Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/34352e3138372e3136302e302f32332d3233203d3e20323639353339.roa
File:                     34352e3138372e3136302e302f32332d3233203d3e20323639353339.roa (raw, json)
Hash identifier:          kdccPNTpsQkWH92lBc5yPrXm0DlbJVKI8sUWcEvtMJg=
Subject key identifier:   78:EA:5C:BD:DD:66:56:C4:B8:77:E6:D3:34:51:32:27:3F:14:F0:18
Certificate issuer:       /CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
Certificate serial:       4084C565BFD8F04BA2BD704577F55D07ECA4D143
Authority key identifier: 61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/34352e3138372e3136302e302f32332d3233203d3e20323639353339.roa
Signing time:             Thu 04 Apr 2024 15:55:29 +0000
ROA not before:           Thu 04 Apr 2024 15:50:29 +0000
ROA not after:            Thu 03 Apr 2025 15:55:29 +0000
asID:                     269539
IP address blocks:        45.187.160.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:84:c5:65:bf:d8:f0:4b:a2:bd:70:45:77:f5:5d:07:ec:a4:d1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
        Validity
            Not Before: Apr  4 15:50:29 2024 GMT
            Not After : Apr  3 15:55:29 2025 GMT
        Subject: CN=78EA5CBDDD6656C4B877E6D3345132273F14F018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2d:78:7f:29:60:71:d6:b9:73:ef:34:0f:b1:
                    ac:fe:95:68:29:b4:66:f1:ec:7f:d9:22:46:ad:d3:
                    e8:0e:21:dc:32:78:12:a6:a7:23:21:f5:8e:df:2a:
                    c8:f1:18:65:01:4d:42:1d:00:09:8e:e9:36:24:8a:
                    97:d4:e1:86:fa:06:f9:4f:95:ed:88:c6:9c:48:51:
                    9a:7b:ee:6a:38:ef:31:d2:d4:c5:44:0d:bb:35:0e:
                    2b:4e:55:a2:e7:7f:57:4e:1c:5a:85:12:b1:0b:7a:
                    60:1f:48:0b:cd:08:2f:c1:b4:3f:ac:d2:3a:89:5f:
                    02:41:7a:16:61:9e:b9:78:c0:fb:ac:52:cf:95:03:
                    f2:9a:91:a6:ed:ea:fd:1f:75:e7:d4:02:a6:c3:de:
                    65:35:aa:db:ad:d6:3f:18:b6:93:a9:97:b9:8c:16:
                    cd:f0:5f:35:17:fa:a1:97:20:61:9b:e3:33:23:7b:
                    ae:c9:03:37:e0:83:a5:ff:f7:56:1c:49:65:f1:55:
                    d9:7e:bf:1d:b3:9b:45:da:36:d1:4f:26:d5:cb:40:
                    b1:5b:b1:4b:dc:78:de:9a:c5:02:a0:21:ef:7d:b2:
                    27:5b:9f:08:46:c2:d3:2c:82:52:aa:a5:a5:26:32:
                    d2:91:cc:0c:75:54:0d:9b:57:04:54:d8:be:cd:f9:
                    4c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EA:5C:BD:DD:66:56:C4:B8:77:E6:D3:34:51:32:27:3F:14:F0:18
            X509v3 Authority Key Identifier:
                keyid:61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/34352e3138372e3136302e302f32332d3233203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:d2:6c:8b:66:58:e8:0c:56:fb:3f:25:9f:f3:f7:70:e5:6e:
         a0:e5:43:4a:e9:ee:fa:35:41:19:8a:20:78:ee:1b:de:40:6b:
         44:94:f2:f4:d9:e7:48:b5:43:05:05:2d:2e:77:98:f7:66:e2:
         c0:21:16:32:13:8b:8a:84:3e:86:56:e0:ba:c9:29:01:8a:6c:
         13:47:3e:f8:81:18:33:92:5a:78:09:94:83:72:92:1d:53:8c:
         bd:3b:44:77:22:aa:8e:7b:2e:5a:06:e3:c0:7e:fe:79:6a:80:
         9f:d8:b1:38:c5:73:b3:a8:58:c0:47:64:f9:ea:c0:72:e9:08:
         0c:ad:16:11:b3:3d:4a:b7:71:bd:7d:b0:49:89:c9:73:9b:26:
         ac:b9:03:21:0c:67:87:b4:91:0b:69:db:04:8f:51:ca:4b:47:
         09:63:0f:a6:d8:31:49:4b:7d:de:9e:1d:d1:92:2c:3f:86:44:
         2e:8c:44:29:44:ec:04:c5:cd:82:42:63:2a:77:1c:4d:d6:6c:
         a9:6d:aa:65:85:54:de:bb:49:c7:f4:ea:4b:24:fc:f2:a0:1f:
         32:80:ca:1e:a8:75:db:3c:16:91:25:e3:94:8b:a7:2e:66:3a:
         e4:a1:9b:ff:a0:61:13:79:73:73:5d:5e:61:75:7e:79:ad:a0:
         bf:e7:16:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org