Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/34352e3138372e3136302e302f32322d3232203d3e20323639353339.roa
File:                     34352e3138372e3136302e302f32322d3232203d3e20323639353339.roa (raw, json)
Hash identifier:          3kQt9FDPiIVv1pX1hoyQKzkCAqCwKzxBx347rQfmzqQ=
Subject key identifier:   69:D1:23:6C:96:8A:EA:4D:6E:0A:90:50:83:5A:90:AE:6D:D5:D2:BA
Certificate issuer:       /CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
Certificate serial:       0F47DC1D041461A87093BABAB78A23C98BC57E5E
Authority key identifier: 61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/34352e3138372e3136302e302f32322d3232203d3e20323639353339.roa
Signing time:             Thu 04 Apr 2024 15:55:27 +0000
ROA not before:           Thu 04 Apr 2024 15:50:27 +0000
ROA not after:            Thu 03 Apr 2025 15:55:27 +0000
asID:                     269539
IP address blocks:        45.187.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:47:dc:1d:04:14:61:a8:70:93:ba:ba:b7:8a:23:c9:8b:c5:7e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
        Validity
            Not Before: Apr  4 15:50:27 2024 GMT
            Not After : Apr  3 15:55:27 2025 GMT
        Subject: CN=69D1236C968AEA4D6E0A9050835A90AE6DD5D2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:c7:47:01:33:e1:28:12:cf:e7:15:df:f4:
                    43:42:3f:e5:a8:93:00:ca:66:75:68:eb:4c:12:f8:
                    4e:6e:0d:36:a9:cb:ca:a7:16:c9:eb:bf:ac:6e:0a:
                    f6:2e:4d:46:18:65:6f:0c:e7:85:df:b7:27:37:30:
                    8e:fc:8a:db:e8:f1:b2:18:62:04:c5:61:9f:10:92:
                    38:e6:f3:fc:30:91:50:f0:ca:80:e8:fc:ea:7b:09:
                    86:a2:cd:6b:0e:d4:6f:46:1d:0a:31:62:cc:de:b7:
                    a9:58:77:83:7b:20:2b:c3:d4:1b:92:42:2b:56:8b:
                    b7:d5:0b:ae:49:73:7c:85:52:fa:05:da:b3:9c:71:
                    27:ca:da:71:f7:60:7e:6d:83:cc:a4:c0:bc:52:21:
                    bb:f2:b6:d3:21:73:b5:d8:fa:e8:f4:1e:12:b0:20:
                    fa:b0:2c:a1:ca:1d:73:cc:70:10:d8:7f:ac:93:fd:
                    50:ed:c3:c3:5f:29:e1:61:f7:f3:ed:60:e7:4a:f4:
                    14:24:89:16:b7:c8:27:63:ef:bc:4c:c4:79:10:13:
                    7f:c7:a9:22:5d:37:b4:57:a4:cd:84:36:5e:02:2f:
                    0e:11:3c:b3:36:02:5f:33:63:09:7b:56:d4:89:05:
                    65:f7:6f:db:46:a3:e1:0d:1e:db:09:09:8e:c2:0b:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D1:23:6C:96:8A:EA:4D:6E:0A:90:50:83:5A:90:AE:6D:D5:D2:BA
            X509v3 Authority Key Identifier:
                keyid:61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/34352e3138372e3136302e302f32322d3232203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:40:5b:d6:56:29:d9:59:5c:b4:e5:11:ae:d3:6c:e9:22:4c:
         ab:d0:47:fa:69:e3:e0:53:78:9e:15:fc:34:47:79:50:7f:3e:
         63:c1:d8:c5:3c:17:15:22:d3:fc:5f:f6:da:f8:cb:66:09:d7:
         ce:8f:83:28:a8:31:80:91:5e:fd:86:23:ab:d4:02:77:74:96:
         a2:2f:c4:57:e0:5b:b7:60:4a:14:b3:e5:c3:5c:10:49:23:ea:
         07:1f:52:d3:ce:67:8a:35:d7:29:a6:fc:c3:b1:da:82:90:77:
         5e:72:5e:56:01:18:d0:03:e9:ea:cb:a6:18:11:2a:1d:4d:7a:
         a1:c0:5a:9a:e7:ee:16:ec:8d:f1:fb:9c:91:f7:36:d1:dc:1b:
         e2:16:65:5d:c6:93:82:f7:4c:6d:65:1a:39:a0:5f:e5:66:06:
         70:09:48:51:3a:a8:03:59:ab:cc:8f:bd:e7:f3:e0:43:e1:71:
         81:11:d3:55:93:56:ed:1c:fc:9b:4e:a1:7d:95:c9:7e:13:ce:
         09:af:fc:5b:9c:56:1a:39:93:fc:54:a1:cb:41:40:5d:ba:79:
         63:a1:cd:54:cc:05:54:87:6b:2c:77:23:53:46:c0:f5:f9:0c:
         de:10:76:0d:64:3d:b3:e9:67:1f:bf:d6:0a:c4:3f:57:31:42:
         bd:de:77:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org