Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/34352e3138372e3136312e302f32342d3234203d3e20323639353339.roa
File:                     34352e3138372e3136312e302f32342d3234203d3e20323639353339.roa (raw, json)
Hash identifier:          E9OHMWHmqhATjbbYZU0MwTWATXjTk+axu0mGkc91im4=
Subject key identifier:   44:74:81:C9:DC:A7:CC:78:72:15:63:AA:8D:2E:C3:00:AD:41:C1:F4
Certificate issuer:       /CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
Certificate serial:       29F389D33C4F187D8A4E05426EC5AD7AEE09969C
Authority key identifier: 61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/34352e3138372e3136312e302f32342d3234203d3e20323639353339.roa
Signing time:             Thu 04 Apr 2024 15:55:27 +0000
ROA not before:           Thu 04 Apr 2024 15:50:27 +0000
ROA not after:            Thu 03 Apr 2025 15:55:27 +0000
asID:                     269539
IP address blocks:        45.187.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f3:89:d3:3c:4f:18:7d:8a:4e:05:42:6e:c5:ad:7a:ee:09:96:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
        Validity
            Not Before: Apr  4 15:50:27 2024 GMT
            Not After : Apr  3 15:55:27 2025 GMT
        Subject: CN=447481C9DCA7CC78721563AA8D2EC300AD41C1F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:37:f3:80:ef:96:a0:dd:67:d0:3c:4a:d1:
                    91:e1:ef:4b:f9:2f:dd:da:c5:01:91:ef:b1:34:a9:
                    2f:41:3f:59:48:ec:78:d6:8f:da:c7:5b:b7:9f:cf:
                    98:7e:aa:11:57:2b:9e:57:9c:43:0c:bc:cf:19:9f:
                    73:cb:9d:ec:b5:88:24:4d:2d:3f:a9:54:bd:e1:2f:
                    04:b4:eb:da:2c:4c:9b:bb:05:26:d3:1c:fc:33:1a:
                    53:cc:86:00:43:9d:1e:a4:09:40:8f:88:fc:ae:d1:
                    33:74:12:aa:20:40:d8:5e:fe:d5:03:f9:3d:d1:46:
                    3e:79:e6:de:f6:2a:71:53:fa:a3:9c:0b:db:43:22:
                    f3:6f:82:d0:8c:96:d8:38:d5:d5:51:9e:f6:8d:b2:
                    83:08:4c:c8:fa:25:2d:c8:a7:be:75:8c:cb:49:61:
                    45:59:c4:2f:34:ef:52:08:da:e4:f4:d3:06:dd:88:
                    cb:3f:29:57:2e:07:46:ac:b3:76:53:06:17:ff:6b:
                    9d:ff:9f:04:f3:13:3e:f5:34:56:90:df:c5:32:4d:
                    e2:15:ed:4c:89:62:ab:bc:61:e0:34:dd:fa:da:e5:
                    19:30:c5:3e:d7:32:5e:34:e6:c2:d0:77:fc:b5:3c:
                    29:12:b2:39:3d:86:cb:6d:3f:08:80:ee:41:74:1f:
                    f0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:74:81:C9:DC:A7:CC:78:72:15:63:AA:8D:2E:C3:00:AD:41:C1:F4
            X509v3 Authority Key Identifier:
                keyid:61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/34352e3138372e3136312e302f32342d3234203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:17:32:fc:12:c8:fb:e5:94:ae:3c:b9:9e:7e:d2:74:0c:8b:
         01:00:59:b5:0d:99:3b:af:30:92:83:66:82:59:63:6e:36:3d:
         f4:c3:35:98:51:73:70:8e:b7:ca:8a:06:91:12:18:fd:a3:cf:
         bd:b0:5e:66:08:05:24:06:16:b9:95:5b:45:56:7b:64:bf:a0:
         ac:b0:b7:2c:62:6e:6d:10:ab:5f:e0:28:65:ce:b5:64:49:a2:
         41:75:29:f9:1d:77:59:fd:26:03:87:b5:23:77:c6:46:84:64:
         e4:50:a6:38:1e:ec:4a:0e:90:a4:af:0b:5e:99:34:9a:c0:44:
         79:d0:30:1a:bd:84:50:21:7e:e4:e7:94:b3:c9:f6:42:83:ff:
         fd:f3:49:02:95:19:37:37:97:4c:19:b0:b6:33:ce:59:6f:df:
         63:14:a8:1a:35:80:9c:d5:8b:b9:78:fb:b8:ab:d7:e7:5c:c3:
         0b:8d:97:9d:37:5b:e7:ad:15:86:b8:68:0e:2b:2b:a9:2c:8d:
         5b:67:79:14:48:c7:73:0f:34:35:f9:be:a5:45:54:aa:21:50:
         96:3f:93:d5:95:9b:3c:61:ee:8e:ad:62:49:ab:37:8c:9c:ee:
         d7:90:dd:04:2d:ca:d2:b0:55:79:cf:51:e1:b0:1a:1a:7c:bf:
         c0:8d:f7:57
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKfOJ0zxPGH2KTgVCbsWteu4JlpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFCOEJGQzRERjVGNTUzQTVCMzg2OTQwNDVFMEU0N0Yw
RjIzRUI2MzAeFw0yNDA0MDQxNTUwMjdaFw0yNTA0MDMxNTU1MjdaMDMxMTAvBgNV
BAMTKDQ0NzQ4MUM5RENBN0NDNzg3MjE1NjNBQThEMkVDMzAwQUQ0MUMxRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb4TfzgO+WoN1n0DxK0ZHh70v5
L93axQGR77E0qS9BP1lI7HjWj9rHW7efz5h+qhFXK55XnEMMvM8Zn3PLney1iCRN
LT+pVL3hLwS069osTJu7BSbTHPwzGlPMhgBDnR6kCUCPiPyu0TN0EqogQNhe/tUD
+T3RRj555t72KnFT+qOcC9tDIvNvgtCMltg41dVRnvaNsoMITMj6JS3Ip751jMtJ
YUVZxC8071II2uT00wbdiMs/KVcuB0ass3ZTBhf/a53/nwTzEz71NFaQ38UyTeIV
7UyJYqu8YeA03fra5RkwxT7XMl405sLQd/y1PCkSsjk9hsttPwiA7kF0H/AHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURHSBydynzHhyFWOqjS7DAK1BwfQwHwYDVR0j
BBgwFoAUYbi/xN9fVTpbOGlAReDkfw8j62MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RwUWlvN0I5N2h1OEhXSzFtcUFES05BM0toM1M1bUhudktrNjFTY1Jq
MTUvMS82MUI4QkZDNERGNUY1NTNBNUIzODY5NDA0NUUwRTQ3RjBGMjNFQjYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxQjhCRkM0REY1RjU1M0E1
QjM4Njk0MDQ1RTBFNDdGMEYyM0VCNjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0cFFpbzdCOTdodThIV0sxbXFBREtOQTNLaDNTNW1IbnZLazYxU2NSajE1LzEv
MzQzNTJlMzEzODM3MmUzMTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtu6EwDQYJKoZIhvcNAQELBQADggEBAK0XMvwS
yPvllK48uZ5+0nQMiwEAWbUNmTuvMJKDZoJZY242PfTDNZhRc3COt8qKBpESGP2j
z72wXmYIBSQGFrmVW0VWe2S/oKywtyxibm0Qq1/gKGXOtWRJokF1Kfkdd1n9JgOH
tSN3xkaEZORQpjge7EoOkKSvC16ZNJrARHnQMBq9hFAhfuTnlLPJ9kKD//3zSQKV
GTc3l0wZsLYzzllv32MUqBo1gJzVi7l4+7ir1+dcwwuNl503W+etFYa4aA4rK6ks
jVtneRRIx3MPNDX5vqVFVKohUJY/k9WVmzxh7o6tYkmrN4yc7teQ3QQtytKwVXnP
UeGwGhp8v8CN91c=
-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org