Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3233302e302f32332d3233203d3e20323638373130.roa
File:                     34352e3137302e3233302e302f32332d3233203d3e20323638373130.roa (raw, json)
Hash identifier:          DR6wMZiPQ2Ch38H87lePKUxmcHrsuMnp/ZcfeMESjEw=
Subject key identifier:   C9:E4:96:CE:50:0B:E8:8C:7B:56:E4:DF:72:F1:F7:BD:88:95:E5:F6
Certificate issuer:       /CN=5847FB25C967B7747A3862CC818403059C9613CB
Certificate serial:       7A192FC9DAE1F8D0D452D51D68489AB9CD415A87
Authority key identifier: 58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3233302e302f32332d3233203d3e20323638373130.roa
Signing time:             Thu 04 Apr 2024 16:45:32 +0000
ROA not before:           Thu 04 Apr 2024 16:40:32 +0000
ROA not after:            Thu 03 Apr 2025 16:45:32 +0000
asID:                     268710
IP address blocks:        45.170.230.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 26 Jul 2024 14:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:19:2f:c9:da:e1:f8:d0:d4:52:d5:1d:68:48:9a:b9:cd:41:5a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5847FB25C967B7747A3862CC818403059C9613CB
        Validity
            Not Before: Apr  4 16:40:32 2024 GMT
            Not After : Apr  3 16:45:32 2025 GMT
        Subject: CN=C9E496CE500BE88C7B56E4DF72F1F7BD8895E5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:68:91:c5:b9:c3:f4:9d:63:54:37:72:cc:
                    bf:b3:f4:a7:e4:18:09:f1:38:36:b3:fc:4f:9b:e9:
                    03:31:10:43:17:79:58:28:3f:b0:70:65:bd:fa:00:
                    0c:9e:17:33:ff:f6:b5:8e:03:47:b5:34:ae:8f:c2:
                    2d:14:90:d2:5a:bb:f0:ed:11:d9:ac:05:72:59:6a:
                    60:ae:35:db:9e:ae:c9:61:36:2e:33:d9:04:af:a1:
                    71:12:e3:f7:2f:40:eb:5a:47:27:9b:09:b3:5a:4a:
                    a2:1d:00:82:4c:2d:70:aa:62:2b:8e:d1:5e:4c:6e:
                    81:74:41:37:d9:35:c0:49:92:ba:23:80:48:4b:3e:
                    3d:23:f6:a1:48:b6:e7:81:a5:8f:27:b8:35:a8:78:
                    c0:32:f2:c0:45:d3:1c:bc:61:50:59:9b:a6:db:49:
                    90:c1:b6:a3:fc:ac:a0:76:bb:39:a7:d2:82:c4:e7:
                    a6:94:c8:c7:1c:bd:74:46:aa:ad:7e:24:1a:ff:c2:
                    dc:22:24:d7:bd:ea:90:8e:a9:ee:a2:f0:be:b0:4a:
                    d6:e7:d3:71:a1:2d:b7:94:af:b4:4a:66:ba:a6:3e:
                    db:90:1c:c6:b8:e9:9e:09:fc:9a:ea:5a:fd:33:99:
                    b2:8d:d5:1b:4e:c3:d3:9e:f3:96:11:7f:74:1e:f9:
                    b7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E4:96:CE:50:0B:E8:8C:7B:56:E4:DF:72:F1:F7:BD:88:95:E5:F6
            X509v3 Authority Key Identifier:
                keyid:58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/5847FB25C967B7747A3862CC818403059C9613CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3233302e302f32332d3233203d3e20323638373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:70:5d:6a:1e:9e:c0:38:a3:9e:fe:ad:73:99:59:de:a0:c0:
         73:17:33:aa:26:13:9f:a8:56:a9:5d:36:0c:24:d6:5b:45:62:
         53:bd:cc:31:20:d2:8e:c2:39:72:93:84:1d:f6:59:cf:d3:3a:
         45:f5:a6:83:1b:c5:77:da:8a:36:81:97:92:23:4e:1b:de:ae:
         d1:be:35:7c:ab:1d:de:f7:60:38:91:a6:31:7c:71:4f:85:f1:
         d1:cd:b1:f6:e1:b2:0d:84:aa:4f:f4:64:d5:8f:64:49:74:01:
         a1:6d:fd:01:40:68:78:37:d9:9f:67:24:57:b4:16:c8:f4:ca:
         d6:59:b1:bf:c5:e7:f5:f7:75:05:ff:00:ab:59:7a:4f:af:45:
         38:58:a8:0d:74:f2:76:c4:12:28:fb:6c:1f:24:86:35:33:0a:
         cb:5d:86:ba:a4:c8:08:4f:0b:09:b4:50:b1:93:78:e8:7f:eb:
         50:b3:4b:13:5b:e7:8b:51:b2:63:80:7c:20:9b:62:ae:20:05:
         e4:dc:b6:35:8e:d3:34:40:77:9b:79:4d:54:31:d3:85:08:9a:
         a3:5e:4a:21:7d:87:f4:c7:8f:b7:d7:d1:ca:e8:ca:dd:66:13:
         f7:3a:db:fc:49:41:01:1f:20:5a:83:c3:27:a8:9f:84:39:d9:
         dc:81:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 17:23:16 2024 by rpki-client on console-ams.rpki-client.org