Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133352e302f32342d3234203d3e20323637333636.roa
File:                     34352e3233342e3133352e302f32342d3234203d3e20323637333636.roa (raw, json)
Hash identifier:          3554ajte40uYy98iJUYC0TEIf30GB0BDlae0Lqsbz28=
Subject key identifier:   BE:95:7B:F0:AA:E1:79:F8:9C:E8:6D:79:B0:6D:84:20:75:71:7D:B4
Certificate issuer:       /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial:       17AB505F0AD76C202ACB90E55FD0E8E80F0C1B47
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133352e302f32342d3234203d3e20323637333636.roa
Signing time:             Tue 23 Apr 2024 13:51:20 +0000
ROA not before:           Tue 23 Apr 2024 13:46:20 +0000
ROA not after:            Tue 22 Apr 2025 13:51:20 +0000
asID:                     267366
IP address blocks:        45.234.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ab:50:5f:0a:d7:6c:20:2a:cb:90:e5:5f:d0:e8:e8:0f:0c:1b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
        Validity
            Not Before: Apr 23 13:46:20 2024 GMT
            Not After : Apr 22 13:51:20 2025 GMT
        Subject: CN=BE957BF0AAE179F89CE86D79B06D842075717DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:f4:d7:da:47:75:5e:ba:0c:99:ce:2d:e9:
                    66:8d:f7:8c:86:b1:a5:09:a6:7d:1b:1e:cb:81:6b:
                    8d:93:11:84:a7:8f:48:7e:80:07:76:e9:55:b2:75:
                    2c:fa:29:5a:a7:6d:6a:78:06:aa:10:6d:1e:3e:e3:
                    a6:17:61:58:aa:ed:dd:10:3a:55:76:ab:36:d1:4d:
                    7a:bb:db:92:71:da:50:5d:7b:e1:a7:c8:3f:2e:ff:
                    c3:82:39:3e:f5:12:1b:b0:65:b6:97:94:91:5b:40:
                    88:58:18:4f:4c:b2:eb:2a:f1:78:3c:66:63:d7:c9:
                    e1:e9:64:06:db:b4:c8:dd:d1:be:2f:2b:a2:fa:99:
                    bc:3e:03:75:f0:b9:89:2d:cb:63:fd:5a:81:f1:af:
                    3c:fa:9b:cf:8d:8e:6d:62:89:4e:55:91:98:e7:dd:
                    8c:47:50:d3:95:ed:92:84:0e:66:35:49:26:2e:45:
                    8b:d5:df:5a:53:50:d8:32:60:c7:30:28:16:cb:1d:
                    66:cd:94:3c:94:e4:aa:9d:2b:38:20:b2:9b:06:85:
                    07:b3:15:ef:e2:7c:51:b4:0a:3c:b3:05:a7:26:f8:
                    0b:57:0c:75:10:88:ee:2f:23:6c:25:92:97:62:4b:
                    09:78:8f:2b:27:7d:1f:53:ea:2b:07:59:14:2c:29:
                    e2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:95:7B:F0:AA:E1:79:F8:9C:E8:6D:79:B0:6D:84:20:75:71:7D:B4
            X509v3 Authority Key Identifier:
                keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133352e302f32342d3234203d3e20323637333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:7d:be:eb:26:5d:19:82:98:3c:a5:4d:22:18:e4:80:c8:16:
         25:61:14:ca:cc:9c:57:46:ab:93:7e:70:57:82:0f:de:33:f3:
         fa:32:cb:ea:19:f6:d1:71:6a:57:53:14:4b:0b:0b:69:fb:15:
         24:a3:a4:3b:41:00:84:35:b3:bc:de:74:2c:b8:20:c9:c7:c1:
         e3:4d:97:c0:e4:90:87:f5:d9:16:71:8b:03:6d:d7:f8:e3:98:
         0d:8f:80:79:48:93:b3:90:02:ca:2c:ab:cc:cd:ef:d5:8b:eb:
         38:6e:b6:bc:e4:0c:21:41:0a:98:b5:a5:09:5c:72:4b:b3:77:
         45:ab:f3:1f:65:2c:eb:bd:43:59:fd:e1:9f:fd:57:ad:3d:52:
         37:38:09:53:7e:f7:f7:02:34:d7:07:58:99:e6:67:81:75:6b:
         50:c1:eb:9d:c9:e2:8b:dc:4c:bd:e1:c9:e9:da:56:5d:37:6f:
         c7:a7:8c:1f:03:f9:90:8d:c6:85:98:ff:55:9f:20:41:5d:78:
         0a:d6:1d:eb:04:68:22:ee:83:09:20:88:9a:14:7e:76:56:ca:
         33:b1:1d:d6:3b:1e:0d:b9:35:22:7a:1f:ef:0b:4c:28:f8:24:
         b3:9d:42:6c:1a:2f:63:d5:6d:b2:6b:e8:12:8d:d5:1a:5c:8b:
         63:1c:64:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org