Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39352e302f32342d3234203d3e20323638333230.roa
File:                     34352e3233382e39352e302f32342d3234203d3e20323638333230.roa (raw, json)
Hash identifier:          XbnzSEWSnLR7MnYE6TUK4W+ZBRg5VrhyqMJU+3+Wbtk=
Subject key identifier:   4E:59:4F:B8:5A:0C:4F:59:35:A3:D8:37:C5:9D:21:5C:B5:68:E5:25
Certificate issuer:       /CN=D0436FEA91781D055687421CAEF481A6EC223F53
Certificate serial:       263B378082A292E19C5C14FA51339F2E4074CD13
Authority key identifier: D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39352e302f32342d3234203d3e20323638333230.roa
Signing time:             Thu 03 Aug 2023 17:00:43 +0000
ROA not before:           Thu 03 Aug 2023 16:55:43 +0000
ROA not after:            Thu 01 Aug 2024 17:00:43 +0000
asID:                     268320
IP address blocks:        45.238.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 15:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3b:37:80:82:a2:92:e1:9c:5c:14:fa:51:33:9f:2e:40:74:cd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0436FEA91781D055687421CAEF481A6EC223F53
        Validity
            Not Before: Aug  3 16:55:43 2023 GMT
            Not After : Aug  1 17:00:43 2024 GMT
        Subject: CN=4E594FB85A0C4F5935A3D837C59D215CB568E525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:12:7d:7f:6f:2c:a3:26:20:2f:1c:b0:d9:
                    d4:3f:52:c8:26:60:ce:6c:28:89:55:84:b9:98:6b:
                    87:fc:3a:60:88:78:5d:a5:28:bb:64:6e:68:73:e2:
                    3b:27:26:f0:40:53:1c:8e:27:7d:c9:a6:fb:71:ea:
                    0a:c3:52:b8:92:04:d0:08:3a:c0:54:32:fe:73:41:
                    1d:c8:a5:da:13:a8:b7:0d:6a:16:a1:58:56:02:42:
                    58:aa:49:1c:16:6d:b5:0c:9d:1a:d4:9d:d7:7c:9c:
                    d4:2a:77:20:97:7d:09:d2:f8:ea:a2:4b:dd:23:e7:
                    88:0f:9b:91:50:e7:ae:21:97:55:c9:09:4b:0a:16:
                    2a:e4:28:05:34:ad:36:da:00:f7:e7:3d:e7:54:c0:
                    9b:e7:5e:32:48:e9:42:a0:27:dc:ac:fc:e2:4d:a9:
                    9f:39:65:d9:94:f4:d3:48:43:4d:c8:4f:b1:a2:ba:
                    09:26:e7:44:cc:b2:24:5f:de:bb:d2:60:79:96:1f:
                    ea:61:23:22:19:bf:9b:b7:23:02:1e:dd:40:fe:08:
                    96:1f:5c:c8:8c:e5:97:68:5c:d3:f2:7b:11:70:32:
                    33:c4:42:11:ce:b6:61:81:3c:b0:df:66:f9:59:fe:
                    41:c7:71:ce:99:93:84:49:58:5a:4e:ac:c3:2b:ae:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:59:4F:B8:5A:0C:4F:59:35:A3:D8:37:C5:9D:21:5C:B5:68:E5:25
            X509v3 Authority Key Identifier:
                keyid:D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/D0436FEA91781D055687421CAEF481A6EC223F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39352e302f32342d3234203d3e20323638333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:f4:b4:02:65:c5:8b:3f:5c:b2:bf:f7:36:64:fb:ce:d2:7a:
         97:88:1e:97:93:88:ed:54:2b:28:fe:89:d4:40:de:6e:60:0f:
         38:2e:f1:52:35:06:5e:4b:47:d2:d3:ce:89:e2:e4:9a:6e:f8:
         1a:88:16:0c:01:a0:de:16:1d:a1:92:f4:c4:82:eb:dc:f4:19:
         af:e9:c9:da:f1:86:93:eb:59:3f:f9:bd:2b:a7:87:21:a8:77:
         9c:a5:53:e6:98:d3:51:a9:1c:89:ca:55:d9:6c:31:f9:54:79:
         35:af:93:74:26:18:41:77:d2:99:e7:ed:b0:19:31:23:31:ad:
         51:a2:e5:f0:83:2c:54:0f:b5:51:b7:b4:93:01:86:3e:46:62:
         e7:03:95:81:63:08:b7:16:22:34:b0:e9:89:b6:cc:7c:ce:0b:
         8a:0e:1b:d5:4d:ab:83:4b:b4:f8:92:5e:60:23:85:96:73:14:
         98:66:df:2e:49:0e:f7:7f:2d:e2:79:0c:cb:22:f9:cd:86:ef:
         2a:e2:8f:b7:a8:fe:6f:04:28:a7:fa:df:26:63:f1:be:4c:e0:
         4c:f0:71:58:1f:f2:97:e9:53:4a:16:9a:19:31:da:59:fe:92:
         dc:a7:65:cb:4d:9a:95:db:b1:8c:9d:b1:0c:03:61:2a:d8:0a:
         1f:e7:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 19:43:25 2024 by rpki-client on console-fra.rpki-client.org