b:
                    6e:ef:3a:7a:31:96:b4:e5:2a:40:d9:ff:cf:1f:17:
                    81:a4:73:5e:c9:49:08:36:dd:b1:50:59:de:1c:22:
                    a1:96:e8:2c:54:02:9f:ef:57:b1:03:e6:1e:8b:8f:
                    3d:50:a7:d9:a7:65:8f:f7:84:aa:9c:6d:88:4e:5a:
                    ed:9c:b6:e2:16:51:70:45:74:ee:78:84:4b:df:8d:
                    26:c7:c3:ad:51:13:25:95:7f:cf:3a:7a:44:32:c0:
                    d7:fa:79:86:58:ae:5e:2e:70:81:87:88:1d:a2:22:
                    9e:03:e5:70:b6:6d:26:57:6f:ef:b7:db:5a:d8:d7:
                    b5:eb:88:ad:98:06:bb:99:a7:e9:51:d3:6c:cc:e9:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:10:9D:DC:8E:9F:F4:72:6D:3A:4B:96:19:4E:73:D3:A2:FA:00:EF
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/34352e3136302e302e302f32332d3233203d3e20323638333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:59:3d:a2:84:03:64:d0:70:79:fa:18:ca:59:dd:4b:58:88:
         38:85:b0:c5:9a:10:28:f8:9a:48:82:d5:66:e3:8d:3c:b4:d6:
         8f:e2:d7:a3:41:f9:1b:8b:ec:74:7f:20:37:65:5c:a5:0c:42:
         d1:38:85:b6:8c:08:4c:8a:e1:49:cb:8f:3c:bd:da:5d:0a:1d:
         56:e5:8c:39:67:eb:df:bd:02:7b:f0:07:4e:c1:14:5c:ba:02:
         33:94:96:a5:41:91:6f:2e:b8:fe:f3:d6:b3:b0:5b:f5:7c:a3:
         a3:38:04:b7:d3:f8:1b:e0:06:12:df:13:a2:61:2d:c2:db:d9:
         90:39:7e:cc:d3:57:af:60:8f:f5:d7:91:e6:0b:4a:c6:c7:11:
         50:27:31:04:90:29:89:bf:c5:44:f9:87:ef:3e:af:eb:6f:ea:
         d3:17:f2:9d:3f:31:d0:f1:7e:8e:db:0a:77:12:6b:0b:39:20:
         1c:03:01:01:39:91:5a:6d:fa:02:36:c9:ee:cf:29:8e:36:50:
         4a:d6:19:31:e6:a7:5c:4f:a1:47:b5:3d:19:62:d4:9e:dd:03:
         4a:73:5b:4c:48:d7:55:ef:b2:de:64:b1:54:27:1f:9d:56:76:
         26:fe:ee:aa:16:fa:de:5b:7b:65:b3:2c:90:64:74:9a:ee:d1:
         c9:56:be:6c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFP5WD2fe5/FVK9fNpgUVUsu8VUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzUyOTIxODg0MEY0NzFFMzk4Q0Y4RjU4NUI3MUQw
MDdBMkIzNTAeFw0yNDA4MDcxMzA5MzZaFw0yNTA4MDYxMzE0MzZaMDMxMTAvBgNV
BAMTKDhBMTA5RERDOEU5RkY0NzI2RDNBNEI5NjE5NEU3M0QzQTJGQTAwRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD37pudiUM0UG6Tcsyt7qe1IJVY
JhnTETB2g6i096DU6EIoSsAPS/YdJg4ACZRNe5IXWT1ylaSMyvlGG+6tuM+rlCWk
tLvO+9YPFp0dgunKu5amVplZj4tImH8efbP+8Ug+t0xkN/gOUTgvOiGtyoesgtK3
Oqwme27vOnoxlrTlKkDZ/88fF4Gkc17JSQg23bFQWd4cIqGW6CxUAp/vV7ED5h6L
jz1Qp9mnZY/3hKqcbYhOWu2ctuIWUXBFdO54hEvfjSbHw61REyWVf886ekQywNf6
eYZYrl4ucIGHiB2iIp4D5XC2bSZXb++321rY17XriK2YBruZp+lR02zM6WKrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUihCd3I6f9HJtOkuWGU5z06L6AO8wHwYDVR0j
BBgwFoAUuINSkhiED0ceOYz49YW3HQB6KzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMS9CODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAwN0EyQjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM1MjkyMTg4NDBGNDcx
RTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzEv
MzQzNTJlMzEzNjMwMmUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzODMz
MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS2gADANBgkqhkiG9w0BAQsFAAOCAQEAYlk9ooQDZNBw
efoYylndS1iIOIWwxZoQKPiaSILVZuONPLTWj+LXo0H5G4vsdH8gN2VcpQxC0TiF
towITIrhScuPPL3aXQodVuWMOWfr370Ce/AHTsEUXLoCM5SWpUGRby64/vPWs7Bb
9XyjozgEt9P4G+AGEt8TomEtwtvZkDl+zNNXr2CP9deR5gtKxscRUCcxBJApib/F
RPmH7z6v62/q0xfynT8x0PF+jtsKdxJrCzkgHAMBATmRWm36AjbJ7s8pjjZQStYZ
MeanXE+hR7U9GWLUnt0DSnNbTEjXVe+y3mSxVCcfnVZ2Jv7uqhb63lt7ZbMskGR0
mu7RyVa+bA==
-----END CERTIFICATE-----
Generated at Mon Aug 12 17:33:28 2024 by rpki-client on console-ams.rpki-client.org