Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133332e302f32342d3234203d3e20323637333636.roa
File:                     34352e3233342e3133332e302f32342d3234203d3e20323637333636.roa (raw, json)
Hash identifier:          ItijDTqlkyPDezOyL8PomB045ZdhgUpluaARPIk8UmM=
Subject key identifier:   4B:EF:BA:13:F6:F4:12:1B:50:7D:6A:65:45:9F:55:28:2F:09:CA:7C
Certificate issuer:       /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial:       6C63422D3B63E026C061F9DF112C4FE45E018518
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133332e302f32342d3234203d3e20323637333636.roa
Signing time:             Tue 23 Apr 2024 13:51:13 +0000
ROA not before:           Tue 23 Apr 2024 13:46:13 +0000
ROA not after:            Tue 22 Apr 2025 13:51:13 +0000
asID:                     267366
IP address blocks:        45.234.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:63:42:2d:3b:63:e0:26:c0:61:f9:df:11:2c:4f:e4:5e:01:85:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
        Validity
            Not Before: Apr 23 13:46:13 2024 GMT
            Not After : Apr 22 13:51:13 2025 GMT
        Subject: CN=4BEFBA13F6F4121B507D6A65459F55282F09CA7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:f4:2e:0a:1d:cb:1d:88:28:fd:c3:bd:7a:
                    5c:1f:26:f9:88:ca:6a:24:5c:62:60:e4:bd:b8:3e:
                    1b:4b:9a:f7:2a:1b:f2:5a:68:c5:eb:21:34:e3:8b:
                    af:31:e6:56:82:52:c7:b5:73:5b:e3:7f:0f:fd:24:
                    47:6f:ed:16:57:a1:52:e4:5d:dd:7d:49:c2:1a:1d:
                    0f:86:3a:cc:18:81:2d:dc:21:45:51:2a:d5:5d:53:
                    25:60:06:fc:71:95:ec:bb:79:1e:c6:1a:45:0a:2c:
                    76:52:49:6a:af:84:95:b7:33:84:d3:9b:b5:ce:9f:
                    97:ef:d2:d6:e5:8e:a7:1d:6c:63:5a:25:c0:c4:db:
                    e0:05:da:e8:f6:b1:11:f0:62:79:fd:8a:f7:6c:bc:
                    8f:df:fa:2d:8c:06:2d:9b:6a:03:03:8b:94:e2:74:
                    dd:18:ee:6a:7b:1a:d6:9f:bc:9e:24:8f:ea:a5:b8:
                    81:fd:fe:59:d5:47:a3:7f:a5:4d:eb:8b:17:81:7e:
                    0b:a7:39:0c:4b:21:e0:0b:c1:05:87:3b:a2:a1:92:
                    01:5d:5a:51:d3:48:f1:21:8c:fb:78:6c:eb:7e:73:
                    df:ee:47:a8:05:dc:09:9a:cc:e7:4f:38:b8:97:28:
                    11:fa:e9:44:06:bd:0b:fe:73:35:97:5e:71:d3:bc:
                    dd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EF:BA:13:F6:F4:12:1B:50:7D:6A:65:45:9F:55:28:2F:09:CA:7C
            X509v3 Authority Key Identifier:
                keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133332e302f32342d3234203d3e20323637333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:83:d4:ed:2b:2a:28:5b:45:d1:b1:9a:55:00:5c:c8:d9:b3:
         8d:77:f6:3d:5e:35:e7:d5:e7:5a:b3:80:cc:0e:49:24:97:46:
         3d:fe:02:1d:48:7a:48:ce:2d:a8:8a:6a:32:d0:1e:2c:cb:72:
         9a:12:14:72:d8:51:2b:93:13:37:58:87:24:3e:39:dc:75:b8:
         1c:c7:39:93:58:cd:81:28:81:41:2c:5d:69:7c:8f:9e:62:dc:
         ff:8a:87:c3:52:66:31:cb:b0:b7:15:2e:8b:10:67:5b:f8:d3:
         9e:1e:b3:74:81:ec:19:fc:fc:e6:e8:20:ce:f2:68:99:fc:08:
         40:81:1b:43:e5:47:ea:ee:d7:9f:a0:37:cd:96:c2:d1:43:ae:
         ec:94:fd:3f:c6:df:b9:e8:5e:3a:45:0e:80:5d:22:10:e3:c0:
         60:33:a6:06:c4:f9:54:d4:d2:cb:bb:2f:fa:b8:c7:31:95:e0:
         9d:a3:90:7d:06:9f:1f:c4:1f:cb:2f:d4:ab:1f:ec:9c:49:c8:
         44:aa:40:0b:e0:b9:8a:4f:d8:06:4d:51:09:85:c7:20:1c:a0:
         2e:42:ef:f9:0d:21:0a:23:3a:78:4a:34:dc:5d:c7:02:38:81:
         f3:a5:ac:0b:bf:e5:4b:8b:ff:2a:c5:71:dd:c0:85:d6:68:99:
         c9:44:d0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org