Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3232382e302f32332d3233203d3e20323638373130.roa
File:                     34352e3137302e3232382e302f32332d3233203d3e20323638373130.roa (raw, json)
Hash identifier:          Z0CylZU50QQiAlsGOqXrJ25OD4Oq4WNiTOZhLKxvPyk=
Subject key identifier:   DF:43:E8:60:12:42:4F:A9:B7:54:19:04:C9:9C:22:E1:A5:2C:A5:00
Certificate issuer:       /CN=5847FB25C967B7747A3862CC818403059C9613CB
Certificate serial:       209C6A9BDC7C57635FB24AFFC741035F2B114BF4
Authority key identifier: 58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3232382e302f32332d3233203d3e20323638373130.roa
Signing time:             Thu 04 Apr 2024 16:45:32 +0000
ROA not before:           Thu 04 Apr 2024 16:40:32 +0000
ROA not after:            Thu 03 Apr 2025 16:45:32 +0000
asID:                     268710
IP address blocks:        45.170.228.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 26 Jul 2024 14:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9c:6a:9b:dc:7c:57:63:5f:b2:4a:ff:c7:41:03:5f:2b:11:4b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5847FB25C967B7747A3862CC818403059C9613CB
        Validity
            Not Before: Apr  4 16:40:32 2024 GMT
            Not After : Apr  3 16:45:32 2025 GMT
        Subject: CN=DF43E86012424FA9B7541904C99C22E1A52CA500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:c1:be:7f:91:d6:5e:15:10:e9:68:34:38:
                    3a:31:22:75:ff:13:b9:49:b3:c7:d8:18:d6:73:e8:
                    90:69:62:75:63:7a:95:db:80:55:4f:2c:f5:17:4c:
                    34:39:1b:f4:54:6f:ca:04:51:af:55:26:71:26:fa:
                    f4:e1:7c:62:5c:7b:df:66:37:94:60:67:26:b4:25:
                    82:5f:7b:c4:7c:ab:45:17:30:35:2f:c5:08:df:8b:
                    f7:16:bb:fb:5b:d7:56:80:0b:19:27:45:b4:a1:ff:
                    10:e4:2f:e9:be:fa:df:bc:84:af:97:48:8e:33:09:
                    2e:46:8d:5d:df:9c:85:35:6c:4e:1c:27:0b:5b:df:
                    77:5f:1e:31:9a:c4:f5:e5:d4:3b:bf:3a:ac:09:c8:
                    d8:b1:57:9d:aa:27:78:29:52:3e:24:b8:ce:30:c1:
                    6e:38:f3:88:e7:0d:12:5e:b9:4a:1b:0b:52:b9:45:
                    84:58:06:e5:ff:72:f1:09:36:f3:95:39:e9:d4:08:
                    76:41:62:4f:01:90:9f:0c:97:c3:00:aa:a5:28:f1:
                    51:71:f4:c8:ef:04:28:e5:0e:cd:61:01:28:a6:c4:
                    bd:58:aa:22:07:cb:d1:6f:8e:75:43:1c:59:ce:0b:
                    03:58:d7:57:3b:dd:21:b9:67:a4:e4:16:be:9f:79:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:43:E8:60:12:42:4F:A9:B7:54:19:04:C9:9C:22:E1:A5:2C:A5:00
            X509v3 Authority Key Identifier:
                keyid:58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/5847FB25C967B7747A3862CC818403059C9613CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3232382e302f32332d3233203d3e20323638373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:4a:7f:14:74:9a:a1:ff:ac:5a:bc:b5:25:38:24:86:1d:30:
         88:f1:05:e5:73:e2:39:14:b6:00:27:28:80:0e:5a:f1:3d:c6:
         b9:d0:10:c4:c9:4a:d1:d0:7a:70:c6:bf:d1:6a:cf:dc:85:99:
         a4:25:45:de:43:50:c0:69:18:62:2c:1e:c9:88:35:77:e6:f4:
         cc:db:21:56:2d:a7:39:c0:15:49:04:b8:f5:c9:12:e3:2a:88:
         e2:ac:b6:31:9c:09:17:f1:c8:c2:58:8b:15:55:6f:57:c8:79:
         e1:fe:7d:a0:e1:dd:03:fe:06:87:c0:85:c5:40:c0:d3:8b:1f:
         18:84:d2:6e:1a:f7:86:ac:82:72:c1:16:3c:f4:9e:5d:f1:d2:
         b2:eb:e8:a9:92:03:75:4c:8f:4a:57:41:6d:3d:7b:b8:6c:21:
         f9:e8:5d:02:2f:e4:6a:61:7c:9c:26:4b:fa:e0:6f:62:74:e5:
         57:87:8e:d6:ee:9c:57:a6:1d:d5:c9:4b:ca:0d:af:eb:73:55:
         9a:24:4c:9d:ad:7f:97:90:57:c3:f3:b6:f5:3b:72:d5:a2:32:
         f3:52:67:ee:72:6c:ac:df:8e:57:c5:18:88:be:21:14:6c:1a:
         f4:91:74:01:86:8d:d3:86:52:64:51:36:d4:b6:e3:93:d4:7f:
         6a:04:b6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 17:23:16 2024 by rpki-client on console-ams.rpki-client.org