Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36302e302f32322d3332203d3e20323639343537.roa
File:                     34352e3138372e36302e302f32322d3332203d3e20323639343537.roa (raw, json)
Hash identifier:          9IOoB8Z9xJZW/urIuPPf0hpjo9+eDTnwjJudB6YtpqY=
Subject key identifier:   28:78:A7:7C:EE:5C:2F:C9:16:D7:C6:96:DC:65:7A:BD:33:E0:05:7B
Certificate issuer:       /CN=3361B78662C4F4994A60931D16B5383E3AB4E319
Certificate serial:       5344D28FAF4B8541EA33C769092B9203169266AC
Authority key identifier: 33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36302e302f32322d3332203d3e20323639343537.roa
Signing time:             Wed 03 Apr 2024 23:19:31 +0000
ROA not before:           Wed 03 Apr 2024 23:14:31 +0000
ROA not after:            Wed 02 Apr 2025 23:19:31 +0000
asID:                     269457
IP address blocks:        45.187.60.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 13:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:44:d2:8f:af:4b:85:41:ea:33:c7:69:09:2b:92:03:16:92:66:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3361B78662C4F4994A60931D16B5383E3AB4E319
        Validity
            Not Before: Apr  3 23:14:31 2024 GMT
            Not After : Apr  2 23:19:31 2025 GMT
        Subject: CN=2878A77CEE5C2FC916D7C696DC657ABD33E0057B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:ef:35:9f:bc:84:8a:ce:32:47:19:95:22:
                    96:33:27:dd:4b:dc:89:c9:e3:1f:16:d5:c3:c6:17:
                    b7:67:ed:35:11:4d:1e:ce:a7:2c:49:6c:f7:6f:ec:
                    33:f8:1d:c1:8c:1d:28:ca:20:7c:04:48:df:0f:47:
                    9e:c7:14:f7:e8:19:34:75:5f:a9:7e:a8:24:f7:ca:
                    dd:d7:ab:a9:80:7f:bf:14:b1:cc:f7:25:a7:88:8e:
                    b3:12:78:00:3a:8c:d1:02:3c:11:5e:89:2d:7e:73:
                    79:79:e0:92:52:06:db:67:47:d4:3c:da:5a:2c:f7:
                    5e:18:f9:f3:7e:25:23:4d:ee:92:37:99:5f:ee:c5:
                    4e:03:b0:ae:65:2e:1b:2f:0c:21:7b:b6:2b:b1:e2:
                    53:43:b6:c9:91:7c:56:87:19:fe:20:2d:16:38:3e:
                    f2:91:02:ef:24:1c:7b:64:7f:5f:be:67:4f:57:10:
                    d3:75:ea:6a:0f:84:44:0b:1e:d0:c5:af:5c:d3:85:
                    2d:f7:fa:98:72:54:3c:6e:3b:43:b5:92:ce:af:d8:
                    30:f2:07:6e:40:12:22:9e:c0:58:a5:b2:b5:b3:5f:
                    b8:d0:b6:25:1b:6c:71:0f:7e:12:84:e5:38:2b:38:
                    e4:0c:1b:f8:f8:f3:3f:3f:24:74:77:1e:44:1e:29:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:78:A7:7C:EE:5C:2F:C9:16:D7:C6:96:DC:65:7A:BD:33:E0:05:7B
            X509v3 Authority Key Identifier:
                keyid:33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/3361B78662C4F4994A60931D16B5383E3AB4E319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36302e302f32322d3332203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:1f:56:f9:57:1e:70:3d:e4:82:42:0e:9f:c3:61:51:fd:51:
         c2:d7:de:0e:87:be:2c:15:d1:12:ee:4d:94:fa:b0:85:46:36:
         b4:2f:44:46:10:11:d7:55:7c:3e:d3:e9:1c:cd:81:aa:58:e4:
         c2:27:55:95:48:8c:21:34:ce:35:2e:73:19:ec:8b:43:6d:08:
         0d:c0:4d:b9:e5:c1:6f:8e:60:21:af:08:b1:42:3d:cf:1e:1b:
         25:16:45:ff:8c:7d:aa:26:41:01:9c:1f:c1:dd:e9:c7:5a:ea:
         9a:3a:11:c2:75:b6:66:37:89:a9:5d:12:15:3e:05:be:3e:fc:
         80:9a:b1:ab:60:49:b8:9d:28:0c:e1:dc:bd:e5:2a:cb:f5:6f:
         c9:77:d9:97:7b:f3:80:e3:51:52:12:f2:64:43:d3:9f:f5:dc:
         60:1c:d9:cf:e8:a6:56:6f:ee:eb:f7:9f:08:56:4b:11:df:90:
         94:1c:f4:1f:24:dc:84:86:44:ab:25:bc:86:9d:3d:21:6f:d3:
         6b:fd:76:86:44:f7:1a:49:50:7c:aa:58:25:23:bd:53:71:fc:
         d6:8f:48:dd:a8:15:f9:d4:f9:ad:73:f4:a8:e6:4c:f7:3f:86:
         f2:91:b5:06:e1:4a:46:d2:52:3a:e3:6a:b1:16:b2:e9:f2:3a:
         14:78:5f:42
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUU0TSj69LhUHqM8dpCSuSAxaSZqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM2MUI3ODY2MkM0RjQ5OTRBNjA5MzFEMTZCNTM4M0Uz
QUI0RTMxOTAeFw0yNDA0MDMyMzE0MzFaFw0yNTA0MDIyMzE5MzFaMDMxMTAvBgNV
BAMTKDI4NzhBNzdDRUU1QzJGQzkxNkQ3QzY5NkRDNjU3QUJEMzNFMDA1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLpe81n7yEis4yRxmVIpYzJ91L
3InJ4x8W1cPGF7dn7TURTR7OpyxJbPdv7DP4HcGMHSjKIHwESN8PR57HFPfoGTR1
X6l+qCT3yt3Xq6mAf78Uscz3JaeIjrMSeAA6jNECPBFeiS1+c3l54JJSBttnR9Q8
2los914Y+fN+JSNN7pI3mV/uxU4DsK5lLhsvDCF7tiux4lNDtsmRfFaHGf4gLRY4
PvKRAu8kHHtkf1++Z09XENN16moPhEQLHtDFr1zThS33+phyVDxuO0O1ks6v2DDy
B25AEiKewFilsrWzX7jQtiUbbHEPfhKE5TgrOOQMG/j48z8/JHR3HkQeKdBFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKHinfO5cL8kW18aW3GV6vTPgBXswHwYDVR0j
BBgwFoAUM2G3hmLE9JlKYJMdFrU4Pjq04xkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2RhOUczaXJUM1g5VVEzYzJaNFlRdUN0bUxVek5xN1NzUFR1ZGQ2V2dl
V0MvMS8zMzYxQjc4NjYyQzRGNDk5NEE2MDkzMUQxNkI1MzgzRTNBQjRFMzE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNjFCNzg2NjJDNEY0OTk0
QTYwOTMxRDE2QjUzODNFM0FCNEUzMTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNkYTlHM2lyVDNYOVVRM2MyWjRZUXVDdG1MVXpOcTdTc1BUdWRkNldnZVdDLzEv
MzQzNTJlMzEzODM3MmUzNjMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzQzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbs8MA0GCSqGSIb3DQEBCwUAA4IBAQCcH1b5Vx5w
PeSCQg6fw2FR/VHC194Oh74sFdES7k2U+rCFRja0L0RGEBHXVXw+0+kczYGqWOTC
J1WVSIwhNM41LnMZ7ItDbQgNwE255cFvjmAhrwixQj3PHhslFkX/jH2qJkEBnB/B
3enHWuqaOhHCdbZmN4mpXRIVPgW+PvyAmrGrYEm4nSgM4dy95SrL9W/Jd9mXe/OA
41FSEvJkQ9Of9dxgHNnP6KZWb+7r958IVksR35CUHPQfJNyEhkSrJbyGnT0hb9Nr
/XaGRPcaSVB8qlglI71TcfzWj0jdqBX51Pmtc/So5kz3P4bykbUG4UpG0lI642qx
FrLp8joUeF9C
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org